rage.fail

aws-sqs-send-message

explicit aws emits CanWriteData

match (effective permission)

{ "action": "sqs:SendMessage", "resource_type": "AWS::SQS::Queue" }

emit

source type	`Identity`
target type	`Queue`
source	`<principal>`
target	`<SQS queue node>`
permissions	`sqs:SendMessage`
conditions	`iam_permission` `resource_policy`

Narrative

{principal.name} can send messages to {queue.name} (sqs:SendMessage).

Raw rule rules/explicit/aws-sqs.yaml

id: aws-sqs-send-message
emits: CanWriteData
applies_to:
- aws
match_effective_permission:
  action: sqs:SendMessage
  resource_type: AWS::SQS::Queue
emit:
  source_type: Identity
  target_type: Queue
  source: <principal>
  target: <SQS queue node>
  permissions:
  - sqs:SendMessage
  conditions:
  - iam_permission
  - resource_policy
  narrative: '{principal.name} can send messages to {queue.name} (sqs:SendMessage).'