Accenture MDR Quick Start Guide in Configuring AWS Simple Queue Service (SQS) with S3 Storage

This quick start guide will help Accenture MDR customers in Configuring AWS Simple Queue Service (SQS) with S3 storage.

The document includes the following topics:

1 Steps to Configure SQS
2 Attaching Created SQS with S3

Steps to Configure SQS

Sign in to the AWS Console
Go to the Simple Queue Services (SQS)
Choose create queue
On the Create New Queue page , make sure the correct region has been selected and then type the Queue Name
Select Standard as the type of Queue.

6. In the configuration section, provide MxDR recommended parameters as per below snapshot:

7. Under Access Policy please select advanced option and provide the policy as below:

Make sure to replace placeholders with the actual values.

{
  "Version": "2008-10-17",
  "Id": "__default_policy_ID",
  "Statement": [
    {
      "Sid": "__sender_statement",
      "Effect": "Allow",
      "Principal": {
        "Service": "s3.amazonaws.com"
      },
      "Action": "SQS:SendMessage",
      "Resource": "arn:aws:sqs:<region>:<accountID>:<SQS queue name>",
      "Condition": {
        "ArnLike": {
          "aws:SourceArn": "<S3BucketArn>"
        }
      }
    },
    {
      "Sid": "__receiver_statement",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::<accountID>:root"
      },
      "Action": [
        "SQS:ChangeMessageVisibility",
        "SQS:DeleteMessage",
        "SQS:ReceiveMessage",
        "sqs:GetQueueAttributes",
        "sqs:GetQueueUrl"
      ],
      "Resource": "arn:aws:sqs:<region>:<accountID>:<SQS queue name>"
    }
  ]
}

Below screenshot for reference:

8. Enable encryption as required

9. Provide tags as per your organization’s policy

10. Click on Create queue.

Attaching Created SQS with S3

Navigate to S3 Dashboard and select the desired S3 Bucket which needs to be monitored for Notifications.
Navigate to Properties Tab

3. Under properties navigate to the Event Notifications and click on Create Event Notification

4. Under general configuration, provide the name to the notification and provide any prefix if required.

5. In Event type, select All Object Create Events.

6. Under Destination, select SQS Queue as destination.

7. Choose the SQS queue we have created earlier and which you want to map to S3.

8. Save Changes