Add permissions

Author: stevebux

infrastructure/terraform/components/api/module_sqs_amendments_queue.tf

@@ -16,4 +16,32 @@ module "amendments_queue" {
   visibility_timeout_seconds = 60
 
   create_dlq          = true
+  sqs_policy_overload = data.aws_iam_policy_document.amendments_queue_policy.json
+}
+
+data "aws_iam_policy_document" "amendments_queue_policy" {
+  version = "2012-10-17"
+  statement {
+    sid    = "AllowSNSToSendMessage"
+    effect = "Allow"
+
+    principals {
+      type        = "Service"
+      identifiers = ["sns.amazonaws.com"]
+    }
+
+    actions = [
+      "sqs:SendMessage"
+    ]
+
+    resources = [
+      "arn:aws:sqs:${var.region}:${var.aws_account_id}:${local.csi}-amendments-queue.fifo"
+    ]
+
+    condition {
+      test     = "ArnEquals"
+      variable = "aws:SourceArn"
+      values   = [module.eventsub.sns_topic_supplier.arn]
+    }
+  }
 }