amazon-web-services - Amazon ElasticBeanStalk Worker Tier 无法连接到 SQS

Question

目前我在允许我的工作人员连接到 SQS 时遇到问题。这是日志:

2014-07-21T21:37:26Z error: AWS::SQS::Errors::AccessDenied: Access to the resource https://sqs.eu-west-1.amazonaws.com/343152361204/dev-compose-request is denied.

开发撰写请求 是队列的名称。

我可以将来自其他 ElasticBeanStalk WebApp(服务器层)的消息发布到此队列中。

我的 Worker Tier 位于允许任何出站连接的安全组中。

Answer 1

听起来类似于:AWS Beanstalk Worker can't start SQS daemon aws-sqsd

http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.iam.roles.aeb.html#AWSHowTo.iam.policies.actions.worker

您能否确保与您的环境关联的 IAM 实例配置文件(可以命名为 aws-elasticbeanstalk-ec2-role，但也可以命名为其他名称)具有以上链接中列出的所有权限？
(复制如下供引用)

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "QueueAccess",
      "Action": [
        "sqs:ChangeMessageVisibility",
        "sqs:DeleteMessage",
        "sqs:ReceiveMessage"
      ],
      "Effect": "Allow",
      "Resource": "*"
    },
    {
      "Sid": "MetricsAccess",
      "Action": [
        "cloudwatch:PutMetricData"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}