將 s3 Bucket 乘以 tigger 的 aws sqs 的策略是什么

Question

我有 S3 存儲桶，在對象放置事件中，我觸發 SQS 隊列並在我的實例中接收隊列並處理它，

sqs的訪問策略是

{
  "Version": "2012-10-17",
  "Id": "arn:aws:sqs:ca-central-1:xxxxxxxxxxxx:abcd",
  "Statement": [
    {
      "Sid": "example-statement-ID",
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "SQS:SendMessage",
      "Resource": "arn:aws:sqs:ca-central-1:xxxxxxxxxxxx:abcd",
      "Condition": {
        "ArnLike": {
          "aws:SourceArn": "arn:aws:s3:::<bucket name>"
        }
      }
    }
  ]
}

它對我來說很好，但現在我想在兩個不同的存儲桶中使用相同的隊列，我嘗試了策略

{
  "Version": "2012-10-17",
  "Id": "arn:aws:sqs:ca-central-1:xxxxxxxxxxxx:abcd",
  "Statement": [
    {
      "Sid": "example-statement-ID",
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "SQS:SendMessage",
      "Resource": "arn:aws:sqs:ca-central-1:xxxxxxxxxxxx:abcd",
      "Condition": {
        "ArnLike": {
          "aws:SourceArn": "arn:aws:s3:::<bucket name>",
          "aws:SourceArn": "arn:aws:s3:::<bucket name2>"
        }
      }
    }
  ]
}

但是我沒有工作，所以有人請幫我找到在兩個不同的存儲桶中使用相同的 sqs queqe 的訪問策略是什么

Answer 1

您當前的政策不是有效的 JSON。 要指定多個ArnLike值，您需要使用列表：

    "ArnLike": {
      "aws:SourceArn": ["arn:aws:s3:::<bucket name>",
             "arn:aws:s3:::<bucket name2>"]
    }