Amazon ElasticBeanStalk工作器层无法连接到SQS

Question

目前我有问题允许我的工作人员连接到SQS.这是日志:

2014-07-21T21:37:26Z error: AWS::SQS::Errors::AccessDenied: Access to the resource https://sqs.eu-west-1.amazonaws.com/343152361204/dev-compose-request is denied.

dev-compose-request是队列的名称.

我是能够从我的其他Web应用程序ElasticBeanStalk(服务器层)发布消息到这个队列.

My Worker Tier位于一个允许任何出站连接的安全组中.

Answer 1

听起来类似于:AWS Beanstalk Worker无法启动SQS守护程序aws-sqsd

http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.iam.roles.aeb.html#AWSHowTo.iam.policies.actions.worker

您是否可以确保与您的环境关联的IAM实例配置文件(可能名为aws-elasticbeanstalk-ec2-role,但也可以命名为其他内容)具有上面链接中列出的所有权限？(以下复制以供参考)

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "QueueAccess",
      "Action": [
        "sqs:ChangeMessageVisibility",
        "sqs:DeleteMessage",
        "sqs:ReceiveMessage"
      ],
      "Effect": "Allow",
      "Resource": "*"
    },
    {
      "Sid": "MetricsAccess",
      "Action": [
        "cloudwatch:PutMetricData"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}