{
"Sid": "Some_ID",
"Effect": "Allow",
"Principal": {
"Service": "sqs.amazonaws.com"
},
"Action": [
"kms:GenerateDataKey",
"kms:Decrypt"
],
"Resource": "*"
}
消息应加密给未经授权的用户,并在 sqs 中为授权用户/队列自动解密。