Redrive allow policy in a aws_sqs_queue

Terraform Providers AWS
1

Hi,

Im trying to setup two queues using terraform with the resource ‘aws_sqs_queue’ one is the main queue and the other one is the dead letter queue, i see very clear that from the main queue to configure a dead letter queue i just need to use something like

  redrive_policy = jsonencode({
    deadLetterTargetArn = aws_sqs_queue.events_queue_dead_letter.arn
    maxReceiveCount     = 5
  })

Where i define what is the arn of the dead letter queue and the max recieve count, that ok but im not clear about how should i configure the dead letter queue to only allow messages from this main queue.

In AWS console in the queue edit/add form there are a section called " Redrive allow policy - Optional" where you can configure what queues can use this as dead letter queue

Screenshot 2021-11-02 at 10.03.16
Screenshot 2021-11-02 at 10.03.161950×1138 216 KB

Here you can use Allow all, by queue or deny All, how can i setup this config in the aws_sqs_queue resource in terraform?

1 Like
2

Hey there, did anyone reach out to you about this? I’m experiencing the same confusion

3

Nop, still waiting for a response.

4

Ran into this as well.

Doesn’t look like its covered in this module

A tf plan on a manually added “Redrive allow policy” from the web console doesn’t do any diffs either.

5

resource “aws_sqs_queue” “regular_queue” {
name = “regular_queue”
fifo_queue = false
visibility_timeout_seconds = 300
delay_seconds = 5
max_message_size = 8192
message_retention_seconds = 86400
receive_wait_time_seconds = 15
redrive_policy = <<DEADLETTER
{
“deadLetterTargetArn” : “${aws_sqs_queue. deadletter_queue.arn}”,
“maxReceiveCount” : 3
}
DEADLETTER
tags = merge(local.tags, map(
“Name”, “regular_queue”
))
}

6

The solution is just as officially documented. Add this and you should be good to go.

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sqs_queue_redrive_allow_policy

resource "aws_sqs_queue" "src" {
  name = "srcqueue"

  redrive_policy = jsonencode({
    deadLetterTargetArn = aws_sqs_queue.example.arn
    maxReceiveCount     = 4
  })
}

resource "aws_sqs_queue" "example" {
  name = "examplequeue"
}

resource "aws_sqs_queue_redrive_allow_policy" "example" {
  queue_url = aws_sqs_queue.example.id

  redrive_allow_policy = jsonencode({
    redrivePermission = "byQueue",
    sourceQueueArns   = [aws_sqs_queue.src.arn]
  })
}