AWS SNS主题子：拒绝死信队列（重新驱动策略）权限

Question

我有一个SNS主题&订阅（实际上不止1个）设置来使用SQS DLQ。然而，每一个都告诉我，我有一个策略错误。

我的SNS订阅设置了DLQ：

我的队列存在：

{
  "Version": "2008-10-17",
  "Id": "__default_policy_ID",
  "Statement": [
    {
      "Sid": "__owner_statement",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::1234:root"
      },
      "Action": "SQS:*",
      "Resource": "arn:aws:sqs:eu-west-2:1234:AggregateMonitoringDeadLetterQueue"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "sns.amazonaws.com"
      },
      "Action": "SQS:SendMessage",
      "Resource": "arn:aws:sqs:eu-west-2:1234:AggregateMonitoringDeadLetterQueue",
      "Condition": {
        "ArnLike": {
          "aws:SourceArn": [
            "arn:aws:sns:eu-west-2:1234:aggregator-state",
            "arn:aws:sns:eu-west-2:1234:rank-state-publication",
            "arn:aws:sns:eu-west-2:1234:rank-state-categorisation"
          ]
        }
      }
    }
  ]
}

我还尝试在队列上使用一个真正通用的访问策略：

{
  "Version": "2008-10-17",
  "Id": "__default_policy_ID",
  "Statement": [
    {
      "Sid": "__owner_statement",
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "SQS:*",
      "Resource": "arn:aws:sqs:eu-west-2:1234:AggregateMonitoringDeadLetterQueue"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "sns.amazonaws.com"
      },
      "Action": "SQS:*",
      "Resource": "arn:aws:sqs:eu-west-2:1234:AggregateMonitoringDeadLetterQueue",
      "Condition": {
        "ArnLike": {
          "aws:SourceArn": "arn:aws:sns:eu-west-2:1234:*"
        }
      }
    }
  ]
}

我遵循的是：https://docs.aws.amazon.com/sns/latest/dg/sns-configure-dead-letter-queue.html（步骤5解释了设置策略）

其他参考：https://docs.aws.amazon.com/sns/latest/dg/sns-dead-letter-queue.html

我一定是做错了什么，或者遗漏了什么？我无法摆脱这个错误。

Answer 1

请参阅以下答案，其中指出，尽管存在错误消息，但失败的消息将正确发送到DLQ。

从我的角度来看，我可以确认我在我的DLQ中收到了那些失败的消息，该DLQ的配置与您的配置类似（通过以下相同的文档https://docs.aws.amazon.com/sns/latest/dg/sns-configure-dead-letter-queue.html）。