sqs policy

infrastructure/terraform/modules/lambda_sqs_trigger/main.tf

@@ -5,4 +5,19 @@ resource "aws_lambda_event_source_mapping" "this" {
   enabled          = true
 }
 
+resource "aws_iam_role_policy" "allow_sqs" {
+  role = var.lambda_role_name
 
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Effect = "Allow"
+      Action = [
+        "sqs:ReceiveMessage",
+        "sqs:DeleteMessage",
+        "sqs:GetQueueAttributes"
+      ]
+      Resource = var.queue_arn
+    }]
+  })
+}