Serverless Lambda SQS access denied error - amazon-sqs

Question

I have a node application running through serverless-framework.
The application writes messages to the SQS and code is
const AWS = require('aws-sdk');
const config = require('../../configs/constants').config;
const sqs = new AWS.SQS({apiVersion: '2012-11-05'});
module.exports.sendMessage = (service, message) => {
const params = {
MessageBody: JSON.stringify(message),
QueueUrl: config.SQS_QUEUE_URL_ANALYTICS
};
return new Promise((resolve, reject) => {
sqs.sendMessage(params, (err, data) => {
if (err) {
console.error('Error creating SQS Message: ', err);
reject(err);
} else {
console.log('SQS Message created successfully: ', data);
resolve(data);
}
});
});
};
The permission given to the user is
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"sqs:ListQueues",
"sqs:*"
],
"Resource": "*"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": "sqs:*",
"Resource": "arn:aws:sqs:ap-south-1:881210447458:Staging-Analytics-Log-Data-Process"
}
]
}
When the lambda function is executed, it gives an error
ERROR Error creating SQS Message: { AccessDenied: Access to the resource https://sqs.ap-south-1.amazonaws.com/ is denied.
What other credentials are required for SQS to run?

Answer 1

Insert this permission under your provider: tab in serverless.yml:
iamRoleStatements:
- Effect: Allow
Action:
- sqs:SendMessage
Resource: <your swq ARN that starts with (arn:aws:sqs:)>

Answer 2

To send message from AWS Lambda to SQS, you need IM role attached to your Lambda to send messages to SQS. Because in AWS, you need permission for accessing other services resources:
Create IM ROLE with permission for SQS or Required Access
Assign Created IM Role while creating Lambda function at start
See Permission assigned permission for your lambda at Permission tab

Answer 3

Not sure if the wildcard is missing your permissions, but from the code you posted you should only need the permissions to send message.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"sqs:SendMessage"
],
"Resource": "arn:aws:sqs:ap-south-1:881210447458:Staging-Analytics-Log-Data-Process"
}
]
}