Terraform AWS SQS
SQS queues with server side encryption, access policies, FIFO options, visibility timeout, redrive policies, and dead letter queues for durable message processing.
Quick start
module "sqs" {
source = "awswellarchitected.compliance.tf/terraform-aws-modules/sqs/aws"
version = "~> 5.2"
# ... your arguments here
}module "sqs" {
source = "eugmpannex11.compliance.tf/terraform-aws-modules/sqs/aws"
version = "~> 5.2"
# ... your arguments here
}module "sqs" {
source = "iso27001.compliance.tf/terraform-aws-modules/sqs/aws"
version = "~> 5.2"
# ... your arguments here
}module "sqs" {
source = "nistcsf.compliance.tf/terraform-aws-modules/sqs/aws"
version = "~> 5.2"
# ... your arguments here
}This module on the compliance.tf registry lists its versions, inputs and outputs. The Get Started guide and Registry Endpoints cover authentication and how to customize the module for your requirements.
Migration from upstream
Already using terraform-aws-modules? Change only the source URL:
module "sqs" {
source = "terraform-aws-modules/sqs/aws"
version = "~> 5.2"
}module "sqs" {
source = "soc2.compliance.tf/terraform-aws-modules/sqs/aws"
version = "~> 5.2"
}Same arguments. Same outputs. Controls are checked at terraform plan. The Migration Guide has the step-by-step version.
Reversibility
No lock-in. Switch back by reverting the source URL:
module "sqs" {
source = "terraform-aws-modules/sqs/aws"
}Run terraform init -upgrade. Terraform state is unchanged: same resource addresses, same provider, no compliance.tf-specific resources. Controls you already applied remain in AWS.
Controls enforced
Up to 2 controls are checked at terraform plan when this module comes from a compliance.tf endpoint. Which ones are active depends on the endpoint; see Framework coverage.
| Control | Retrofit effort |
|---|---|
| SQS queues should have encryption at rest enabled | Low |
| SQS queues should be encrypted with KMS CMK | Low |
Mapped compliance frameworks
| Clause | Controls from this module |
|---|---|
| Data protection |
| Clause | Controls from this module |
|---|---|
| 7.1 Data Storage - Damage Protection |
| Clause | Controls from this module |
|---|---|
| A.8.24 Use of cryptography |
| Clause | Controls from this module |
|---|---|
| PR.DS-01 |
Framework coverage
Which controls from this module are active under each framework endpoint. Your framework preferences choose the columns.
| Control | ISO/IEC 27001:2022 | Cybersecurity Framework v2.0 | Well-Architected Framework v10 | EU GMP Annex 11 |
|---|---|---|---|---|
| SQS queues should have encryption at rest enabled | Enforced | Enforced | Enforced | Enforced |
| SQS queues should be encrypted with KMS CMK | Not active | Enforced | Not active | Enforced |