Enum DeliverySender 

pub enum DeliverySender<'a> {
    Service {
        principal: &'a str,
        source_arn: &'a str,
        source_account: &'a str,
    },
    Identity {
        arn: Option<&'a str>,
    },
}

Who sends a message into an SQS queue through the delivery bus, which decides how SQS calls KMS for an encrypted queue.

AWS services deliver in one of two ways. SNS (topic subscriptions), S3 (event notifications) and EventBridge (rule targets) send as their own service principal, so the queue’s key policy must name that principal for SQS to encrypt the message; the AWS-managed aws/sqs key’s policy admits only callers of the account, so these deliveries fail (recorded). Scheduler, Pipes, Step Functions, API Gateway and Lambda destinations send with an IAM role of the account (or the caller’s identity), which aws/sqs admits.

Variants

Service

An AWS service principal (sns.amazonaws.com) acting for its resource source_arn owned by source_account.

Fields

principal: &'a str

source_arn: &'a str

source_account: &'a str

Identity

An IAM identity of the queue’s account: the role a service acts as, or the caller, named by ARN when known.

Fields

arn: Option<&'a str>

Trait Implementations

impl<'a> Clone for DeliverySender<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for DeliverySender<'a>

impl<'a> Debug for DeliverySender<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Eq for DeliverySender<'a>

impl<'a> PartialEq for DeliverySender<'a>

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl<'a> StructuralPartialEq for DeliverySender<'a>