Your team is creating a Lambda function for a microservice application. The Lambda function needs to send messages to an SQS queue. It also fetches messages from the queue and deletes some messages if the messages have incorrect data. Which of the following SQS permissions should the Lambda IAM execution role have? (Select THREE.)

Answer options:

A.sqs:ListQueues
B.sqs:DeleteMessage
C.sqs:ReceiveMessage
D.sqs:ChangeMessageVisibility
E.sqs:PurgeQueue
F.sqs:SendMessage

Correct Answers: B, C and F
Option A is incorrect because the Lambda function does not need to list SQS queues. So the “sqs:ListQueues” permission is not required.
Option B is CORRECT because permission is needed for the Lambda function to delete messages.
Option C is CORRECT because this permission is required to retrieve one or more messages from the specified queue.
Option D is incorrect because the question does not mention the requirement to change the visibility timeout of a message in the queue.
Option E is incorrect because the “PurgeQueue” action deletes all messages in the queue, which is not mentioned in the question.
Option F is CORRECT because the “SendMessage” operation is needed for the Lambda function.
Reference:
https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-api-permissions-reference.html