SQS security; monitoring baseline (encryption, IAM, DLQs)
Short version: Encrypt queues with KMS, split producer/consumer IAM, set a DLQ, and alarm on queue age/depth. Keep retention/visibility explicit. 1) Create queue with sane defaults Server-side encryption (your KMS key), retention 4–14 days as needed. Visibility timeout ≥ max processing time. DLQ with a reasonable maxReceiveCount (e.g., 5). 2) IAM separation # Producer: send … Read more