What's new?

• Added the AWS > SQS > Queue > Encryption in Transit control, which checks whether a queue can only be reached over an encrypted (HTTPS) connection. SQS has no encryption in transit setting of its own — the requirement is expressed as a statement in the queue's policy — so the control raises an alarm when a queue has no policy, or its policy does not deny unencrypted requests. Set the policy to Enforce: Enabled and Guardrails adds that statement for you, or Enforce: Disabled to remove it; the rest of the queue policy is left untouched. The default is Skip, so nothing changes until you opt in.

Control Types

Added

• AWS > SQS > Queue > Encryption in Transit

Policy Types

Added

• AWS > SQS > Queue > Encryption in Transit

Action Types

Added

• AWS > SQS > Queue > Set Encryption in Transit
• AWS > SQS > Queue > Skip alarm for Encryption in Transit control
• AWS > SQS > Queue > Skip alarm for Encryption in Transit control [90 days]