Authorize sub-account read permission for a specific TDMQ

Last Updated At: 2025-10-21 09:10:00

Authorize sub-account read permission for a specific TDMQ

The enterprise account CompanyExample (ownerUin: 12345678) has a TDMQ and wishes its sub-account, Developer, to have access to this message queue.
Step 1: Create the following policies by policy syntax

{
    "version": "2.0",
    "statement":   
     {
        "action": "cmqqueue:SendMessage",
        "resource":"qcs::cmqqueue:::queueName/uin/12345678/test-caten",
        "effect": "allow"
     } 
}

Step 2: Authorize the policy to the sub-account.