From b7ca1d0b12942501e06beeaa33e65a092ffae8e9 Mon Sep 17 00:00:00 2001
From: Hammy <sgoudham@gmail.com>
Date: Mon, 30 Aug 2021 16:36:00 +0100
Subject: [PATCH] Add method for creating queue policies

---
 stacks/src/util.py | 29 +++++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/stacks/src/util.py b/stacks/src/util.py
index 8f325d4..156c471 100644
--- a/stacks/src/util.py
+++ b/stacks/src/util.py
@@ -1,5 +1,6 @@
-from troposphere import Template
-from troposphere.sqs import Queue
+from troposphere import Template, Ref, GetAtt
+from troposphere.sns import Topic
+from troposphere.sqs import Queue, QueuePolicy
 
 
 class Util:
@@ -15,3 +16,27 @@ class Util:
                 ReceiveMessageWaitTimeSeconds=20,
             )
         )
+
+    def add_queue_policy_for_write_to_topic(self, queue: Queue, queue_policy_name: str, sid: str, fanout_topic: Topic) -> None:
+        self.template.add_resource(QueuePolicy(
+            queue_policy_name,
+            Queues=[Ref(queue)],
+            PolicyDocument={
+                "Version": "2008-10-17",
+                "Id": "PublicationPolicy",
+                "Statement": [
+                    {
+                        "Sid": sid,
+                        "Effect": "Allow",
+                        "Principal": {
+                            "AWS": "*"
+                        },
+                        "Action": ["sqs:SendMessage"],
+                        "Resource": GetAtt(queue, "Arn"),
+                        "Condition": {
+                            "ArnEquals": {"aws:SourceArn": Ref(fanout_topic)}
+                        }
+                    }
+                ]
+            }
+        ))