title: API: sqs:CreateQueue always ACCESS DENIED
body: <p>I'm trying to create an sqs queue with cloudformation but I keep getting this error in the console.</p>
  
  <pre><code>API: sqs:CreateQueue Access to the resource https://sqs.us-east-1.amazonaws.com/ is denied.
  </code></pre>
  
  <p>Obviously I'm missing some sort of permission. This <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-queues.html" rel="nofollow noreferrer">guide</a> didn't really specify how I could resolve this. </p>
  
  <p>Here's the code I made:</p>
  
  <pre><code>AWSTemplateFormatVersion: "2010-09-09"
  
  Resources:
  
    MyQueue:
      Type: AWS::SQS::Queue
      Properties:
        FifoQueue: false
        QueueName: sqs-test
        ReceiveMessageWaitTimeSeconds: 20
        RedrivePolicy:
          deadLetterTargetArn:
            Fn::GetAtt:
            - "MyDLQ"
            - "Arn"
          maxReceiveCount: 4
        Tags:
        -
          Key: "ProjectName"
          Value: "project-x"
  
    MyDLQ:
      Type: AWS::SQS::Queue
      Properties:
        FifoQueue: false
        QueueName: sqs-dlq-test
  </code></pre>
  
  <p>I'm trying to understand this <a href="https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-writing-an-sqs-policy.html" rel="nofollow noreferrer">doc</a>. But I'm not sure how I could attach a policy to allow creation of queues. Someone please give me a full example.</p>