

本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# 将自定义策略与 Amazon SQS 访问策略语言配合使用
<a name="sqs-creating-custom-policies"></a>

要仅根据 Amazon Web Services 账户 ID 授予基本权限（例如[https://docs.amazonaws.cn/AWSSimpleQueueService/latest/APIReference/API_SendMessage.html](https://docs.amazonaws.cn/AWSSimpleQueueService/latest/APIReference/API_SendMessage.html)或 [https://docs.amazonaws.cn/AWSSimpleQueueService/latest/APIReference/API_ReceiveMessage.html](https://docs.amazonaws.cn/AWSSimpleQueueService/latest/APIReference/API_ReceiveMessage.html)），您无需编写自定义策略。只需使用 Amazon SQS [https://docs.amazonaws.cn/AWSSimpleQueueService/latest/APIReference/API_AddPermission.html](https://docs.amazonaws.cn/AWSSimpleQueueService/latest/APIReference/API_AddPermission.html) 操作即可。

要根据请求时间或请求者的 IP 地址等特定条件允许或拒绝访问，您必须创建自定义 Amazon SQS 策略并使用[SetQueueAttributes](https://docs.amazonaws.cn/AWSSimpleQueueService/latest/APIReference/API_SetQueueAttributes.html)操作将其上传。

**Topics**
+ [访问控制架构](sqs-creating-custom-policies-architecture.md)
+ [访问控制处理工作流程](sqs-creating-custom-policies-process-workflow.md)
+ [访问策略语言关键概念](sqs-creating-custom-policies-key-concepts.md)
+ [访问策略语言评估逻辑](sqs-creating-custom-policies-evaluation-logic.md)
+ [显式拒绝和默认拒绝之间的关系](sqs-creating-custom-policies-relationships-between-explicit-default-denials.md)
+ [自定义策略的限制](sqs-limitations-of-custom-policies.md)
+ [自定义访问策略语言示例](sqs-creating-custom-policies-access-policy-examples.md)