Check Details

• Resource: SQS Queue
• Check: Monitor SQS message age
• Risk: Delayed processing or message loss due to long retention periods

Remediation via AWS Console

1. Log in to the AWS Management Console and open the Amazon SQS console.

   

2. Click Queues and select the required SQS queue.

   

3. Open the Monitoring tab and verify that the metric ApproximateAgeOfOldestMessage is available and updating.

   
4. If the metric is not present or messages are retained too long, click Edit.

5. Under Details, configure the Message retention period to 4 days (345600 seconds) or higher.

   
6. Click Save changes.
7. Repeat these steps for all SQS queues.

Remediation via AWS CLI

1. Log in to the AWS Management Console and click the CloudShell icon (>_) in the top-right corner.

   

2. List all SQS queues:

   

   aws sqs list-queues
   

3. Verify queue attributes:

   

   aws sqs get-queue-attributes \
   --queue-url <queue-url> \
   --attribute-names All
   

   

4. Set the message retention period to 4 days:

   

   aws sqs set-queue-attributes \
   --queue-url <queue-url> \
   --attributes MessageRetentionPeriod=345600