Skip to main content
Panther Knowledge Base

What is the ARN of my Panther SQS queue log source?

QUESTION

When I create a SQS log source in Panther, I get its URL, but I'd like the ARN. How can I find the ARN?

ANSWER

The ARN of an SQS log source can be formed by taking parts of the URL of that log source, and reformatting it a bit. For example, consider a log source that was created and that has the following SQS URL:

https://sqs.us-west-2.amazonaws.com/123456789012/panther-source-b57a59f2-2f10-46df-95bb-694c26ac5ab

We can take the region, the AWS account ID, and the name of the log source and turn that into an SQS ARN, which has the following format:

arn:aws:sqs:<region>:<accountID>:<QueueName>

So from the above URL, our ARN would be:

arn:aws:sqs:us-west-2:123456789012:panther-source-b57a59f2-2f10-46df-95bb-694c26ac5ab