What is the ARN of my Panther SQS queue log source?
QUESTION
When I create a SQS log source in Panther, I get its URL, but I'd like the ARN. How can I find the ARN?
ANSWER
The ARN of an SQS log source can be formed by taking parts of the URL of that log source, and reformatting it a bit. For example, consider a log source that was created and that has the following SQS URL:
https://sqs.us-west-2.amazonaws.com/123456789012/panther-source-b57a59f2-2f10-46df-95bb-694c26ac5ab
We can take the region, the AWS account ID, and the name of the log source and turn that into an SQS ARN, which has the following format:
arn:aws:sqs:<region>:<accountID>:<QueueName>
So from the above URL, our ARN would be:
arn:aws:sqs:us-west-2:123456789012:panther-source-b57a59f2-2f10-46df-95bb-694c26ac5ab