SQS access policy which denies receiving messages except one lambda

Yesterday, I had a task to setup SQS access policy to allow reading messages from queue only by one lambda. Another part of this task was to allow sending messages only by Api Gateway. I tried following access policies with Deny + Principal to restrict SQS:ReceiveMessage action only to my lambda. Or Deny + NotPrincipal … Read more SQS access policy which denies receiving messages except one lambda