sqs-queue-auditor

What problem does it solve?

SQS queues can appear healthy in the console while silently dropping or re-delivering messages due to non-obvious configuration interactions. This skill encodes senior SRE judgment to catch the misconfigurations that standard checks miss, such as DLQ retention shorter than source retention or poison messages aging out before reaching the DLQ.

Core Features & Use Cases

• Redrive Path Audit: Validates DLQ presence, maxReceiveCount band (3-10), and the critical retention ordering between source and DLQ that causes silent message loss.
• Message Lifecycle Analysis: Detects poison messages aging out before reaching the DLQ, default visibility timeouts, and retention shorter than a plausible outage.
• Exposure & FIFO Checks: Flags open resource policies, disabled encryption, and FIFO deduplication contract gaps.
• Use Case: An engineer investigating missing messages in a payments or order-processing queue can run this audit against GetQueueAttributes output to identify whether the dead-letter path is actually wired correctly.

Quick Start

Use the sqs-queue-auditor skill to review the attached GetQueueAttributes output for your SQS queue and report any misconfigurations that could silently drop or re-deliver messages.