airflow creation issue

Hi Techie,

Thanks for your question to re:Post.

When working with Amazon Managed Workflows for Apache Airflow (MWAA), your MWAA execution role requires certain permissions for Amazon Simple Queue Service (Amazon SQS). Check your MWAA execution role that it includes these permissions... Amazon MWAA execution role.

Here is an example policy to your MWAA execution role with allow statements needed for SQS. You will want to evaluate your own permission needs before applying any policies for the principle of least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "sqs:GetQueueAttributes",
        "sqs:GetQueueUrl",
        "sqs:SendMessage",
        "sqs:ReceiveMessage",
        "sqs:DeleteMessage"
      ],
      "Resource": "arn:aws:sqs:us-east-1:[accountid]:airflow-celery-*"
    }
  ]
}

Steps

1. Go to IAM Console
2. Find role: badger-airflow-exec-role
3. Add the policy above (or attach AmazonMWAAExecutionRolePolicy if not already attached)
4. Wait a few minutes for MWAA to pick up the changes

Documentation

Amazon MWAA execution role requirements - Lists all required permissions for the execution role, including SQS access for Celery workers.

The Celery queue (airflow-celery-*) is created automatically by MWAA for task distribution between workers. Your execution role needs permission to interact with it.

Thank you!