SQS queue policy does not allow public access

# Restrict SQS policy to a specific principal (not public)
resource "aws_sqs_queue_policy" "<example_resource_name>" {
  queue_url = "<example_queue_url>"
  policy    = jsonencode({
    Version   = "2012-10-17"
    Statement = [{
      Effect    = "Allow"
      Principal = { AWS = "<example_account_id>" } # CRITICAL: restrict to a specific principal (removes public "*")
      Action    = "sqs:*"
      Resource  = "<example_queue_arn>"
    }]
  })
}

# CloudFormation: Restrict SQS policy to a specific principal (not public)
Resources:
  QueuePolicy:
    Type: AWS::SQS::QueuePolicy
    Properties:
      Queues:
        - "<example_queue_url>"
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              AWS: "<example_account_id>" # CRITICAL: restrict access to a specific account (removes public "*")
            Action: "sqs:*"
            Resource: "<example_queue_arn>"