aws.sns.TopicSubscription with protocol 'sqs' creates a faulty subscription

What happened?

When using pulumi to create subscription between sns topic and sqs queue, while the subscription is created and viewable on AWS dashboard, does not work (messages are not consumed). However, after manually subscribing to the topic from the console, sqs starts pulling from the topic.

Example

IaC

import * as pulumi from '@pulumi/pulumi';
import * as aws from '@pulumi/aws';
const orderEventsTopic = new aws.sns.Topic('orderEvents', {
    contentBasedDeduplication: true,
    fifoTopic: true,
});
export const snsOrderEventsArn = orderEventsTopic.arn;

const fulfillOrderQueue = new aws.sqs.Queue('fulfillOrder', {
    contentBasedDeduplication: true,
    fifoQueue: true,
});
export const sqsFulfillOrderUrl = fulfillOrderQueue.url;
const fulfillOrderSubscription = new aws.sns.TopicSubscription('fulfillOrderSubscription', {
    protocol: 'sqs',
    endpoint: fulfillOrderQueue.arn,
    topic: orderEventsTopic.arn,
    rawMessageDelivery: true,
    filterPolicyScope: 'MessageBody',
    filterPolicy: JSON.stringify({
        event: ['order-fulfilled'],
    }),
});

Publisher


import { SNSClient, PublishCommand, type SNSClientConfig } from '@aws-sdk/client-sns';

export class OrderEventsPublisher {
    private readonly sns: SNSClient;
    private readonly topicArn: string;

    constructor(config: SNSClientConfig, topicArn: string) {
        this.sns = new SNSClient(config);
        this.topicArn = topicArn;
    }

    async orderFulfilled(message: { ticketOrderId: number }) {
        const command = new PublishCommand({
            TopicArn: this.topicArn,
            MessageGroupId: message.ticketOrderId.toString(),
            Message: JSON.stringify(message),
            MessageAttributes: {
                event: {
                    DataType: 'String',
                    StringValue: 'order-fulfilled',
                },
            },
        });

        console.log('Publish command: ', command);

        const response = await this.sns.send(command);

        console.log('Response: ', response);

        return response;
    }
}

Output of `pulumi about`

CLI
Version 3.93.0 Go Version go1.21.5 Go Compiler gc

Host
OS darwin Version 13.5 Arch arm64

Backend
Name pulumi.com URL https://app.pulumi.com/zestsystem User zestsystem Organizations zestsystem, utc Token type personal

Pulumi locates its logs in /var/folders/pf/34pz6n095dz0b0q2ph6xst_c0000gn/T/ by default warning: Failed to read project: no Pulumi.yaml project file found (searching upwards from /Users/mikeyim/projects/work/utc). If you have not created a project yet, use pulumi new to do so: no project file found warning: Failed to get information about the current stack: no Pulumi.yaml project file found (searching upwards from /Users/mikeyim/projects/work/utc). If you have not created a project yet, use pulumi new to do so: no project file found

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction. To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

pulumi / examples