This repo contains Terraform setup for multi-environment encrypted SQS/SNS communication with subscriptions to the topics and all IAM permissions you will need.
All you need to do to is to update bicket name in main.js and then run terraform apply and pass account account_id, which is your AWS account id.
Enjoy!