# tSQSMessageChangeVisibility Standard properties

These properties are used to configure tSQSMessageChangeVisibility running in the Standard Job framework.

The Standard tSQSMessageChangeVisibility component belongs to the Cloud family.

The component in this framework is available in all Talend products.

## Basic settings

| Use an existing connection | Select this check box and in the Component<br>List drop-down list, select the desired connection component to<br>reuse the connection details you already defined. |
| --- | --- |
| Access Key and Secret Key | Specify the access keys (the access key ID in the<br>Access Key field and the secret access key in<br>the Secret Key field) required to access the<br>Amazon Web Services. For more information on AWS access keys, see [Access keys (access key ID and secret<br>access key)](http://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys).<br><br>To enter the secret key, click the [...] button next to<br>the secret key field, and then in the pop-up dialog box enter the password between double<br>quotes and click OK to save the settings. |
| Inherit credentials from AWS role | Select this check box to leverage the instance<br>profile credentials. These credentials can be used on Amazon EC2 instances,<br>and are delivered through the Amazon EC2 metadata service. To use this<br>option, your Job must be running within Amazon EC2 or other services that<br>can leverage IAM Roles for access to resources. For more information, see<br>[Using an IAM Role to Grant<br>Permissions to Applications Running on Amazon EC2 Instances](http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html). |
| Assume Role | If you temporarily need some access permissions<br>associated to an AWS IAM role that is not granted to your user account,<br>select this check box to assume that role. Then specify the values for the<br>following parameters to create a new assumed role session.<br><br>Ensure that access to this<br>role has been granted to your user account by the trust policy associated to<br>this role. If you are not certain about this, ask the owner of this role or<br>your AWS administrator.<br><br><ul> <li> <p> <span>Role ARN</span>: the Amazon Resource                                    Name (ARN) of the role to assume. You can find this ARN name on                                    the <span>Summary</span> page of the                                    role to be used on your AWS portal, for example, this role ARN                                    could read like <kbd>am:aws:iam::[aws_account_number]:role/[role_name]</kbd>.                                </p> </li> <li> <p> <span>Role session name</span>: enter the                                    name you want to use to uniquely identify your assumed role                                    session. This name can contain upper- and lower-case                                    alphanumeric characters with no spaces. You can also include                                    underscores or any of the following characters: =,.@-. </p> </li> <li> <p> <span>Session duration (minutes)</span>: the                                    duration (in minutes) for which you want the assumed role                                    session to be active. This duration cannot exceed the maximum                                    duration which your AWS administrator has set. The duration                                    defaults to 3600 seconds if you give it no value. </p> </li> </ul><br><br><br>For an example about an IAM role and its related policy types, see<br>[Create and Manage AWS IAM Roles](https://aws.amazon.com/blogs/security/now-create-and-manage-aws-iam-roles-more-easily-with-the-updated-iam-console/)<br>from the AWS documentation. |
| Region | Specify the AWS region by selecting a region name<br>from the list or entering a region between double quotation marks (for<br>example *"us-east-1"*) in the list. For<br>more information on AWS Regions, see [AWS Regions and<br>Endpoints](http://docs.aws.amazon.com/general/latest/gr/rande.html). |
| Queue (Name or URL) | Specify the name or the URL of the queue whose message's visibility timeout<br>will be changed. |
| Receipt Handle | Specify the receipt handle associated with the message whose visibility timeout<br>will be changed. |
| Visibility Timeout in Seconds | Enter the new visibility timeout value in seconds for the specified message.<br>Valid values are 0 to 43200. |
| Die on error | Select the check box to stop the execution of the Job when an error occurs.<br><br>Clear the check box to skip any error and continue the Job execution process. |

## Advanced settings

| Config client | Select this check box and in the table displayed<br>specify the client configuration parameters. Click the [+] button below the table to add as many<br>rows as needed, each row for a client configuration parameter, and set the<br>value of the following attributes for each parameter:<br><br><ul> <li> <p> <span>Client Parameter</span>: click the cell                                    and select a parameter from the drop-down list. </p> </li> <li> <p> <span>Value</span>: enter the value for the                                    corresponding parameter. </p> </li> </ul> |
| --- | --- |
| STS Endpoint | Select this check box to specify the AWS Security<br>Token Service (STS) endpoint from which to retrieve the session credentials.<br>For example, enter sts.amazonaws.com.<br><br>This service allows you to request<br>temporary, limited-privilege credentials for the AWS user authentication.<br>Therefore, you still need to provide the access key and secret key to<br>authenticate the AWS account to be used.<br><br>For a list of the STS endpoints you can<br>use, see [AWS Security Token Service](https://docs.aws.amazon.com/general/latest/gr/rande.html#sts_region). For<br>further information about the STS temporary credentials, see [Temporary Security Credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html).<br>Both articles are from the AWS documentation.<br><br>This check box is available only when the<br>Assume Role check<br>box is selected. |
| Signing<br>region | Select the AWS region of the STS service. If the region is<br>not in the list, you can enter its name between double quotation marks. The<br>default value is us-east-1.<br><br>This drop-down list is available only when the Assume Role check box is selected. |
| External Id | If the administrator of the account to which the role<br>belongs provided you with an external ID, enter its value here. The<br>External Id is a unique<br>identifier that allows a limited set of users to assume the role.<br><br>This field is available only when the Assume Role check box is selected. |
| Serial<br>number | When you assume a role, the trust policy of this role might<br>require Multi-Factor Authentication (MFA). In this case, you must indicate<br>the identification number of the hardware or virtual MFA device that is<br>associated with the user who assumes the role.<br><br>This field is available only when the Assume Role check box is selected. |
| Token<br>code | When you assume a role, the trust policy of this role might<br>require Multi-Factor Authentication (MFA). In this case, you must indicate a<br>token code. This token code is a time-based one-time password produced by<br>the MFA device.<br><br>This field is available only when the Assume Role check box is selected. |
| Tags | List session tags in the form of key-value pairs. You can<br>then use these session tags in policies to allow or deny access to requests.<br><br><br>Transitive: select<br>this check box to indicate that a tag will persist to the next role in a<br>role chain.<br><br>For more information about tags, see [Passing Session Tags in AWS<br>STS](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_role-chaining)<br><br>This field is available only when the Assume Role check box is selected. |
| IAM Policy<br>ARNs | Enter the Amazon Resource Names (ARNs) of the IAM managed<br>policies that you want to use as managed session policies. Use managed<br>session policies to limit the permissions of the session. The policies must<br>exist in the same account as the role. The resulting session's permissions<br>are the intersection of the role's identity-based policy and the session<br>policies.<br><br>For more information about session policies, see the<br>corresponding section in [Policies and Permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)<br><br>This field is available only when the Assume Role check box is selected. |
| Policy | Enter an IAM policy in JSON format that you want to use as a<br>session policy. Use session policies to limit the permissions of the<br>session. The resulting session's permissions are the intersection of the<br>role's identity-based policy and the session policies.<br><br>For more information about session policies, see the<br>corresponding section in [Policies and Permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)<br><br>This field is available only when the Assume Role check box is selected. |
| tStatCatcher Statistics | Select this check box to gather the Job processing metadata at the Job level<br>as well as at each component level. |

## Global variables

| ERROR\_MESSAGE | The error message generated by the component when an error<br>occurs. This is an After variable and it returns a string. This variable<br>functions only if the Die on error<br>check box is selected. |
| --- | --- |

## Usage

| Usage rule | This component can be used as a standalone component of a Job or<br>subJob. |
| --- | --- |