how to encrypt/decrypt sqs messages from KMS policy

Question

{
            "Sid": "Some_ID",
            "Effect": "Allow",
            "Principal": {
                "Service": "sqs.amazonaws.com"
            },
            "Action": [
                "kms:GenerateDataKey",
                "kms:Decrypt"
            ],
            "Resource": "*"
        }

messages should be encrypted to unauthorised users and automatically decrypt in sqs for authorised user/queue.

Answer 1

gusto2:- the difference is the data in the underlying storage will be encrypted, but the client itself won't see that.