From a612dedb7c28d8c8bf3a98be1cf428fee69226eb Mon Sep 17 00:00:00 2001
From: Mike Halma <mike.halma@digital.justice.gov.uk>
Date: Fri, 7 Aug 2026 15:48:52 +0100
Subject: [PATCH] SDIT-4100 Transfer movement queue dev

---
 ...-from-nomis-transfermovements-sub-queue.tf | 121 ++++++++++++++++++
 .../resources/irsa.tf                         |   2 +
 2 files changed, 123 insertions(+)
 create mode 100644 namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/hmpps-prisoner-from-nomis-transfermovements-sub-queue.tf

diff --git a/namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/hmpps-prisoner-from-nomis-transfermovements-sub-queue.tf b/namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/hmpps-prisoner-from-nomis-transfermovements-sub-queue.tf
new file mode 100644
index 00000000000..77960c7d39d
--- /dev/null
+++ b/namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/hmpps-prisoner-from-nomis-transfermovements-sub-queue.tf
@@ -0,0 +1,121 @@
+module "prisoner_from_nomis_transfermovements_queue" {
+  source = "github.com/ministryofjustice/cloud-platform-terraform-sqs?ref=5.1.2"
+
+  # Queue configuration
+  sqs_name                   = "prisoner_from_nomis_transfermovements_queue"
+  encrypt_sqs_kms            = "true"
+  message_retention_seconds  = 1209600
+  visibility_timeout_seconds = 120
+
+  redrive_policy = jsonencode({
+    deadLetterTargetArn = module.prisoner_from_nomis_transfermovements_dead_letter_queue.sqs_arn
+    maxReceiveCount     = 7
+  })
+
+  # Tags
+  business_unit          = var.business_unit
+  application            = var.application
+  is_production          = var.is_production
+  team_name              = var.team_name # also used for naming the queue
+  namespace              = var.namespace
+  environment_name       = var.environment
+  infrastructure_support = var.infrastructure_support
+
+  providers = {
+    aws = aws.london
+  }
+}
+
+resource "aws_sqs_queue_policy" "prisoner_from_nomis_transfermovements_queue_policy" {
+  queue_url = module.prisoner_from_nomis_transfermovements_queue.sqs_id
+
+  policy = <<EOF
+  {
+    "Version": "2012-10-17",
+    "Id": "${module.prisoner_from_nomis_transfermovements_queue.sqs_arn}/SQSDefaultPolicy",
+    "Statement":
+      [
+        {
+          "Effect": "Allow",
+          "Principal": {"AWS": "*"},
+          "Resource": "${module.prisoner_from_nomis_transfermovements_queue.sqs_arn}",
+          "Action": "SQS:SendMessage",
+          "Condition":
+                      {
+                        "ArnEquals":
+                          {
+                            "aws:SourceArn": [
+                              "${data.aws_ssm_parameter.offender-events-topic-arn.value}",
+                              "${data.aws_ssm_parameter.hmpps-domain-events-topic-arn.value}"
+                            ]
+                          }
+                        }
+        }
+      ]
+  }
+
+EOF
+
+}
+
+module "prisoner_from_nomis_transfermovements_dead_letter_queue" {
+  source = "github.com/ministryofjustice/cloud-platform-terraform-sqs?ref=5.1.2"
+
+  # Queue configuration
+  sqs_name        = "prisoner_from_nomis_transfermovements_dl_queue"
+  encrypt_sqs_kms = "true"
+
+  # Tags
+  business_unit          = var.business_unit
+  application            = var.application
+  is_production          = var.is_production
+  team_name              = var.team_name # also used for naming the queue
+  namespace              = var.namespace
+  environment_name       = var.environment
+  infrastructure_support = var.infrastructure_support
+
+  providers = {
+    aws = aws.london
+  }
+}
+
+resource "kubernetes_secret" "prisoner_from_nomis_transfermovements_queue" {
+  metadata {
+    name      = "prison-events-transfermovements-queue"
+    namespace = var.namespace
+  }
+
+  data = {
+    sqs_id   = module.prisoner_from_nomis_transfermovements_queue.sqs_id
+    sqs_arn  = module.prisoner_from_nomis_transfermovements_queue.sqs_arn
+    sqs_name = module.prisoner_from_nomis_transfermovements_queue.sqs_name
+  }
+}
+
+resource "kubernetes_secret" "prisoner_from_nomis_transfermovements_dead_letter_queue" {
+  metadata {
+    name      = "prison-events-transfermovements-dl-queue"
+    namespace = var.namespace
+  }
+
+  data = {
+    sqs_id   = module.prisoner_from_nomis_transfermovements_dead_letter_queue.sqs_id
+    sqs_arn  = module.prisoner_from_nomis_transfermovements_dead_letter_queue.sqs_arn
+    sqs_name = module.prisoner_from_nomis_transfermovements_dead_letter_queue.sqs_name
+  }
+}
+
+resource "aws_sns_topic_subscription" "prisoner_from_nomis_transfermovements_subscription" {
+  provider  = aws.london
+  topic_arn = data.aws_ssm_parameter.offender-events-topic-arn.value
+  protocol  = "sqs"
+  endpoint  = module.prisoner_from_nomis_transfermovements_queue.sqs_arn
+  filter_policy = jsonencode({
+    eventType = [
+      "EXTERNAL_MOVEMENT-CHANGED",
+      "SCHEDULED_EXT_MOVE-INSERTED",
+      "SCHEDULED_EXT_MOVE-UPDATED",
+      "SCHEDULED_EXT_MOVE-DELETED"
+    ]
+  })
+}
diff --git a/namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/irsa.tf b/namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/irsa.tf
index d0beed3fd2f..3cd277cdd9f 100644
--- a/namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/irsa.tf
+++ b/namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-prisoner-from-nomis-migration-preprod/resources/irsa.tf
@@ -99,6 +99,8 @@ data "aws_iam_policy_document" "combined_local_sqs_events" {
       module.prisoner_from_nomis_externalmovements_dead_letter_queue.sqs_arn,
       module.prisoner_from_nomis_courtmovements_queue.sqs_arn,
       module.prisoner_from_nomis_courtmovements_dead_letter_queue.sqs_arn,
+      module.prisoner_from_nomis_transfermovements_queue.sqs_arn,
+      module.prisoner_from_nomis_transfermovements_dead_letter_queue.sqs_arn,
       module.prisoner_from_nomis_officialvisits_queue.sqs_arn,
       module.prisoner_from_nomis_officialvisits_dead_letter_queue.sqs_arn,
     ]