Tighten SQS policy to only allow valid SNS topics

The old SQS policy allowed anyone to publish to an SQS topic. This tightens this and only lets the associated SNS topic publish to it.