AWS connect medium security documentation change
Summary
Added release notes for client app versions and updated firewall allowlist guidance from IP addresses to specific URL patterns.
Security assessment
Version 2.0.3 explicitly mentions 'security improvements' in its release note, indicating security-related updates. The firewall allowlist change replaces IP ranges with URL patterns, which may reflect a security hardening measure (e.g., avoiding reliance on mutable IP ranges). The HTTPS URL pattern also suggests secure communication requirements.
Diff
diff --git a/connect/latest/adminguide/amazon-connect-client-app.md b/connect/latest/adminguide/amazon-connect-client-app.md index 19058b0e2..227c9b977 100644 --- a//connect/latest/adminguide/amazon-connect-client-app.md +++ b//connect/latest/adminguide/amazon-connect-client-app.md @@ -13,5 +13,5 @@ This topic provides download location information for versions of the Amazon Con -Version | Release date | Download link ----|---|--- -v2.0.3 (latest) | January 16 2025 | [AmazonConnectClientWin-v2.0.3](https://d4yqf2f7seiym.cloudfront.net/builds/AmazonConnectClientWin-v2.0.3.zip) -v2.0.2 | September 30 , 2024 | [AmazonConnectClientWin-v2.0.2](https://d4yqf2f7seiym.cloudfront.net/builds/AmazonConnectClientWin-v2.0.2.zip) -v2.0.1 | July 22, 2024 | [AmazonConnectClientWin-v2.0.1](https://d4yqf2f7seiym.cloudfront.net/builds/AmazonConnectClientWin-v2.0.1.zip) +Version | Release date | Download link | Release note +---|---|---|--- +v2.0.3 (latest) | January 16 2025 | [AmazonConnectClientWin-v2.0.3](https://d4yqf2f7seiym.cloudfront.net/builds/AmazonConnectClientWin-v2.0.3.zip) | This version supports AWS GovCloud (US) customers and has security improvements. +v2.0.2 | September 30 , 2024 | [AmazonConnectClientWin-v2.0.2](https://d4yqf2f7seiym.cloudfront.net/builds/AmazonConnectClientWin-v2.0.2.zip) | +v2.0.1 | July 22, 2024 | [AmazonConnectClientWin-v2.0.1](https://d4yqf2f7seiym.cloudfront.net/builds/AmazonConnectClientWin-v2.0.1.zip) | @@ -57 +57,5 @@ When Windows multi-session is enabled, ensure that the agent's workstation has t - * **IP addresses to add to your firewall allowlist** : To ensure smooth screen recording functionality, add to your allowlist the IP addresses associated with Amazon S3. These IP addresses are located in the [ipranges.json](https://docs.aws.amazon.com/vpc/latest/userguide/aws-ip-ranges.html) file specific to your AWS Region. For example, if you are in us-east-1, add the S3 IP addresses for that Region to your allowlist. + * **URLs to add to your firewall allowlist** : To ensure smooth screen recording functionality, add the following URL patterns to your allowlist: + + * `connect-recording-staging-*.s3.dualstack.`your-region-name`.amazonaws.com` + + * `https://`your-connect-instance-alias`.my.connect.aws/taps/client/auth `