AWS connect documentation change
Summary
Revised permissions documentation to clarify behavior of 'Access metrics' and 'Historical metrics' permissions, including automatic permission assignments
Security assessment
Clarifies security profile permissions structure and access control for analytics reports, which is a security feature. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/connect/latest/adminguide/htm-permissions.md b/connect/latest/adminguide/htm-permissions.md index a281e62df..f731c3612 100644 --- a//connect/latest/adminguide/htm-permissions.md +++ b//connect/latest/adminguide/htm-permissions.md @@ -5 +5 @@ -# Permissions required to view historical metrics reports in Amazon Connect +# Assign permissions to view historical metrics reports in Amazon Connect @@ -7 +7 @@ -To view historical metrics reports, you need to be assigned to a security profile that has either the **Access metrics - Access** permission or the **Real-time metrics - Access** permission. Note the following behavior when you assign these permissions: +To access historical metrics reports, your security profile must have either the **Access metrics - Access** permission or the **Historical metrics - Access** permission. These permissions behave as follows: @@ -9 +9 @@ To view historical metrics reports, you need to be assigned to a security profil - * When **Access metrics - Access** is selected, the **Real-time metrics** , **Historical metrics** , and **Agent activity audit** permissions are also automatically assigned. + * When you select **Access metrics - Access** : @@ -11 +11 @@ To view historical metrics reports, you need to be assigned to a security profil - * When **Access metrics - Access** is assigned, you have access to all real-time and historical metrics reports. + * Amazon Connect automatically assigns **Real-time metrics - Access** , **Historical metrics - Access** , and **Agent activity audit - Access** permissions to the security profile. @@ -12,0 +13 @@ To view historical metrics reports, you need to be assigned to a security profil + * You gain access to all real-time and historical metrics reports. @@ -13,0 +15 @@ To view historical metrics reports, you need to be assigned to a security profil + * When you select only **Historical metrics - Access** : @@ -14,0 +17 @@ To view historical metrics reports, you need to be assigned to a security profil + * You can access only historical metrics reports. @@ -16 +19 @@ To view historical metrics reports, you need to be assigned to a security profil -The following image shows the **Analytics and Optimization** section of the **Security profile permissions** page. The **Access** option is selected for **Access metrics** , **Real-time metrics** , **Historical metrics** , and **Agent activity audit**. + * You cannot access other analytics pages or reports. @@ -18 +20,0 @@ The following image shows the **Analytics and Optimization** section of the **Se - @@ -20 +21,0 @@ The following image shows the **Analytics and Optimization** section of the **Se -If only **Historical metrics - Access** is selected, you have access to only historical metrics and no other analytics pages or reports. The following image shows the **Analytics and Optimization** section, with only **Historical metrics - Access** selected. @@ -22 +23,8 @@ If only **Historical metrics - Access** is selected, you have access to only his - + +The following image shows **Analytics and Optimization** permissions with **Access metrics** selected. + + + +The following image shows **Analytics and Optimization** permissions with only **Historical metrics** selected. + +