AWS connect documentation change
Summary
Restructured permissions documentation with detailed breakdown of Access metrics permissions, individual feature permissions (Real-time metrics, Historical metrics, Dashboards), and added visual examples. Clarified access implications for different permission combinations.
Security assessment
The changes improve documentation about security profile permissions and access controls for dashboards/reports, but do not address a specific vulnerability. They clarify how permissions cascade (e.g., Access metrics automatically grants 3 sub-permissions) and enforce least-privilege principles by explaining granular access limitations.
Diff
diff --git a/connect/latest/adminguide/dashboard-required-permissions.md b/connect/latest/adminguide/dashboard-required-permissions.md index 5031ddf57..5f77c461e 100644 --- a//connect/latest/adminguide/dashboard-required-permissions.md +++ b//connect/latest/adminguide/dashboard-required-permissions.md @@ -5 +5 @@ -# Assign security profile permissions for dashboards in Amazon Connect +Access metrics permissionIndividual feature permissions @@ -7 +7 @@ -To view dashboards, you need to be assigned to a security profile that has one of the following permissions. +# Assign permissions to view dashboards and reports in Amazon Connect @@ -9 +9,23 @@ To view dashboards, you need to be assigned to a security profile that has one o -###### Analytics and Optimization permissions +The following security profile permissions control access to dashboards and reports in Amazon Connect. These permissions are in the **Analytics and Optimization** section of the **Security profiles** page. + +## Access metrics permission + +When you select **Access metrics - Access** : + + * Amazon Connect automatically assigns the following permissions: + + * **Real-time metrics - Access** + + * **Historical metrics - Access** + + * **Agent activity audit - Access** + +These permissions are shown in the following image: + + + + * You gain access to: + + * All tabs on the **Dashboards and reports** page. + + * All real-time and historical metrics reports. @@ -11 +32,0 @@ To view dashboards, you need to be assigned to a security profile that has one o - * **Access metrics** \- **Access** : Grants permission to all the tabs on the **Dashboards and reports** page. This option is shown in the following image. @@ -13 +33,0 @@ To view dashboards, you need to be assigned to a security profile that has one o - @@ -15 +34,0 @@ To view dashboards, you need to be assigned to a security profile that has one o -The following image shows that you have access to all the tabs on the **Dashboards and reports** page. @@ -18,0 +38 @@ The following image shows that you have access to all the tabs on the **Dashboar +## Individual feature permissions @@ -19,0 +40 @@ The following image shows that you have access to all the tabs on the **Dashboar +You can also assign permissions for individual features: @@ -20,0 +42 @@ The following image shows that you have access to all the tabs on the **Dashboar +### Real-time metrics permission @@ -22 +44 @@ The following image shows that you have access to all the tabs on the **Dashboar -—OR— +When you select only **Real-time metrics - Access** : @@ -24 +46 @@ The following image shows that you have access to all the tabs on the **Dashboar - * **Dashboards** \- **Access** : Grants permission to the **Dashboards** tab only. You cannot view any of the reports tabs. + * You can access only real-time metrics reports. @@ -26 +48 @@ The following image shows that you have access to all the tabs on the **Dashboar -###### Important + * You cannot access other analytics pages or reports. @@ -28 +49,0 @@ The following image shows that you have access to all the tabs on the **Dashboar -You can view historical metrics that are displayed on a dashboard, but you cannot view real-time metrics that are displayed on a dashboard. To view real-time metrics on a dashboard, you also need the **Real-time metrics - Access** permission. @@ -30 +50,0 @@ You can view historical metrics that are displayed on a dashboard, but you canno - @@ -32 +51,0 @@ You can view historical metrics that are displayed on a dashboard, but you canno -The following image shows that you only have access to the **Dashboards** tab on the **Dashboards and reports** page. @@ -34 +53,5 @@ The following image shows that you only have access to the **Dashboards** tab on - +### Historical metrics permission + +When you select only **Historical metrics - Access** : + + * You can access only historical metrics reports. @@ -35,0 +59 @@ The following image shows that you only have access to the **Dashboards** tab on + * You cannot access other analytics pages or reports. @@ -38,0 +63,20 @@ The following image shows that you only have access to the **Dashboards** tab on + +### Dashboard permissions + +When you select only **Dashboards - Access** : + + * You can access only the **Dashboards** tab. + + * You can view historical metrics displayed on dashboards. + + * You cannot view real-time metrics on dashboards without the additional **Real-time metrics - Access** permission. + + + + + + +The following image shows that you only have access to the **Dashboards** tab on the **Dashboards and reports** page. + + + @@ -45 +89 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Intraday forecast performance dashboard +Metric definitions @@ -47 +91 @@ Intraday forecast performance dashboard -Real-time metrics reports +Dashboards