AWS connect documentation change
Summary
Added Amazon Connect Customer Profiles permissions to service-linked role policy and updated SMS service reference from Amazon Pinpoint to Amazon Pinpoint SMS and Voice. Removed WhatsApp social messaging API permissions section.
Security assessment
The changes add new Customer Profiles permissions and update service references, which appear to be routine feature updates. Removal of WhatsApp API permissions section could indicate deprecation but lacks explicit security context.
Diff
diff --git a/connect/latest/adminguide/connect-slr.md b/connect/latest/adminguide/connect-slr.md index f941766d1..efb9af3f2 100644 --- a//connect/latest/adminguide/connect-slr.md +++ b//connect/latest/adminguide/connect-slr.md @@ -139,0 +140,14 @@ It also grants `s3:PutObject`, `s3:PutObjectAcl`, and `s3:GetObjectAcl` to the b + * `profile:GetUploadJob` + + * `profile:GetUploadJobPath` + + * `profile:StartUploadJob` + + * `profile:StopUploadJob` + + * `profile:CreateUploadJob` + + * `profile:ListUploadJobs` + + * `profile:DetectProfileObjectType` + @@ -298 +312 @@ on all Amazon Q in Connect resources. - * Action: Amazon Pinpoint `sms:DescribePhoneNumbers` and `sms:SendTextMessage` to allow Amazon Connect to send SMS. + * Action: Amazon Pinpoint SMS and Voice `sms-voice:DescribePhoneNumbers` and `sms-voice:SendTextMessage` to allow Amazon Connect to send SMS. @@ -318,12 +331,0 @@ on all Amazon Q in Connect resources. -The Social APIs are restricted to your phone number resources that are enabled for Amazon Connect. A phone number is tagged with `AmazonConnectEnabled : true` when it is imported into an Amazon Connect instance. - - * Action: Amazon Connect Messaging WhatsApp integration. Grants Amazon Connect permissions to the following End User Messaging Social APIs: - - * `social-messaging:SendWhatsAppMessage` - - * `social-messaging:PostWhatsAppMessageMedia` - - * `social-messaging:GetWhatsAppMessageMedia` - - * `social-messaging:GetLinkedWhatsAppBusinessAccountPhoneNumber` -