AWS connect medium security documentation change

Service: connect · 2025-07-04 · Security-related medium

File: connect/latest/adminguide/security_iam_awsmanpol.md

Summary

Corrected service-linked role policy name and added Customer Profiles actions to policy update history.

Security assessment

Fixing policy name ('AmazonConnectServiceLinkedRolePolicy' to 'AWSServiceRoleForAmazonConnect') prevents potential misconfigurations. Adding Customer Profiles actions documents expanded security permissions.

Diff

diff --git a/connect/latest/adminguide/security_iam_awsmanpol.md b/connect/latest/adminguide/security_iam_awsmanpol.md
index 61a9ef093..d4ff95f47 100644
--- a//connect/latest/adminguide/security_iam_awsmanpol.md
+++ b//connect/latest/adminguide/security_iam_awsmanpol.md
@@ -61 +61 @@ To view the permissions for this policy, see [AmazonConnectReadOnlyAccess](https
-This policy is attached to the service-linked role named `AmazonConnectServiceLinkedRolePolicy` to allow Amazon Connect to perform various actions on specified resources. As you enable additional features in Amazon Connect, additional permissions are added for the [AWSServiceRoleForAmazonConnect](https://docs.aws.amazon.com/connect/latest/adminguide/connect-slr.html#slr-permissions) service-linked role to access the resources associated with those features.
+This policy is attached to the service-linked role named `AWSServiceRoleForAmazonConnect` to allow Amazon Connect to perform various actions on specified resources. As you enable additional features in Amazon Connect, additional permissions are added for the [AWSServiceRoleForAmazonConnect](https://docs.aws.amazon.com/connect/latest/adminguide/connect-slr.html#slr-permissions) service-linked role to access the resources associated with those features.
@@ -155,0 +156,11 @@ Change | Description | Date
+[AmazonConnectServiceLinkedRolePolicy](./connect-slr.html) – Added actions for Amazon Connect Customer Profiles |  Added the following Amazon Connect Customer Profiles actions to the service-linked role policy:
+
+  * `profile:GetUploadJob`
+  * `profile:GetUploadJobPath`
+  * `profile:StartUploadJob`
+  * `profile:StopUploadJob`
+  * `profile:CreateUploadJob`
+  * `profile:ListUploadJobs`
+  * `profile:DetectProfileObjectType`
+
+| June 30, 2025