AWS connect documentation change

Service: connect · 2025-08-22 · Documentation low

File: connect/latest/adminguide/cross-service-confused-deputy-prevention.md

Summary

Updated example ARNs and formatted actions in IAM policies for confused deputy prevention.

Security assessment

Enhances existing security documentation examples without addressing new vulnerabilities or weaknesses.

Diff

diff --git a/connect/latest/adminguide/cross-service-confused-deputy-prevention.md b/connect/latest/adminguide/cross-service-confused-deputy-prevention.md
index a2c7f07f3..2eb9290d0 100644
--- a//connect/latest/adminguide/cross-service-confused-deputy-prevention.md
+++ b//connect/latest/adminguide/cross-service-confused-deputy-prevention.md
@@ -38 +38,5 @@ JSON
-        "Action": ["kms:GenerateDataKey", "kms:CreateGrant", "kms:Decrypt"],
+        "Action": [
+            "kms:GenerateDataKey",
+            "kms:CreateGrant",
+            "kms:Decrypt"
+           ],
@@ -40 +44 @@ JSON
-          "arn:aws:kms:your Region:your AWS account ID:key/your key ARN"
+          "arn:aws:kms:us-east-1:111122223333:key/KeyId"
@@ -44 +48 @@ JSON
-            "aws:SourceArn": "arn:aws:profile:your region name:your AWS account ID:domains/your  domain name/objects/your object type"
+            "aws:SourceArn": "arn:aws:profile:us-east-1:111122223333:domains/CustomerProfilesDomainName/objects/YourObjectType"
@@ -47 +51 @@ JSON
-            "aws:SourceAccount": "your AWS account ID"
+            "aws:SourceAccount": "111122223333"
@@ -67 +71 @@ JSON
-          "Sid": "Allow  to publish messages to your queue",
+          "Sid": "Allow Customer Profiles to publish messages to your queue",
@@ -73 +77 @@ JSON
-          "Resource": "your dead-letter queue ARN",
+          "Resource": "arn:aws:sqs:us-east-1:111122223333:YourDeadLetterQueueName",
@@ -77,2 +81,2 @@ JSON
-              "aws:SourceAccount": "your AWS account ID",
-              "aws:SourceArn": "arn:aws:profile:your region name:your AWS account ID:domains/your  domain name"
+            "aws:SourceAccount": "111122223333",
+            "aws:SourceArn": "arn:aws:profile:us-east-1:111122223333:domains/CustomerProfileDomainName"
@@ -129 +133 @@ JSON
-            "aws:SourceArn": "arn:aws:voiceid:your region name:your AWS account ID:domain/your  domain name"
+            "aws:SourceArn": "arn:aws:voiceid:us-east-1:111122223333:domain/YourVoiceIDDomain"
@@ -132 +136 @@ JSON
-            "aws:SourceAccount": "your AWS account ID"
+            "aws:SourceAccount": "111122223333"
@@ -159 +163 @@ JSON
-             "Resource":"your SNS topic ARN",
+             "Resource":"arn:aws:sns:us-east-1:111122223333:TopicName",
@@ -162 +166 @@ JSON
-                   "aws:SourceAccount":"your AWS account ID"
+                "aws:SourceAccount":"111122223333"
@@ -165 +169 @@ JSON
-                   "aws:SourceArn":"your Amazon Connect instance ARN"
+                "aws:SourceArn":"arn:aws:connect:us-east-1:111122223333:instance/InstanceId"