AWS connect documentation change
Summary
Clarified access requirements for CreatedByUser segment attribute and API usage
Security assessment
Added documentation about restricted admin UI access to sensitive audit trail data (CreatedByUser attribute), promoting secure API-based access patterns without addressing a specific vulnerability.
Diff
diff --git a/connect/latest/adminguide/tasks.md b/connect/latest/adminguide/tasks.md index 15fd3668a..d01a4b959 100644 --- a//connect/latest/adminguide/tasks.md +++ b//connect/latest/adminguide/tasks.md @@ -190 +190 @@ The following image of the Properties page of the **Create task** block shows th -Agents who create tasks through CCP automatically have their agent resource ARN added onto the contact as a segment attribute called `CreatedByUser`. +Agents who create tasks through CCP automatically have their agent resource ARN added onto the contact record as a [segment attribute](./connect-attrib-list.html#attribs-segment-attributes) called `CreatedByUser`. This attribute enables you to track the originating agent for a task. However, you can't access `CreatedByUser` by using the Amazon Connect admin website; instead use the [DescribeContact](https://docs.aws.amazon.com/connect/latest/APIReference/API_DescribeContact.html) API. @@ -192 +192 @@ Agents who create tasks through CCP automatically have their agent resource ARN -This attribute is available to you on the [Create task](./create-task-block.html) block. You can set the segment attribute of **Created by User** , which represents the ARN of the user who created the task. The following image shows a section of the **Create task** properties page where this attribute is available. +The `CreatedByUser` segment attribute is available to you on the [Create task](./create-task-block.html) block. You can set the segment attribute of **Created By User** , which represents the ARN of the user who created the task. The following image shows a section of the **Create task** properties page where this attribute is available. @@ -196 +196 @@ This attribute is available to you on the [Create task](./create-task-block.html -This attribute appears on the contact record, and enables you to track the originating agent for a task. You can also set this value manually for tasks that are created through the [StartTaskContact](https://docs.aws.amazon.com/connect/latest/APIReference/API_StartTaskContact.html) API. +You can also set this value manually for tasks that are created through the [StartTaskContact](https://docs.aws.amazon.com/connect/latest/APIReference/API_StartTaskContact.html) API.