AWS entityresolution documentation change
Summary
Expanded IAM policy documentation to include Amazon Connect Customer Profiles integration permissions
Security assessment
Adds documentation for new CustomerProfilesIntegrationAccess permissions required for integration. This improves security documentation but does not indicate a prior vulnerability.
Diff
diff --git a/entityresolution/latest/userguide/security-iam-awsmanpol.md b/entityresolution/latest/userguide/security-iam-awsmanpol.md index 8c10e1162..f193bc80c 100644 --- a//entityresolution/latest/userguide/security-iam-awsmanpol.md +++ b//entityresolution/latest/userguide/security-iam-awsmanpol.md @@ -23 +23 @@ This policy grants full access to AWS Entity Resolution endpoints and resources. -This policy also allows certain read access to related AWS services like S3, AWS Glue, Tagging and AWS KMS so that the console can display choices and use the selected ones to perform entity resolution actions. Some resources are narrowed down to contain the service name `entityresolution`. +This policy also allows certain read access to related AWS services like S3, AWS Glue, Tagging, AWS KMS, Amazon EventBridge, and AWS Data Exchange so that the console can display choices and use the selected ones to perform entity resolution actions. Additionally, this policy grants access to Amazon Connect Customer Profiles APIs to enable integration for automated match result processing. Some resources are narrowed down to contain the service name `entityresolution`. @@ -50,0 +51,2 @@ This policy includes the following permissions. + * `CustomerProfilesIntegrationAccess` – Grants access to Amazon Connect and Amazon Connect Customer Profiles APIs to enable integration between AWS Entity Resolution and Amazon Connect Customer Profiles for automated match result processing. + @@ -78,0 +81 @@ Change | Description | Date +`AWSEntityResolutionConsoleFullAccess` – Update to existing policy | Added `CustomerProfilesIntegrationAccess` to enable integration with Amazon Connect Customer Profiles for automated match result processing. | December 15, 2025