AWS connect documentation change
Summary
Added detailed instructions for enabling message streaming via API/console, updated Lex bot permissions to include lex:StartConversation, and added configuration notes.
Security assessment
While the changes involve permission updates (adding lex:StartConversation), this appears to be a feature enhancement rather than addressing a security vulnerability. The documentation explains how to enable a functionality but doesn't introduce new security controls or address known security issues.
Diff
diff --git a/connect/latest/adminguide/message-streaming-ai-chat.md b/connect/latest/adminguide/message-streaming-ai-chat.md index 98daae6d5..786fc8a07 100644 --- a//connect/latest/adminguide/message-streaming-ai-chat.md +++ b//connect/latest/adminguide/message-streaming-ai-chat.md @@ -5 +5 @@ -Update Lex bot permissions +Enable message streaming using the APIEnable message streaming using the consoleUpdate Lex bot permissions @@ -30 +30 @@ The following are integration options, along with features of each option: -Instances created starting December 2025 are automatically opted into this feature. +Instances created starting December 2025 are automatically opted into this feature. For existing instances, you must enable message streaming manually using the API or through the console. @@ -32 +32,32 @@ Instances created starting December 2025 are automatically opted into this featu -To opt out of this feature, call the [UpdateInstanceAttribute](https://docs.aws.amazon.com/connect/latest/APIReference/API_UpdateInstanceAttribute.html) API and set the `MESSAGE_STREAMING` attribute to `false`. To opt instances into this feature, set this attribute to `true`. +## Enable message streaming using the API + +Use the [UpdateInstanceAttribute](https://docs.aws.amazon.com/connect/latest/APIReference/API_UpdateInstanceAttribute.html) API to enable message streaming. Set the `MESSAGE_STREAMING` attribute to `true`. + + + aws connect update-instance-attribute \ + --instance-id your-instance-id \ + --attribute-type MESSAGE_STREAMING \ + --value true + +To opt out, set the attribute to `false`. + +## Enable message streaming using the console + +For newly created instances, message streaming is enabled by default. + +For existing instances: + + 1. Open the Amazon Connect console and choose your instance. + + 2. In the navigation pane, choose **Flows** > **Amazon Lex bots**. + + 3. Under **Lex bots configuration** , select **Enable message streaming in Amazon Connect**. + + + + +###### Note + +When you enable message streaming using the console, the required `lex:RecognizeMessageAsync` permission is automatically added to the bot alias resource-based policy. When using the API, you must add this permission manually. + + @@ -66 +97,2 @@ You must update the resource-based policy for each Amazon Lex bot alias used by - "lex:RecognizeText" + "lex:RecognizeText", + "lex:StartConversation