AWS connect documentation change
Summary
Expanded OutboundEmail.Create permission details, added new permissions for sample contacts, coaching sessions, and evaluation reviews
Security assessment
Added documentation for security profile permissions including explicit control over email forwarding to external addresses (OutboundEmail.Create) and new coaching/evaluation access controls. While these define security boundaries, there's no indication they address active vulnerabilities. The changes primarily document existing/pre-existing security features.
Diff
diff --git a/connect/latest/adminguide/security-profile-list.md b/connect/latest/adminguide/security-profile-list.md index 87a7d4dab..d9fe7836c 100644 --- a//connect/latest/adminguide/security-profile-list.md +++ b//connect/latest/adminguide/security-profile-list.md @@ -156 +156 @@ Video calls | VideoContact.Access | [Enable agents to use video calling and scr -Initiate email conversation | OutboundEmail.Create | Allows agents to initiate an outbound email from the Contact Control Panel / agent workspace without first receiving an email contact from a customer. +Initiate email conversation | OutboundEmail.Create | Allows agents to initiate an outbound email from the Contact Control Panel / Agent workspace without first receiving an email contact from a customer. Allows agents to forward email contacts to external email addresses or distribution lists. Allows agents to reply to closed email contacts. @@ -171,0 +172 @@ View my contacts | MyContacts.View | Allows agents to view contacts that they t +Sample contacts | ContactSearchSampleContacts.View | Find a [random sample of contacts](./random-sampling-of-contacts-for-evaluation.html) for evaluating agent performance and contact quality, e.g. 5 contacts per agent from last month. @@ -204,0 +206,6 @@ Evaluation forms - manage calibration sessions | EvaluationCalibrationSessions +Coaching - my coaching sessions - View | MyCoachingSessions.View | View [coaching sessions](./provide-coaching.html) where you are the coach or the participant. If you are the participant, you can acknowledge the coaching session with this permission. +Coaching - my coaching sessions - Create, Edit, Delete | MyCoachingSessions.Create MyCoachingSessions.Delete MyCoachingSessions.Edit | Create, edit or delete coaching sessions with yourself as the coach. +Coaching - manage coaching sessions | CoachingSessions.Create CoachingSessions.Delete CoachingSessions.Edit CoachingSessions.View | Access coaching sessions performed by yourself or others. This permission enables you to [create coaching](./provide-coaching.html) with yourself or others as the coach. +Evaluation forms - review evaluations - Create | EvaluationReviews.Create | Perform evaluation reviews. +Evaluation forms - review evaluations - View | EvaluationReviews.View | View evaluation review drafts before they are finalized. +Evaluation forms - request evaluation reviews | EvaluationReviewRequest.View EvaluationReviewRequest.Create EvaluationReviewRequest.Delete | [Request evaluation reviews](./evaluation-review-requests.html) if the evaluation form has review requests enabled.