AWS connect documentation change
Summary
Updated alias format description for consolidated contact search and added requirement for supervisors and admins to use the global sign-in endpoint for authentication.
Security assessment
The change adds a requirement for supervisors and admins to authenticate via a global sign-in endpoint instead of regional endpoints. This is a security best practice that centralizes authentication and may improve security posture (e.g., enabling consistent identity provider integration). However, there is no evidence it addresses a specific security vulnerability; it appears to be a documentation update for a feature change.
Diff
diff --git a/connect/latest/adminguide/contact-search-and-contact-details.md b/connect/latest/adminguide/contact-search-and-contact-details.md index 765155fdc..91f529a8e 100644 --- a//connect/latest/adminguide/contact-search-and-contact-details.md +++ b//connect/latest/adminguide/contact-search-and-contact-details.md @@ -17 +17,3 @@ To enable consolidated contact search for your ACGR instance, please reach out t -When you onboard to this feature, your Amazon Connect alias will be updated to a new sub-domain with the format ``region`.`sourcealias`.my.connect.aws`. For example, if your ACGR instance is deployed in US East (N. Virginia) and US West (Oregon) with source alias configured as `source.my.connect.aws` and replica alias as `replica.my.connect.aws`, after onboarding your Amazon Connect instances to this feature, you will use `us-east-1.source.my.connect.aws` and `us-west-2.source.my.connect.aws`. Please ensure you update your firewall rules and third-party integrations to consume these new sub-domains. +When you onboard to this feature, your Amazon Connect alias will be updated to a new sub-domain with the format ``region`.`sourcealias`.my.connect.aws`. For example, if your ACGR instance is deployed in US East (N. Virginia) and US West (Oregon) with source alias configured as `source.my.connect.aws` and replica alias as `replica.my.connect.aws`, after onboarding your Amazon Connect instances to this feature, the new sub-domains will be `us-east-1.source.my.connect.aws` and `us-west-2.source.my.connect.aws`. + +Additionally, supervisors and admins must be authenticated using the [global sign-in endpoint](./integrate-idp.html) instead of regional endpoints.