AWS connect documentation change
Summary
Added specific image URL requirements for Apple Messages for Business, mandating Amazon S3 object URLs with specific access and size constraints.
Security assessment
This change adds security-related documentation by specifying access requirements (S3 bucket must grant read access to connect.amazonaws.com service principal) and size limits for images in interactive messages. It establishes security best practices but does not indicate a fix for a specific security issue.
Diff
diff --git a/connect/latest/adminguide/interactive-messages.md b/connect/latest/adminguide/interactive-messages.md index 11f45bb06..999d70bd2 100644 --- a//connect/latest/adminguide/interactive-messages.md +++ b//connect/latest/adminguide/interactive-messages.md @@ -29,0 +30,11 @@ All other field limits must be followed for the message to be successfully sent. +###### Image URL requirements for Apple Messages for Business + +When using interactive messages with the [Apple Messages for Business](./apple-messages-for-business.html) channel, image URLs (`imageData`) must be Amazon S3 object URLs. Other publicly accessible URLs are not supported. In addition, the following requirements apply: + + * The S3 bucket must grant read access to the `connect.amazonaws.com` service principal, or the S3 object must be publicly accessible. + + * The image size must not exceed 200 KB. + + + +