AWS connect documentation change
Summary
Renamed all occurrences of 'Amazon Connect' to 'Connect Customer' throughout the documentation. Updated service references, role descriptions, feature explanations, and console instructions to reflect the new naming convention.
Security assessment
The changes are purely cosmetic rebranding updates (Amazon Connect → Connect Customer) without modifying any security configurations, permissions, or policies. No vulnerabilities, security incidents, or weaknesses are mentioned or addressed in the diff. The core security content about service-linked roles and permissions remains functionally identical.
Diff
diff --git a/connect/latest/adminguide/connect-slr.md b/connect/latest/adminguide/connect-slr.md index c90a21b99..7d65cd661 100644 --- a//connect/latest/adminguide/connect-slr.md +++ b//connect/latest/adminguide/connect-slr.md @@ -7 +7 @@ -What are service-linked roles (SLR) and why are they important?Service-linked role permissionsCreate a service-linked role for Amazon ConnectFor instances created before October 2018For Customer Profile domains created before Jan 31, 2025 and configured with a customer KMS key to encrypt dataEdit a service-linked role for Amazon ConnectChecking a service-linked role has permissions for Amazon LexDelete a service-linked role for Amazon ConnectSupported Regions for Amazon Connect service-linked roles +What are service-linked roles (SLR) and why are they important?Service-linked role permissionsCreate a service-linked role for Connect CustomerFor instances created before October 2018For Customer Profile domains created before Jan 31, 2025 and configured with a customer KMS key to encrypt dataEdit a service-linked role for Connect CustomerChecking a service-linked role has permissions for Amazon LexDelete a service-linked role for Connect CustomerSupported Regions for Connect Customer service-linked roles @@ -9 +9 @@ What are service-linked roles (SLR) and why are they important?Service-linked ro -# Use service-linked roles and role permissions for Amazon Connect +# Use service-linked roles and role permissions for Connect Customer @@ -13 +13 @@ What are service-linked roles (SLR) and why are they important?Service-linked ro -Amazon Connect uses AWS Identity and Access Management (IAM) [service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role). A service-linked role is a unique type of IAM role that is linked directly to an Amazon Connect instance. +Connect Customer uses AWS Identity and Access Management (IAM) [service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role). A service-linked role is a unique type of IAM role that is linked directly to an Connect Customer instance. @@ -15 +15 @@ Amazon Connect uses AWS Identity and Access Management (IAM) [service-linked rol -Service-linked roles are predefined by Amazon Connect and include all the permissions that Amazon Connect requires to call other AWS services on your behalf. +Service-linked roles are predefined by Connect Customer and include all the permissions that Connect Customer requires to call other AWS services on your behalf. @@ -17 +17 @@ Service-linked roles are predefined by Amazon Connect and include all the permis -You need to enable service-linked roles so you can use new features in Amazon Connect, such as tagging support, the new user interface in **User management** and **Routing profiles** , and queues with CloudTrail support. +You need to enable service-linked roles so you can use new features in Connect Customer, such as tagging support, the new user interface in **User management** and **Routing profiles** , and queues with CloudTrail support. @@ -21 +21 @@ For information about other services that support service-linked roles, see [AWS -## Service-linked role permissions for Amazon Connect +## Service-linked role permissions for Connect Customer @@ -23 +23 @@ For information about other services that support service-linked roles, see [AWS -Amazon Connect uses the service-linked role with the prefix **AWSServiceRoleForAmazonConnect** _`unique-id` – Grants Amazon Connect permission to access AWS resources on your behalf. +Connect Customer uses the service-linked role with the prefix **AWSServiceRoleForAmazonConnect** _`unique-id` – Grants Amazon Connect permission to access AWS resources on your behalf. @@ -32 +32 @@ The AWSServiceRoleForAmazonConnect prefixed service-linked role trusts the follo -The [AmazonConnectServiceLinkedRolePolicy](https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_awsmanpol.html#amazonconnectservicelinkedrolepolicy) role permissions policy allows Amazon Connect to complete the following actions on the specified resources: +The [AmazonConnectServiceLinkedRolePolicy](https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_awsmanpol.html#amazonconnectservicelinkedrolepolicy) role permissions policy allows Connect Customer to complete the following actions on the specified resources: @@ -34 +34 @@ The [AmazonConnectServiceLinkedRolePolicy](https://docs.aws.amazon.com/connect/l - * Action: all Amazon Connect actions, `connect:*`, on all Amazon Connect resources. + * Action: all Connect Customer actions, `connect:*`, on all Connect Customer resources. @@ -46 +46 @@ It also grants `s3:PutObject`, `s3:PutObjectAcl`, and `s3:GetObjectAcl` to the b - * Action: Amazon Connect Customer Profiles + * Action: Connect Customer Customer Profiles @@ -156 +156 @@ It also grants `s3:PutObject`, `s3:PutObjectAcl`, and `s3:GetObjectAcl` to the b -to use your default Customer Profiles domain (including profiles and all object-types in domain) with the Amazon Connect flows and agent experience applications. +to use your default Customer Profiles domain (including profiles and all object-types in domain) with the Connect Customer flows and agent experience applications. @@ -160 +160 @@ to use your default Customer Profiles domain (including profiles and all object- -Each Amazon Connect instance can be associated with only one domain at a time. However, you can link any domain to an Amazon Connect instance. Cross-domain access within the same AWS account and region is automatically enabled for all domains that start with the prefix `amazon-connect-`. To restrict cross-domain access, you can either use separate Amazon Connect instances to logically partition your data or use Customer Profiles domain names within the same instance that do not start with the `amazon-connect-` prefix, thereby preventing cross-domain access. +Each Connect Customer instance can be associated with only one domain at a time. However, you can link any domain to an Connect Customer instance. Cross-domain access within the same AWS account and region is automatically enabled for all domains that start with the prefix `amazon-connect-`. To restrict cross-domain access, you can either use separate Connect Customer instances to logically partition your data or use Customer Profiles domain names within the same instance that do not start with the `amazon-connect-` prefix, thereby preventing cross-domain access. @@ -308 +308 @@ Each Amazon Connect instance can be associated with only one domain at a time. H -with resource tag `'AmazonConnectEnabled':'True'` on all Amazon Connect Connect AI agents resources associated with your Amazon Connect instance. +with resource tag `'AmazonConnectEnabled':'True'` on all Connect Customer Connect AI agents resources associated with your Connect Customer instance. @@ -316 +316 @@ on all Connect AI agents resources. - * Action: Amazon CloudWatch Metrics `cloudwatch:PutMetricData` to publish Amazon Connect usage metrics for an instance to your account. + * Action: Amazon CloudWatch Metrics `cloudwatch:PutMetricData` to publish Connect Customer usage metrics for an instance to your account. @@ -318 +318 @@ on all Connect AI agents resources. - * Action: Amazon Pinpoint SMS and Voice `sms-voice:DescribePhoneNumbers` and `sms-voice:SendTextMessage` to allow Amazon Connect to send SMS. + * Action: Amazon Pinpoint SMS and Voice `sms-voice:DescribePhoneNumbers` and `sms-voice:SendTextMessage` to allow Connect Customer to send SMS. @@ -320 +320 @@ on all Connect AI agents resources. - * Action: Amazon Pinpoint `mobiletargeting:SendMessages` to allow Amazon Connect to send push notifications. + * Action: Amazon Pinpoint `mobiletargeting:SendMessages` to allow Connect Customer to send push notifications. @@ -322 +322 @@ on all Connect AI agents resources. - * Action: Amazon Cognito user pools `cognito-idp:DescribeUserPool` and `cognito-idp:ListUserPoolClients` to allow Amazon Connect access to select read operations on Amazon Cognito user pools resources that have an `AmazonConnectEnabled` resource tag. + * Action: Amazon Cognito user pools `cognito-idp:DescribeUserPool` and `cognito-idp:ListUserPoolClients` to allow Connect Customer access to select read operations on Amazon Cognito user pools resources that have an `AmazonConnectEnabled` resource tag. @@ -324 +324 @@ on all Connect AI agents resources. - * Action: Amazon Chime SDK Voice Connector `chime:GetVoiceConnector` to allow read access for Amazon Connect on all Amazon Chime SDK Voice Connector resources that have an `'AmazonConnectEnabled':'True'` resource tag. + * Action: Amazon Chime SDK Voice Connector `chime:GetVoiceConnector` to allow read access for Connect Customer on all Amazon Chime SDK Voice Connector resources that have an `'AmazonConnectEnabled':'True'` resource tag. @@ -328 +328 @@ on all Connect AI agents resources. - * Action: Amazon Connect Messaging WhatsApp integration. Grants Amazon Connect permissions to the following AWS End User Messaging Social APIs: + * Action: Connect Customer Messaging WhatsApp integration. Grants Connect Customer permissions to the following AWS End User Messaging Social APIs: @@ -338 +338 @@ on all Connect AI agents resources. -The Social APIs are restricted to your phone number resources that are enabled for Amazon Connect. A phone number is tagged with `AmazonConnectEnabled : True` when it is imported into an Amazon Connect instance. +The Social APIs are restricted to your phone number resources that are enabled for Connect Customer. A phone number is tagged with `AmazonConnectEnabled : True` when it is imported into an Connect Customer instance. @@ -340 +340 @@ The Social APIs are restricted to your phone number resources that are enabled f - * Action: Amazon Connect Messaging WhatsApp message template integration. Grants Amazon Connect permission to call AWS End User Messaging Social APIs. An AWS account's WhatsApp business accounts may be listed. Additionally, the templates of a WhatsApp business account may be listed and a template's details may be retrieved as long as the WhatsApp business account is tagged `AmazonConnectEnabled: True`. + * Action: Connect Customer Messaging WhatsApp message template integration. Grants Connect Customer permission to call AWS End User Messaging Social APIs. An AWS account's WhatsApp business accounts may be listed. Additionally, the templates of a WhatsApp business account may be listed and a template's details may be retrieved as long as the WhatsApp business account is tagged `AmazonConnectEnabled: True`. @@ -356 +356 @@ on all Amazon SES receipt rules. Used to send and receive emails. - * `ses:DeleteEmailIdentity` for {`instance-alias`}.email.connect.aws SES domain identity. Used for email domain management that is provided by Amazon Connect. + * `ses:DeleteEmailIdentity` for {`instance-alias`}.email.connect.aws SES domain identity. Used for email domain management that is provided by Connect Customer. @@ -358 +358 @@ on all Amazon SES receipt rules. Used to send and receive emails. - * `ses:SendRawEmail` for sending emails with an SES configuration set that is provided by Amazon Connect (configuration-set-for-connect-DO-NOT-DELETE). + * `ses:SendRawEmail` for sending emails with an SES configuration set that is provided by Connect Customer (configuration-set-for-connect-DO-NOT-DELETE). @@ -373 +373 @@ on all Amazon SES receipt rules. Used to send and receive emails. -As you enable additional features in Amazon Connect, the following permissions are added for the service-linked role to access the resources associated with those features by using in-line policies: +As you enable additional features in Connect Customer, the following permissions are added for the service-linked role to access the resources associated with those features by using in-line policies: @@ -381 +381 @@ As you enable additional features in Amazon Connect, the following permissions a - * Action: Amazon Connect Voice-ID `voiceid:*` for the Voice ID domains associated with your instance. + * Action: Connect Customer Voice-ID `voiceid:*` for the Voice ID domains associated with your instance. @@ -383 +383 @@ As you enable additional features in Amazon Connect, the following permissions a - * Action: EventBridge `events:PutRule` and `events:PutTargets` for the Amazon Connect managed EventBridge rule for publishing CTR records for your associated Voice ID domains. + * Action: EventBridge `events:PutRule` and `events:PutTargets` for the Connect Customer managed EventBridge rule for publishing CTR records for your associated Voice ID domains. @@ -418 +418 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -## Create a service-linked role for Amazon Connect +## Create a service-linked role for Connect Customer @@ -420 +420 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -You don't need to manually create a service-linked role. When you create a new instance in Amazon Connect in the AWS Management Console, Amazon Connect creates the service-linked role for you. +You don't need to manually create a service-linked role. When you create a new instance in Amazon Connect in the AWS Management Console, Connect Customer creates the service-linked role for you. @@ -422 +422 @@ You don't need to manually create a service-linked role. When you create a new i -If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you create a new instance in Amazon Connect, Amazon Connect creates the service-linked role for you again. +If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you create a new instance in Amazon Connect, Connect Customer creates the service-linked role for you again. @@ -432 +432 @@ Having trouble signing in to manage your AWS account? Don't know who manages you -If your Amazon Connect instance was created before October 2018, you don't have service-linked roles set up. To create a service-linked role, on the **Account overview** page, choose **Create service-linked role** , as shown in the following image. +If your Connect Customer instance was created before October 2018, you don't have service-linked roles set up. To create a service-linked role, on the **Account overview** page, choose **Create service-linked role** , as shown in the following image. @@ -436 +436 @@ If your Amazon Connect instance was created before October 2018, you don't have -For a list of the IAM permissions required to create the service-linked role, see [Overview page](./security-iam-amazon-connect-permissions.html#overview-page) in the [Required permissions for using custom IAM policies to manage access to the Amazon Connect console](./security-iam-amazon-connect-permissions.html) topic. +For a list of the IAM permissions required to create the service-linked role, see [Overview page](./security-iam-amazon-connect-permissions.html#overview-page) in the [Required permissions for using custom IAM policies to manage access to the Connect Customer console](./security-iam-amazon-connect-permissions.html) topic. @@ -442 +442 @@ If your associated Customer Profile domain was created before Jan 31, 2025 and t - 1. Provide an Amazon Connect instance's Service-Linked Role (SLR) permission to use your Customer Profiles domain's AWS KMS keys by navigating to the Customer Profiles’s page in Amazon Connect’s AWS Management Console and choose **Update KMS permission**. + 1. Provide an Connect Customer instance's Service-Linked Role (SLR) permission to use your Customer Profiles domain's AWS KMS keys by navigating to the Customer Profiles’s page in Connect Customer’s AWS Management Console and choose **Update KMS permission**. @@ -444 +444 @@ If your associated Customer Profile domain was created before Jan 31, 2025 and t - + @@ -446 +446 @@ If your associated Customer Profile domain was created before Jan 31, 2025 and t - 2. Create a [support ticket](https://support.console.aws.amazon.com/support) with the Amazon Connect Customer Profiles team to request CMK permission enforcement for your account. + 2. Create a [support ticket](https://support.console.aws.amazon.com/support) with the Connect Customer Customer Profiles team to request CMK permission enforcement for your account. @@ -451 +451 @@ If your associated Customer Profile domain was created before Jan 31, 2025 and t -For a list of IAM permission to update your Amazon Connect instance, see the required permission for custom IAM policies for the [Customer Profiles page](./security-iam-amazon-connect-permissions.html#customer-profiles-page). +For a list of IAM permission to update your Connect Customer instance, see the required permission for custom IAM policies for the [Customer Profiles page](./security-iam-amazon-connect-permissions.html#customer-profiles-page). @@ -453 +453 @@ For a list of IAM permission to update your Amazon Connect instance, see the req -## Edit a service-linked role for Amazon Connect +## Edit a service-linked role for Connect Customer @@ -455 +455 @@ For a list of IAM permission to update your Amazon Connect instance, see the req -Amazon Connect does not allow you to edit the AWSServiceRoleForAmazonConnect prefixed service-linked role. After you create a service-linked role, you cannot change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. +Connect Customer does not allow you to edit the AWSServiceRoleForAmazonConnect prefixed service-linked role. After you create a service-linked role, you cannot change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. @@ -466 +466 @@ Amazon Connect does not allow you to edit the AWSServiceRoleForAmazonConnect pre -## Delete a service-linked role for Amazon Connect +## Delete a service-linked role for Connect Customer @@ -468 +468 @@ Amazon Connect does not allow you to edit the AWSServiceRoleForAmazonConnect pre -You don't need to manually delete the AWSServiceRoleForAmazonConnect prefixed role. When you delete your Amazon Connect instance in the AWS Management Console, Amazon Connect cleans up the resources and deletes the service-linked role for you. +You don't need to manually delete the AWSServiceRoleForAmazonConnect prefixed role. When you delete your Amazon Connect instance in the AWS Management Console, Connect Customer cleans up the resources and deletes the service-linked role for you. @@ -470 +470 @@ You don't need to manually delete the AWSServiceRoleForAmazonConnect prefixed ro -## Supported Regions for Amazon Connect service-linked roles +## Supported Regions for Connect Customer service-linked roles @@ -472 +472 @@ You don't need to manually delete the AWSServiceRoleForAmazonConnect prefixed ro -Amazon Connect supports using service-linked roles in all of the regions where the service is available. For more information, see [AWS Regions and Endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html#connect_region). +Connect Customer supports using service-linked roles in all of the regions where the service is available. For more information, see [AWS Regions and Endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html#connect_region).