AWS connect documentation change
Summary
Updated all references from 'Amazon Connect' to 'Connect Customer' throughout the security best practices documentation.
Security assessment
The changes are purely cosmetic rebranding updates without modifying security recommendations, configurations, or practices. No vulnerabilities, mitigations, or security enhancements are introduced or modified.
Diff
diff --git a/connect/latest/adminguide/security-best-practices.md b/connect/latest/adminguide/security-best-practices.md index 862da4422..2800e0133 100644 --- a//connect/latest/adminguide/security-best-practices.md +++ b//connect/latest/adminguide/security-best-practices.md @@ -7 +7 @@ -Amazon Connect preventative security best practicesAmazon Connect detective security best practicesAmazon Connect Chat security best practicesAmazon Connect WebRTC security best practices +Connect Customer preventative security best practicesConnect Customer detective security best practicesConnect Customer Chat security best practicesConnect Customer WebRTC security best practices @@ -9 +9 @@ Amazon Connect preventative security best practicesAmazon Connect detective secu -# Security Best Practices for Amazon Connect +# Security Best Practices for Connect Customer @@ -11 +11 @@ Amazon Connect preventative security best practicesAmazon Connect detective secu -Amazon Connect provides a number of security features to consider as you develop and implement your own security policies. The following best practices are general guidelines and don't represent a complete security solution. Because these best practices might not be appropriate or sufficient for your environment, treat them as helpful considerations rather than prescriptions. +Connect Customer provides a number of security features to consider as you develop and implement your own security policies. The following best practices are general guidelines and don't represent a complete security solution. Because these best practices might not be appropriate or sufficient for your environment, treat them as helpful considerations rather than prescriptions. @@ -15 +15 @@ Amazon Connect provides a number of security features to consider as you develop - * Amazon Connect preventative security best practices + * Connect Customer preventative security best practices @@ -17 +17 @@ Amazon Connect provides a number of security features to consider as you develop - * Amazon Connect detective security best practices + * Connect Customer detective security best practices @@ -19 +19 @@ Amazon Connect provides a number of security features to consider as you develop - * Amazon Connect Chat security best practices + * Connect Customer Chat security best practices @@ -21 +21 @@ Amazon Connect provides a number of security features to consider as you develop - * Amazon Connect WebRTC security best practices + * Connect Customer WebRTC security best practices @@ -26 +26 @@ Amazon Connect provides a number of security features to consider as you develop -## Amazon Connect preventative security best practices +## Connect Customer preventative security best practices @@ -28 +28 @@ Amazon Connect provides a number of security features to consider as you develop - * Ensure that all profile permissions are as restrictive as possible. Allow access to only those resources absolutely required for the user's role. For example, don't give agents permissions to create, read, or update users in Amazon Connect. + * Ensure that all profile permissions are as restrictive as possible. Allow access to only those resources absolutely required for the user's role. For example, don't give agents permissions to create, read, or update users in Connect Customer. @@ -30 +30 @@ Amazon Connect provides a number of security features to consider as you develop - * Ensure that multi-factor authentication (MFA) is set up through your SAML 2.0 identity provider, or Radius server, if that's more applicable for your use case. After MFA is set up, a third text box becomes visible on the Amazon Connect login page to provide the second factor. + * Ensure that multi-factor authentication (MFA) is set up through your SAML 2.0 identity provider, or Radius server, if that's more applicable for your use case. After MFA is set up, a third text box becomes visible on the Connect Customer login page to provide the second factor. @@ -34 +34 @@ Amazon Connect provides a number of security features to consider as you develop - * Use the **Log in for emergency access** URL on the instance page of the AWS console only in emergency situations, not for daily use. For more information, see [Emergency login to the Amazon Connect admin website](./emergency-admin-login.html). + * Use the **Log in for emergency access** URL on the instance page of the AWS console only in emergency situations, not for daily use. For more information, see [Emergency login to the Connect Customer admin website](./emergency-admin-login.html). @@ -41 +41 @@ Amazon Connect provides a number of security features to consider as you develop -Service control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization. An SCP defines a guardrail, or sets limits, on the actions that the account's administrator can delegate to users and roles in the affected accounts. You can use SCPs to protect critical resources associated with your Amazon Connect workload. +Service control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization. An SCP defines a guardrail, or sets limits, on the actions that the account's administrator can delegate to users and roles in the affected accounts. You can use SCPs to protect critical resources associated with your Connect Customer workload. @@ -45 +45 @@ Service control policies (SCPs) are a type of organization policy that you can u -If you’re using SAML 2.0-based authentication and delete the AWS IAM Role that is used for authenticating Amazon Connect users, users won't be able to log in to the Amazon Connect instance. You will need to delete and recreate users to be associated with a new Role. This results in the deletion of all data associated with those users. +If you’re using SAML 2.0-based authentication and delete the AWS IAM Role that is used for authenticating Connect Customer users, users won't be able to log in to the Connect Customer instance. You will need to delete and recreate users to be associated with a new Role. This results in the deletion of all data associated with those users. @@ -47 +47 @@ If you’re using SAML 2.0-based authentication and delete the AWS IAM Role that -To prevent the accidental deletion of critical resources and to protect the availability of your Amazon Connect instance, you can set a [Service Control Policy](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html) (SCP) as an additional control. +To prevent the accidental deletion of critical resources and to protect the availability of your Connect Customer instance, you can set a [Service Control Policy](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html) (SCP) as an additional control. @@ -49 +49 @@ To prevent the accidental deletion of critical resources and to protect the avai -Following is an example SCP that can be applied at the AWS Account, Organizational Unit, or Organizational Root to prevent the deletion of the Amazon Connect instance and associated Role: +Following is an example SCP that can be applied at the AWS Account, Organizational Unit, or Organizational Root to prevent the deletion of the Connect Customer instance and associated Role: @@ -85 +85 @@ JSON -## Amazon Connect detective security best practices +## Connect Customer detective security best practices @@ -87 +87 @@ JSON -Logging and monitoring are important for the availability, reliability and, performance of contact center. You should [log relevant information from Amazon Connect flows to CloudWatch](./contact-flow-logs.html) and [build alerts and notifications](./contact-flow-log-alerts.html) based on the same. +Logging and monitoring are important for the availability, reliability and, performance of contact center. You should [log relevant information from Connect Customer flows to CloudWatch](./contact-flow-logs.html) and [build alerts and notifications](./contact-flow-log-alerts.html) based on the same. @@ -89 +89 @@ Logging and monitoring are important for the availability, reliability and, perf -Define log retention requirements and lifecycle policies early on, and plan to move log files to cost-efficient storage locations as soon as practical. Amazon Connect public APIs log to CloudTrail; for more information, see [Log Amazon Connect API calls with AWS CloudTrail](./logging-using-cloudtrail.html). Review and automate actions based on CloudTrail logs. +Define log retention requirements and lifecycle policies early on, and plan to move log files to cost-efficient storage locations as soon as practical. Connect Customer public APIs log to CloudTrail; for more information, see [Log Connect Customer API calls with AWS CloudTrail](./logging-using-cloudtrail.html). Review and automate actions based on CloudTrail logs. @@ -95 +95 @@ The AWS Cloud provides flexible infrastructure and tools to support both sophist -You can implement fraud detection and prevention for incoming contacts by customizing Amazon Connect flows per your requirements. For example, you can check incoming contacts against previous contact activity in Dynamo DB and then take actions such as disconnecting a contact who is on a deny list. +You can implement fraud detection and prevention for incoming contacts by customizing Connect Customer flows per your requirements. For example, you can check incoming contacts against previous contact activity in Dynamo DB and then take actions such as disconnecting a contact who is on a deny list. @@ -97 +97 @@ You can implement fraud detection and prevention for incoming contacts by custom -## Amazon Connect Chat security best practices +## Connect Customer Chat security best practices @@ -99 +99 @@ You can implement fraud detection and prevention for incoming contacts by custom -When you integrate with the Amazon Connect Participant Service directly (or use the Amazon Connect Chat Java Script library) and use WebSocket or streaming endpoints to receive messages for your frontend applications or websites, you must protect your application from DOM-based XSS (cross-site scripting) attacks. +When you integrate with the Connect Customer Participant Service directly (or use the Connect Customer Chat Java Script library) and use WebSocket or streaming endpoints to receive messages for your frontend applications or websites, you must protect your application from DOM-based XSS (cross-site scripting) attacks. @@ -112 +112 @@ The following security recommendations can help safeguard against XSS attacks: -## Amazon Connect WebRTC security best practices +## Connect Customer WebRTC security best practices