AWS connect documentation change
Summary
Updated service name references from 'Amazon Connect' to 'Connect Customer' throughout the IAM documentation
Security assessment
Changes are purely branding/naming updates without altering security concepts. All IAM mechanisms (resource policies, condition keys, roles) remain functionally identical. No evidence of vulnerability fixes or security improvements.
Diff
diff --git a/connect/latest/adminguide/security_iam_service-with-iam.md b/connect/latest/adminguide/security_iam_service-with-iam.md index f19d441be..73190d19f 100644 --- a//connect/latest/adminguide/security_iam_service-with-iam.md +++ b//connect/latest/adminguide/security_iam_service-with-iam.md @@ -7 +7 @@ -Amazon Connect identity-based policiesAuthorization based on Amazon Connect tagsAmazon Connect IAM roles +Connect Customer identity-based policiesAuthorization based on Connect Customer tagsConnect Customer IAM roles @@ -9 +9 @@ Amazon Connect identity-based policiesAuthorization based on Amazon Connect tags -# How Amazon Connect works with IAM +# How Connect Customer works with IAM @@ -11 +11 @@ Amazon Connect identity-based policiesAuthorization based on Amazon Connect tags -Before you use IAM to manage access to Amazon Connect, you should understand what IAM features are available to use with Amazon Connect. To get a high-level view of how Amazon Connect and other AWS services work with IAM, see [AWS Services That Work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. +Before you use IAM to manage access to Connect Customer, you should understand what IAM features are available to use with Connect Customer. To get a high-level view of how Connect Customer and other AWS services work with IAM, see [AWS Services That Work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. @@ -15 +15 @@ Before you use IAM to manage access to Amazon Connect, you should understand wha - * Amazon Connect identity-based policies + * Connect Customer identity-based policies @@ -17 +17 @@ Before you use IAM to manage access to Amazon Connect, you should understand wha - * Authorization based on Amazon Connect tags + * Authorization based on Connect Customer tags @@ -19 +19 @@ Before you use IAM to manage access to Amazon Connect, you should understand wha - * Amazon Connect IAM roles + * Connect Customer IAM roles @@ -24 +24 @@ Before you use IAM to manage access to Amazon Connect, you should understand wha -## Amazon Connect identity-based policies +## Connect Customer identity-based policies @@ -26 +26 @@ Before you use IAM to manage access to Amazon Connect, you should understand wha -With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. Amazon Connect supports specific actions, resources, and condition keys. To learn about all of the elements that you use in a JSON policy, see [IAM JSON Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. +With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. Connect Customer supports specific actions, resources, and condition keys. To learn about all of the elements that you use in a JSON policy, see [IAM JSON Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. @@ -34 +34 @@ The `Action` element of a JSON policy describes the actions that you can use to -Policy actions in Amazon Connect use the following prefix before the action: `connect:`. Policy statements must include either an `Action` or `NotAction` element. Amazon Connect defines its own set of actions that describe tasks that you can perform with this service. +Policy actions in Connect Customer use the following prefix before the action: `connect:`. Policy statements must include either an `Action` or `NotAction` element. Connect Customer defines its own set of actions that describe tasks that you can perform with this service. @@ -48 +48 @@ You can specify multiple actions using wildcards (*). For example, to specify al -To see a list of Amazon Connect actions, [Actions, Resources, and Condition Keys for Amazon Connect](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonconnect.html). +To see a list of Connect Customer actions, [Actions, Resources, and Condition Keys for Connect Customer](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonconnect.html). @@ -52 +52 @@ To see a list of Amazon Connect actions, [Actions, Resources, and Condition Keys -Amazon Connect supports resource-level permissions (specifying a resource ARN in an IAM policy). Following is a list of Amazon Connect resources: +Connect Customer supports resource-level permissions (specifying a resource ARN in an IAM policy). Following is a list of Connect Customer resources: @@ -94 +94 @@ The `Resource` JSON policy element specifies the object or objects to which the -The Amazon Connect instance resource has the following ARN: +The Connect Customer instance resource has the following ARN: @@ -111 +111 @@ To specify all instances that belong to a specific account, use the wildcard (*) -Some Amazon Connect actions, such as those for creating resources, cannot be performed on a specific resource. In those cases, you must use the wildcard (*). +Some Connect Customer actions, such as those for creating resources, cannot be performed on a specific resource. In those cases, you must use the wildcard (*). @@ -116 +116 @@ Some Amazon Connect actions, such as those for creating resources, cannot be per -Many Amazon Connect; API actions involve multiple resources. For example, +Many Connect Customer; API actions involve multiple resources. For example, @@ -125 +125 @@ To specify multiple resources in a single statement, separate the ARNs with comm -To see a list of Amazon Connect resource types and their ARNs, see [Actions, Resources, and Condition Keys for Amazon Connect](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonconnect.html). The same article explains with which actions you can specify the ARN of each resource. +To see a list of Connect Customer resource types and their ARNs, see [Actions, Resources, and Condition Keys for Connect Customer](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonconnect.html). The same article explains with which actions you can specify the ARN of each resource. @@ -133 +133 @@ The `Condition` element specifies when statements execute based on defined crite -Amazon Connect defines its own set of condition keys and also supports using some global condition keys. To see all AWS global condition keys, see [AWS Global Condition Context Keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html) in the _IAM User Guide_. +Connect Customer defines its own set of condition keys and also supports using some global condition keys. To see all AWS global condition keys, see [AWS Global Condition Context Keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html) in the _IAM User Guide_. @@ -137 +137 @@ All Amazon EC2 actions support the `aws:RequestedRegion` and `ec2:Region` condit -To see a list of Amazon Connect condition keys, see [Actions, Resources, and Condition Keys for Amazon Connect](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonconnect.html). +To see a list of Connect Customer condition keys, see [Actions, Resources, and Condition Keys for Connect Customer](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonconnect.html). @@ -141 +141 @@ To see a list of Amazon Connect condition keys, see [Actions, Resources, and Con -To view examples of Amazon Connect identity-based policies, see [Amazon Connect identity-based policy examples](./security_iam_id-based-policy-examples.html). +To view examples of Connect Customer identity-based policies, see [Connect Customer identity-based policy examples](./security_iam_id-based-policy-examples.html). @@ -143 +143 @@ To view examples of Amazon Connect identity-based policies, see [Amazon Connect -## Authorization based on Amazon Connect tags +## Authorization based on Connect Customer tags @@ -145 +145 @@ To view examples of Amazon Connect identity-based policies, see [Amazon Connect -You can attach tags to Amazon Connect resources or pass tags in a request to Amazon Connect. To control access based on tags, you provide tag information in the [condition element](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) of a policy using the `connect:ResourceTag/`key-name``, `aws:RequestTag/`key-name``, or `aws:TagKeys` condition keys. +You can attach tags to Connect Customer resources or pass tags in a request to Connect Customer. To control access based on tags, you provide tag information in the [condition element](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) of a policy using the `connect:ResourceTag/`key-name``, `aws:RequestTag/`key-name``, or `aws:TagKeys` condition keys. @@ -147 +147 @@ You can attach tags to Amazon Connect resources or pass tags in a request to Ama -To view an example identity-based policy for limiting access to a resource based on the tags on that resource, see [Describe and update Amazon Connect users based on tags](./security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-view-widget-tags). +To view an example identity-based policy for limiting access to a resource based on the tags on that resource, see [Describe and update Connect Customer users based on tags](./security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-view-widget-tags). @@ -149 +149 @@ To view an example identity-based policy for limiting access to a resource based -## Amazon Connect IAM roles +## Connect Customer IAM roles @@ -153 +153 @@ An [IAM role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) is -### Using temporary credentials with Amazon Connect +### Using temporary credentials with Connect Customer @@ -157 +157 @@ You can use temporary credentials to sign in with federation, assume an IAM role -Amazon Connect supports using temporary credentials. +Connect Customer supports using temporary credentials. @@ -163 +163 @@ Amazon Connect supports using temporary credentials. -Amazon Connect supports service-linked roles. For details about creating or managing Amazon Connect service-linked roles, see [Use service-linked roles and role permissions for Amazon Connect](./connect-slr.html). +Connect Customer supports service-linked roles. For details about creating or managing Connect Customer service-linked roles, see [Use service-linked roles and role permissions for Connect Customer](./connect-slr.html). @@ -165 +165 @@ Amazon Connect supports service-linked roles. For details about creating or mana -### Choosing an IAM role in Amazon Connect +### Choosing an IAM role in Connect Customer @@ -167 +167 @@ Amazon Connect supports service-linked roles. For details about creating or mana -When you create a resource in Amazon Connect, you must choose a role to allow Amazon Connect to access Amazon EC2 on your behalf. If you have previously created a service role or service-linked role, then Amazon Connect provides you with a list of roles to choose from. It's important to choose a role that allows access to start and stop Amazon EC2 instances. +When you create a resource in Connect Customer, you must choose a role to allow Connect Customer to access Amazon EC2 on your behalf. If you have previously created a service role or service-linked role, then Connect Customer provides you with a list of roles to choose from. It's important to choose a role that allows access to start and stop Amazon EC2 instances. @@ -175 +175 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Restrict AWS resources that can be associated with Amazon Connect +Restrict AWS resources that can be associated with Connect Customer