AWS systems-manager-automation-runbooks documentation change
Summary
Updated terminology from 'Amazon Connect' to 'Connect Customer' throughout the documentation. No functional changes to the runbook's operation or security features.
Security assessment
The changes are purely branding updates replacing 'Amazon Connect' with 'Connect Customer'. The security-related content (S3 bucket permission checks, KMS encryption requirements) remains identical. No vulnerabilities, weaknesses, or security incidents are addressed.
Diff
diff --git a/systems-manager-automation-runbooks/latest/userguide/automation-collect-amazon-connect-contact-flow-log.md b/systems-manager-automation-runbooks/latest/userguide/automation-collect-amazon-connect-contact-flow-log.md index 7e02caea9..93ad008d2 100644 --- a//systems-manager-automation-runbooks/latest/userguide/automation-collect-amazon-connect-contact-flow-log.md +++ b//systems-manager-automation-runbooks/latest/userguide/automation-collect-amazon-connect-contact-flow-log.md @@ -11 +11 @@ -The `AWSSupport-CollectAmazonConnectContactFlowLog` automation runbook is used to collect the Amazon Connect contact flow logs for a specific contact ID. By providing your Amazon Connect instance ID and contact ID, the runbook searches contact flow logs for the contact from the Amazon CloudWatch log group and uploads them to the Amazon Simple Storage Service (Amazon S3) bucket that is specified in the request parameter. The runbook generates output that provides Amazon S3 console URL and AWS CLI command for you to download the logs. +The `AWSSupport-CollectAmazonConnectContactFlowLog` automation runbook is used to collect the Connect Customer contact flow logs for a specific contact ID. By providing your Connect Customer instance ID and contact ID, the runbook searches contact flow logs for the contact from the Amazon CloudWatch log group and uploads them to the Amazon Simple Storage Service (Amazon S3) bucket that is specified in the request parameter. The runbook generates output that provides Amazon S3 console URL and AWS CLI command for you to download the logs. @@ -15 +15 @@ The `AWSSupport-CollectAmazonConnectContactFlowLog` automation runbook is used t -The `AWSSupport-CollectAmazonConnectContactFlowLog` automation runbook helps to collect the Amazon Connect contact flow logs for a specific contact ID stored in the configured CloudWatch log group and uploads them to a specified Amazon S3 bucket. To help with the security of the logs gathered from your Amazon Connect contact flow, the automation evaluates the Amazon S3 bucket configuration to determine if the bucket grants public `read` or `write` access permissions and is owned by the AWS account specified in the `S3BucketOwnerAccountId` parameter. If your Amazon S3 bucket uses server-side encryption with AWS Key Management Service keys (SSE-KMS), make sure that the user or AWS Identity and Access Management (IAM) role that is running this automation has the `kms:GenerateDataKey` permissions on the AWS KMS key. For more information about the logs generated by your Amazon Connect instance, see [Flow logs stored in an Amazon CloudWatch log group](https://docs.aws.amazon.com/connect/latest/adminguide/contact-flow-logs-stored-in-cloudwatch.html). +The `AWSSupport-CollectAmazonConnectContactFlowLog` automation runbook helps to collect the Connect Customer contact flow logs for a specific contact ID stored in the configured CloudWatch log group and uploads them to a specified Amazon S3 bucket. To help with the security of the logs gathered from your Connect Customer contact flow, the automation evaluates the Amazon S3 bucket configuration to determine if the bucket grants public `read` or `write` access permissions and is owned by the AWS account specified in the `S3BucketOwnerAccountId` parameter. If your Amazon S3 bucket uses server-side encryption with AWS Key Management Service keys (SSE-KMS), make sure that the user or AWS Identity and Access Management (IAM) role that is running this automation has the `kms:GenerateDataKey` permissions on the AWS KMS key. For more information about the logs generated by your Connect Customer instance, see [Flow logs stored in an Amazon CloudWatch log group](https://docs.aws.amazon.com/connect/latest/adminguide/contact-flow-logs-stored-in-cloudwatch.html). @@ -97 +97 @@ The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) r -The ID of your Amazon Connect instance. +The ID of your Connect Customer instance. @@ -129 +129 @@ The ARN of the IAM role with permissions to get the Amazon S3 bucket and account -Checks if the Amazon Connect instance provided in the `ConnectInstanceId` is `ACTIVE`. +Checks if the Connect Customer instance provided in the `ConnectInstanceId` is `ACTIVE`. @@ -141 +141 @@ Generates `StartTime` and `EndTime` for the `StartQuery` step based on the `Init -Starts a query log for the provided `ContactId` in the CloudWatch Logs log group associated with the Amazon Connect instance provided in `ConnectInstanceId`. Queries time out after 60 minutes of runtime. If your query times out, reduce the time range being searched. You can view the queries currently in progress as well as your recent query history in the CloudWatch console. For more information see [View running queries or query history](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Insights-Query-History.html). +Starts a query log for the provided `ContactId` in the CloudWatch Logs log group associated with the Connect Customer instance provided in `ConnectInstanceId`. Queries time out after 60 minutes of runtime. If your query times out, reduce the time range being searched. You can view the queries currently in progress as well as your recent query history in the CloudWatch console. For more information see [View running queries or query history](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Insights-Query-History.html). @@ -145 +145 @@ Starts a query log for the provided `ContactId` in the CloudWatch Logs log group -Waits for the CloudWatch Logs query log for the provided `ContactId` to complete. Notice that the query times out after 60 minutes of runtime. If your query times out, reduce the time range being searched. You can view the queries currently in progress as well as your recent query history in the Amazon Connect console. For more information see [View running queries or query history](https://docs.aws.amazon.com//AmazonCloudWatch/latest/logs/CloudWatchLogs-Insights-Query-History.html). +Waits for the CloudWatch Logs query log for the provided `ContactId` to complete. Notice that the query times out after 60 minutes of runtime. If your query times out, reduce the time range being searched. You can view the queries currently in progress as well as your recent query history in the Connect Customer console. For more information see [View running queries or query history](https://docs.aws.amazon.com//AmazonCloudWatch/latest/logs/CloudWatchLogs-Insights-Query-History.html).