AWS connect documentation change
Summary
Simplified phrasing in IAM policy condition and resource tag explanations
Security assessment
Grammatical improvements without altering security meaning. Tag-based access control documentation remains functionally identical with no security implications.
Diff
diff --git a/connect/latest/adminguide/tag-based-access-control.md b/connect/latest/adminguide/tag-based-access-control.md index e5d1c0aec..a2fe6274d 100644 --- a//connect/latest/adminguide/tag-based-access-control.md +++ b//connect/latest/adminguide/tag-based-access-control.md @@ -15 +15 @@ You use tag-based access controls to configure granular access to specific resou -To use tags to control access to resources within your AWS accounts, you need to provide tag information in the condition element of an IAM policy. For example, to control access to your Voice ID domain based on the tags you've assigned to it, use the `aws:ResourceTag/key-name` condition key, along with a specific operator like `StringEquals` to specify which tag _key:value_ pair must be attached to the domain, in order to allow given actions for it. +To use tags to control access to resources within your AWS accounts, you need to provide tag information in the condition element of an IAM policy. For example, to control access to your Voice ID domain based on the tags you've assigned to it, use the `aws:ResourceTag/key-name` condition key, along with a specific operator like `StringEquals` to specify which tag _key:value_ pair must be attached to the domain, to allow given actions for it. @@ -21 +21 @@ For more detailed information on tag-based access control, see [Controlling acce -A _resource_ tag is a custom metadata label that you can add to a resource in order to make it easier to identify, organize, and find in a search. You can apply tags programmatically using the Connect Customer SDK/APIs, and for certain resources you can apply tags from within the Connect Customer console. To learn more about resource tags, see [Add tags to resources in Connect Customer](./tagging.html). +A _resource_ tag is a custom metadata label that you can add to a resource to make it easier to identify, organize, and find in a search. You can apply tags programmatically using the Connect Customer SDK/APIs, and for certain resources you can apply tags from within the Connect Customer console. To learn more about resource tags, see [Add tags to resources in Connect Customer](./tagging.html). @@ -33 +33 @@ Users can be assigned a maximum of three security profiles that contain access c -Service linked roles are required in order to configure [resource tags](https://docs.aws.amazon.com/connect/latest/adminguide/tagging.html) or [access control tags](https://docs.aws.amazon.com/connect/latest/adminguide/tag-based-access-control.html). If your instance was created after October 2018, this will be available by default with your Connect Customer instance. However if you have an older instance, refer to [Use service-linked roles for Connect Customer](https://docs.aws.amazon.com/connect/latest/adminguide/connect-slr.html) for instructions for how to enable service linked roles. +Service linked roles are required to configure [resource tags](https://docs.aws.amazon.com/connect/latest/adminguide/tagging.html) or [access control tags](https://docs.aws.amazon.com/connect/latest/adminguide/tag-based-access-control.html). If your instance was created after October 2018, this will be available by default with your Connect Customer instance. However if you have an older instance, refer to [Use service-linked roles for Connect Customer](https://docs.aws.amazon.com/connect/latest/adminguide/connect-slr.html) for instructions for how to enable service linked roles.