AWS connect documentation change
Summary
Updated attachment configuration documentation with per-channel settings, added visual guides, and clarified email attachment limitations
Security assessment
The changes document security controls for file attachments including configurable file type restrictions and size limits. It explicitly references SES security limitations for email attachments and blocked file types, enhancing security documentation. However, there's no evidence this addresses a specific vulnerability.
Diff
diff --git a/connect/latest/adminguide/enable-attachments.md b/connect/latest/adminguide/enable-attachments.md index 0953b00c0..8757d2f86 100644 --- a//connect/latest/adminguide/enable-attachments.md +++ b//connect/latest/adminguide/enable-attachments.md @@ -86,0 +87,2 @@ To allow administrators to view or modify file attachment settings, assign the a + + @@ -89 +91,34 @@ Users assigned a security profile with file attachment permissions see a **Setti -## Step 3: Configure attachment size limits and custom file extensions +## Step 3: Configure attachment file types and size limits + +After you enable attachments and assign permissions, you can configure allowed file types and maximum file sizes for each channel independently. Configuration is scoped per channel: Email, Chat, Tasks, and Cases. Changes to one channel do not affect the others. + +###### To configure attachment file types and size limits + + 1. In the Connect Customer admin website, choose the **Settings** icon (gear icon) in the left navigation pane. + + 2. On the **Attachments** page, choose **Edit**. + +The following image shows the Attachments page in read-only mode. + + + + 3. Under **Channels** , choose **Configure each channel and service individually** to set different file types and size limits per channel. Alternatively, choose **Apply one configuration to all channels and services** to use the same settings across your entire instance. + + 4. Select the channel tab that you want to configure: **Email** , **Chat** , **Tasks** , or **Cases**. + + 5. To add a custom file extension, enter the extension in the **Add file extensions** field and choose **Add extension**. To remove an allowed file type, choose the X next to the extension. + + 6. Under **Maximum file size** , use the slider or enter a value to set the maximum attachment size for the selected channel. + + * For Chat, Tasks, and Cases, you can configure the maximum file size from 1 MB to 100 MB. + + * For Email, the maximum file size is 20 MB. You can reduce this limit but cannot exceed 20 MB. + +The following image shows the attachment configuration in edit mode. + + + + 7. Choose **Save**. + + + @@ -91 +126 @@ Users assigned a security profile with file attachment permissions see a **Setti -After you enable attachments, you can configure the following options through the Connect Customer admin website: +###### Email attachment limitations @@ -93 +128 @@ After you enable attachments, you can configure the following options through th - * **Attachment size limit** – The default maximum attachment size is 20 MB. You can increase this limit up to 100 MB. + * Email attachments cannot exceed 20 MB due to Amazon SES limitations. @@ -95 +130 @@ After you enable attachments, you can configure the following options through th - * **Custom file extensions** – In addition to the default supported file types, you can configure custom file extensions for attachments across chat, email, cases, and tasks. + * Even if you add a file extension to the allowed list for email, Amazon SES may block certain file types. For a list of file types that SES blocks, see [Unsupported attachment types](https://docs.aws.amazon.com/ses/latest/dg/mime-types-appendix.html) in the _Amazon Simple Email Service Developer Guide_. @@ -102 +137 @@ After you enable attachments, you can configure the following options through th -You can also configure these options by using the Connect Customer API. +You can also configure these options programmatically by using the [UpdateAttachedFilesConfiguration](https://docs.aws.amazon.com/connect/latest/APIReference/API_UpdateAttachedFilesConfiguration.html) API. The API uses the `AttachmentScope` parameter to specify the channel (EMAIL, CHAT, CASE, or TASK).