AWS managed policies for Amazon Connect - Amazon Connect
AmazonConnect_FullAccessAmazonConnectReadOnlyAccessAmazonConnectServiceLinkedRolePolicyAmazonConnectCampaignsServiceLinkedRolePolicyAmazonConnectVoiceIDFullAccessCustomerProfilesServiceLinkedRolePolicyAmazonConnectSynchronizationServiceRolePolicyPolicy updates

AWS managed policies for Amazon Connect

To add permissions to users, groups, and roles, it is more efficient to use AWS managed policies than to write policies yourself. It takes time and expertise to create IAM customer managed policies that provide your team with only the permissions that they need. To get started quickly, you can use AWS managed policies. These policies cover common use cases and are available in your AWS account. For more information about AWS managed policies, see AWS managed policies in the IAM User Guide.

AWS services maintain and update AWS managed policies. You can't change the permissions in AWS managed policies. Services occasionally add additional permissions to an AWS managed policy to support new features. This type of update affects all identities (users, groups, and roles) where the policy is attached. Services are most likely to update an AWS managed policy when a new feature is launched or when new operations become available. Services do not remove permissions from an AWS managed policy, so policy updates won't break your existing permissions.

Additionally, AWS supports managed policies for job functions that span multiple services. For example, the ReadOnlyAccess AWS managed policy provides read-only access to all AWS services and resources. When a service launches a new feature, AWS adds read-only permissions for new operations and resources. For a list and descriptions of job function policies, see AWS managed policies for job functions in the IAM User Guide.

AWS managed policy: AmazonConnect_FullAccess

To allow full read/write access to Amazon Connect, you must attach two policies to your IAM users, groups, or roles. Attach the AmazonConnect_FullAccess policy and a custom policy to have full access to Amazon Connect.

To view the permissions for the AmazonConnect_FullAccess policy, see AmazonConnect_FullAccess in the AWS Managed Policy Reference.

Custom Policy

{ 
    "Version": "2012-10-17", 
    "Statement": [ 
        { 
            "Sid": "AttachAnyPolicyToAmazonConnectRole", 
            "Effect": "Allow", 
            "Action": "iam:PutRolePolicy", 
            "Resource": "arn:aws:iam::*:role/aws-service-role/connect.amazonaws.com/AWSServiceRoleForAmazonConnect*" 
        } 
    ] 
}

To allow a user to create an instance, ensure that they have the permissions granted by the AmazonConnect_FullAccess policy.

When you use AmazonConnect_FullAccess policy, note the following:

  • The custom policy that contains the iam:PutRolePolicy action, allows the user with this policy assigned to configure any resource in the account to work with an Amazon Connect instance. Since this added action grants such broad permissions, only assign it when necessary. As an alternative, you can create the service-linked role with access to the necessary resources and let the user have access to pass the service-linked role to Amazon Connect (which is granted by the AmazonConnect_FullAccess policy).

  • Additional privileges are required to create a Amazon S3 bucket with a name of your choosing, or use an existing bucket while creating or updating an instance from the Amazon Connect admin website. If you choose default storage locations for your call recordings, chat transcripts, call transcripts, and other data, the system prepends "amazon-connect-" to the names of those objects.

  • The aws/connect KMS key is available to use as a default encryption option. To use a custom encryption key, assign users additional KMS privileges.

  • Assign users additional privileges to attach other AWS resources like Amazon Polly, Live Media Streaming, Data Streaming, and Lex bots to their Amazon Connect instances.

For more information and detailed permissions, see Required permissions for using custom IAM policies to manage access to the Amazon Connect console.

AWS managed policy: AmazonConnectReadOnlyAccess

To allow read-only access, you can attach the AmazonConnectReadOnlyAccess policy.

To view the permissions for this policy, see AmazonConnectReadOnlyAccess in the AWS Managed Policy Reference.

AWS managed policy: AmazonConnectServiceLinkedRolePolicy

This policy is attached to the service-linked role named AmazonConnectServiceLinkedRolePolicy to allow Amazon Connect to perform various actions on specified resources. As you enable additional features in Amazon Connect, additional permissions are added for the AWSServiceRoleForAmazonConnect service-linked role to access the resources associated with those features.

To view the permissions for this policy, see AmazonConnectServiceLinkedRolePolicy in the AWS Managed Policy Reference.

AWS managed policy: AmazonConnectCampaignsServiceLinkedRolePolicy

The AmazonConnectCampaignsServiceLinkedRolePolicy role permissions policy allows Amazon Connect outbound campaigns to perform various actions on specified resources. As you enable additional features in Amazon Connect, additional permissions are added for the AWSServiceRoleForConnectCampaigns service-linked role to access the resources associated with those features.

To view the permissions for this policy, see AmazonConnectCampaignsServiceLinkedRolePolicy in the AWS Managed Policy Reference.

AWS managed policy: AmazonConnectVoiceIDFullAccess

To allow full access to Amazon Connect Voice ID, you must attach two policies to your users, groups, or roles. Attach the AmazonConnectVoiceIDFullAccess policy and a custom policy to access Voice ID through the Amazon Connect admin website.

To view the permissions for the AmazonConnectVoiceIDFullAccess policy, see AmazonConnectVoiceIDFullAccess in the AWS Managed Policy Reference.

Custom policy

{ 
    "Version": "2012-10-17", 
    "Statement": [ 
        { 
            "Sid": "AttachAnyPolicyToAmazonConnectRole", 
            "Effect": "Allow", 
            "Action": "iam:PutRolePolicy", 
            "Resource": "arn:aws:iam::*:role/aws-service-role/connect.amazonaws.com/AWSServiceRoleForAmazonConnect*" 
        },
        {
            "Effect": "Allow",
            "Action": [
                "connect:CreateIntegrationAssociation",
                "connect:DeleteIntegrationAssociation",
                "connect:ListIntegrationAssociations"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "events:DeleteRule",
                "events:PutRule",
                "events:PutTargets",
                "events:RemoveTargets"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "events:ManagedBy": "connect.amazonaws.com"
                }
            }
        }
    ] 
}

The custom policy configures the following:

  • The iam:PutRolePolicy allows the user who gets that policy to configure any resource in the account to work with the Amazon Connect instance. Due to its broad scope, grant this permission only when absolutely necessary.

  • Attaching a Voice ID domain to an Amazon Connect instance requires additional Amazon Connect and Amazon EventBridge permissions. You need permissions to call Amazon Connect APIs for creating, deleting, and listing integration associations. Additionally, EventBridge permissions are required to create and delete rules that provide contact records related to Voice ID.

Amazon Connect Voice ID does not have a default encryption option, so you must allow the following API operations in the key policy to use your customer-managed key. Additionally, you need to grant these permissions on the relevant key, as they are not included in the managed policy.

  • kms:Decrypt - to access or store encrypted data.

  • kms:CreateGrant – when creating or updating a domain, used to create a grant to the customer managed key for the Voice ID domain. The grant controls access to the specified KMS key which allows access to grant operations Amazon Connect Voice ID requires. For more information about using grants, see Using grants in the AWS Key Management Service Developer Guide.

  • kms:DescribeKey – when creating or updating a domain, allows determining the ARN for KMS key you provided.

For more about creating domains and KMS keys, see Get started enabling Voice ID in Amazon Connect and Encryption at rest in Amazon Connect.

AWS managed policy: CustomerProfilesServiceLinkedRolePolicy

The CustomerProfilesServiceLinkedRolePolicy role permissions policy allows Amazon Connect to perform various actions on specified resources. As you enable additional features in Amazon Connect, additional permissions are added for the AWSServiceRoleForProfile service-linked role to access the resources associated with those features.

To view the permissions for this policy, see CustomerProfilesServiceLinkedRolePolicy in the AWS Managed Policy Reference.

AWS managed policy: AmazonConnectSynchronizationServiceRolePolicy

The AmazonConnectSynchronizationServiceRolePolicy permissions policy allows Amazon Connect Managed Synchronization to perform various actions on specified resources. As resource synchronization is enabled for more resources, additional permissions are added to the AWSServiceRoleForAmazonConnectSynchronization service-linked role to access these resources.

To view the permissions for this policy, see AmazonConnectSynchronizationServiceRolePolicy in the AWS Managed Policy Reference.

Amazon Connect updates to AWS managed policies

View details about updates to AWS managed policies for Amazon Connect since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the Amazon Connect Document history page.

Change Description Date

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Q in Connect, to support messaging

Added the following Amazon Q in Connect actions to the service-linked role policy to support messaging. These actions allow Amazon Connect to send, list, and get the next message by using the Amazon Q in Connect API:

  • wisdom:SendMessage

  • wisdom:GetNextMessage

  • wisdom:ListMessages

 March 14, 2025

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Q in Connect

Added the following Amazon Q in Connect actions to the service-linked role policy:

  • wisdom:CreateAIAgent

  • wisdom:CreateAIAgentVersion

  • wisdom:DeleteAIAgent

  • wisdom:DeleteAIAgentVersion

  • wisdom:UpdateAIAgent

  • wisdom:UpdateAssistantAIAgent

  • wisdom:RemoveAssistantAIAgent

  • wisdom:GetAIAgent

  • wisdom:ListAIAgents

  • wisdom:ListAIAgentVersions

  • wisdom:CreateAIPrompt

  • wisdom:CreateAIPromptVersion

  • wisdom:DeleteAIPrompt

  • wisdom:DeleteAIPromptVersion

  • wisdom:UpdateAIPrompt

  • wisdom:GetAIPrompt

  • wisdom:ListAIPrompts

  • wisdom:ListAIPromptVersions

  • wisdom:CreateAIGuardrail

  • wisdom:CreateAIGuardrailVersion

  • wisdom:DeleteAIGuardrail

  • wisdom:DeleteAIGuardrailVersion

  • wisdom:UpdateAIGuardrail

  • wisdom:GetAIGuardrail

  • wisdom:ListAIGuardrails

  • wisdom:ListAIGuardrailVersions

  • wisdom:CreateAssistant

  • wisdom:ListTagsForResource

 December 31, 2024

AmazonConnectServiceLinkedRolePolicy – Added action for Amazon Pinpoint, to support push notifications

Added the following Amazon Pinpoint action to the service-linked role policy to support push notifications. This action allows Amazon Connect to send push notifications by using the Amazon Pinpoint API:

  • mobiletargeting:SendMessages

 December 10, 2024

AmazonConnectServiceLinkedRolePolicy – Added actions for integration with AWS End User Messaging Social

Added the following AWS End User Messaging Social actions to the service-linked role policy. The actions allow Amazon Connect to invoke these APIs on End User Messaging Social phone numbers that have the 'AmazonConnectEnabled':'True' resource tag.

  • social-messaging:SendWhatsAppMessage

  • social-messaging:PostWhatsAppMessageMedia

  • social-messaging:GetWhatsAppMessageMedia

  • social-messaging:GetLinkedWhatsAppBusinessAccountPhoneNumber

 December 2, 2024

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon SES, to support the email channel

Added the following Amazon SES actions to the service-linked role policy to support the email channel. These actions allow Amazon Connect send, receive, and manage emails by using the Amazon SES APIs:

  • ses:DescribeReceiptRule

  • ses:UpdateReceiptRule

  • ses:DeleteEmailIdentity

  • ses:SendRawEmail

  • iam:PassRole

 November 22, 2024

AmazonConnectServiceLinkedRolePolicy – Added Actions for Amazon Connect Customer Profiles

Added the following actions to manage Amazon Connect Customer Profiles resources:

  • profile:GetIntegration

  • profile:PutIntegration

  • profile:DeleteIntegration

  • profile:CreateEventTrigger

  • profile:GetEventTrigger

  • profile:ListEventTriggers

  • profile:UpdateEventTrigger

  • profile:DeleteEventTrigger

November 18, 2024

CustomerProfilesServiceLinkedRolePolicy – Added permissions for managing outbound campaigns

Added the following actions to retrieving profile information and triggering a campaign.

  • connect-campaigns:PutProfileOutboundRequestBatch - allows you to trigger a campaign based on your Customer Profiles Event Trigger Definition.

  • profile:BatchGetProfile - allows you to retrieve profile information necessary for triggering an event.

 December 1, 2024

AmazonConnectServiceLinkedRolePolicy – Added Actions for Amazon Connect Customer Profiles and Amazon Q in Connect

Added the following actions to manage Amazon Connect Customer Profiles resources:

  • profile:ListObjectTypeAttributes

  • profile:ListProfileAttributeValues

  • profile:BatchGetProfile

  • profile:BatchGetCalculatedAttributeForProfile

  • profile:ListSegmentDefinitions

  • profile:CreateSegmentDefinition

  • profile:GetSegmentDefinition

  • profile:DeleteSegmentDefinition

  • profile:CreateSegmentEstimate

  • profile:GetSegmentEstimate

  • profile:CreateSegmentSnapshot

  • profile:GetSegmentSnapshot

  • profile:GetSegmentMembership

Added the following actions to manage Amazon Q in Connect resources:

  • wisdom:CreateMessageTemplate

  • wisdom:UpdateMessageTemplate

  • wisdom:UpdateMessageTemplateMetadata

  • wisdom:GetMessageTemplate

  • wisdom:DeleteMessageTemplate

  • wisdom:ListMessageTemplates

  • wisdom:SearchMessageTemplates

  • wisdom:ActivateMessageTemplate

  • wisdom:DeactivateMessageTemplate

  • wisdom:CreateMessageTemplateVersion

  • wisdom:ListMessageTemplateVersions

  • wisdom:CreateMessageTemplateAttachment

  • wisdom:DeleteMessageTemplateAttachment

  • wisdom:RenderMessageTemplate

November 18, 2024

AmazonConnectCampaignsServiceLinkedRolePolicy – Added Actions for Amazon Connect Customer Profiles and Amazon Q in Connect

Added the following actions to manage Amazon Connect resources:

  • connect:StartOutboundVoiceContact

  • connect:GetMetricData

  • connect:GetCurrentMetricData

  • connect:BatchPutContact

  • connect:StopContact

  • connect:GetMetricDataV2

  • connect:DescribeContactFlow

  • connect:SendOutboundEmail

Added the following actions to manage EventBridge resources:

  • events:DeleteRule

  • events:PutRule

  • events:PutTargets

  • events:RemoveTargets

  • events:ListRules

  • events:ListTargetsByRule

Added the following actions to manage Amazon Q in Connect resources:

  • wisdom:GetMessageTemplate

  • wisdom:RenderMessageTemplate

November 18, 2024

AmazonConnectSynchronizationServiceRolePolicy – Consolidated allowed actions and added a deny-list of actions for Managed Synchronization

Modified the allowed actions by using wildcards and added an explicit deny-list of actions.

 November 12, 2024

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Chime SDK Voice Connector

Added the following Amazon Chime SDK Voice Connector actions to the service-linked role policy. These actions allow Amazon Connect to obtain Amazon Chime Voice Connector information by using get and list Amazon Chime SDK Voice Connector APIs:

  • chime:GetVoiceConnector: Allows Amazon Connect to invoke the GetVoiceConnector API on any Amazon Chime SDK Voice Connectors that have an 'AmazonConnectEnabled':'True' resource tag.

  • chime:ListVoiceConnectors: Allows Amazon Connect to list all Amazon Chime SDK Voice Connectors created in the account across all Regions.

 October 25, 2024

AmazonConnectSynchronizationServiceRolePolicy – Added for Managed Synchronization

Added the following actions to the service-linked role managed policy to support the launch of the HoursOfOperationOverride attribute.

  • connect:CreateHoursOfOperationOverride

  • connect:UpdateHoursOfOperationOverride

  • connect:DeleteHoursOfOperationOverride

  • connect:DescribeHoursOfOperationOverride

  • connect:ListHoursOfOperationOverrides

 September 25, 2024

AmazonConnectSynchronizationServiceRolePolicy – Added for Managed Synchronization

Added the following actions to the service-linked role managed policy for managed synchronization:

  • connect:AssociatePhoneNumberContactFlow

  • connect:DisassociatePhoneNumberContactFlow

  • connect:AssociateRoutingProfileQueues

  • connect:DisassociateQueueQuickConnects

  • connect:AssociateQueueQuickConnects

  • connect:DisassociateUserProficiencies

  • connect:AssociateUserProficiencies

  • connect:DisassociateRoutingProfileQueues

  • connect:CreateAuthenticationProfile

  • connect:UpdateAuthenticationProfile

  • connect:DescribeAuthenticationProfile

  • connect:ListAuthenticationProfiles

 July 5, 2024

AmazonConnectReadOnlyAccess – Renamed action connect:GetFederationTokens and changed to connect:AdminGetEmergencyAccessToken

The AmazonConnectReadOnlyAccess managed policy has been updated due to the renaming of the Amazon Connect action connect:GetFederationTokens to connect:AdminGetEmergencyAccessToken. This change is backwards compatible and the connect:AdminGetEmergencyAccessToken action will function in the same way as the connect:GetFederationTokens action. If you leave the previously named connect:GetFederationTokens action in your policies, they will continue to function as expected.

 June 15, 2024

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Cognito user pools and Amazon Connect Customer Profiles

Added the following Amazon Cognito user pools actions to the service-linked role policy to allow select read operations on Cognito User Pool User Pool resources that have an AmazonConnectEnabled resource tag. This tag is put on the resource when the CreateIntegrationAssociations API is called:

  • cognito-idp:DescribeUserPool

  • cognito-idp:ListUserPoolClients

Added the following Amazon Connect Customer Profiles action to the service-linked role policy to allow permissions to put data into the Connect-adjacent service, Customer Profiles:

  • profile:PutProfileObject

 May 23, 2024

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Q in Connect

The following action is allowed to be performed on Amazon Q in Connect resources that have the resource tag 'AmazonConnectEnabled':'True' on Amazon Q in Connect Knowledge Base:

  • wisdom:ListContentAssociations

 May 20, 2024

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Pinpoint

Added the following actions to the service-linked role policy to use Amazon Pinpoint phone numbers to allow Amazon Connect to send SMS:

  • sms:DescribePhoneNumbers

  • sms:SendTextMessage

 November 17, 2023

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Q in Connect

The following action is allowed to be performed on Amazon Q in Connect resources that have the resource tag 'AmazonConnectEnabled':'True' on Amazon Q in Connect Knowledge Base:

  • wisdom:PutFeedback

 November 15, 2023

AmazonConnectCampaignsServiceLinkedRolePolicy – Added actions for Amazon Connect

Amazon Connect added new actions to retrieve outbound campaigns:

  • connect:BatchPutContact

  • connect:StopContact

 November 8, 2023

AmazonConnectSynchronizationServiceRolePolicy – Added new AWS managed policy

Added a new service-linked role managed policy for managed synchronization.

The policy provides access to read, create, update, and delete Amazon Connect resources and is used to automatically synchronize AWS resources across AWS regions.

 November 3, 2023

AmazonConnectServiceLinkedRolePolicy – Added actions for Customer Profiles

Added the following action to manage Amazon Connect Customer Profiles Service Linked Roles:

  • profile:ListCalculatedAttributesForProfile

  • profile:GetDomain

  • profile:ListIntegrations

  • profile:CreateCalculatedAttributeDefinition

  • profile:DeleteCalculatedAttributeDefinition

  • profile:GetCalculatedAttributeDefinition

  • profile:UpdateCalculatedAttributeDefinition

 October 30, 2023

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Q in Connect

The following actions are allowed to be performed on Amazon Q in Connect resources that have the resource tag 'AmazonConnectEnabled':'True' on Amazon Q in Connect Knowledge Base:

  • wisdom:CreateQuickResponse

  • wisdom:GetQuickResponse

  • wisdom:SearchQuickResponses

  • wisdom:StartImportJob

  • wisdom:GetImportJob

  • wisdom:ListImportJobs

  • wisdom:ListQuickResponses

  • wisdom:UpdateQuickResponse

  • wisdom:DeleteQuickResponse

 October 25, 2023

AmazonConnectServiceLinkedRolePolicy – Added actions for Customer Profiles

Added the following action to manage Amazon Connect Customer Profiles Service Linked Roles:

  • profile:ListCalculatedAttributeDefinitions

  • profile:GetCalculatedAttributeForProfile

 October 6, 2023

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Q in Connect

The following actions are allowed to be performed on Amazon Q in Connect resources that have the resource tag 'AmazonConnectEnabled':'True' on Amazon Q in Connect knowledge bases and assistants:

  • wisdom:CreateContent

  • wisdom:DeleteContent

  • wisdom:CreateKnowledgeBase

  • wisdom:GetAssistant

  • wisdom:GetKnowledgeBase

  • wisdom:GetContent

  • wisdom:GetRecommendations

  • wisdom:GetSession

  • wisdom:NotifyRecommendationsReceived

  • wisdom:QueryAssistant

  • wisdom:StartContentUpload

  • wisdom:UntagResource

  • wisdom:TagResource

  • wisdom:CreateSession

The following List actions are allowed to be performed on all Amazon Q in Connect resources:

  • wisdom:ListAssistants

  • wisdom:KnowledgeBases

 September 29, 2023

CustomerProfilesServiceLinkedRolePolicy – Added CustomerProfilesServiceLinkedRolePolicy

New managed policy.

 March 7, 2023

AmazonConnect_FullAccess – Added permission for managing Amazon Connect Customer Profiles Service Linked Roles

Added the following action to manage Amazon Connect Customer Profiles Service Linked Roles.

  • iam:CreateServiceLinkedRole - allows you to create a service-linked role for Customer Profiles.

 January 26, 2023

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon CloudWatch

Added the following action to publish usage Amazon Connect metrics for an instance to your account.

  • cloudwatch:PutMetricData

 Februrary 22, 2022

AmazonConnect_FullAccess – Added permissions for managing Amazon Connect Customer Profiles domains

Added all permissions for managing Amazon Connect Customer Profiles domains that are created for new Amazon Connect instances.

  • profile:ListAccountIntegrations - Lists all the integrations associated with a specific URI in the AWS account.

  • profile:ListDomains - Returns a list of all the domains for an AWS account that have been created.

  • profile:GetDomain - Returns information about a specific domain.

  • profile:ListProfileObjectTypeTemplates - Allow the Amazon Connect console to display a list of templates that you can use to create your data mappings.

  • profile:GetObjectTypes - Allow you to view all the current Object Types (data mappings) that you've created.

The following permissions are allowed to be performed on domains with a name that is prefixed with amazon-connect-:

  • profile:AddProfileKey - Allows you to associate a new key value with a specific profile

  • profile:CreateDomain - Allows you to create new domains

  • profile:CreateProfile - Allows you to create new profiles

  • profile:DeleteDomain - Allows you to delete domains

  • profile:DeleteIntegration - Allows you to delete integrations with a domain

  • profile:DeleteProfile - Allows you to delete a profile

  • profile:DeleteProfileKey - Allows you to delete a profile key

  • profile:DeleteProfileObject - Allows you to delete a profile object

  • profile:DeleteProfileObjectType - Allows you to delete a profile object type

  • profile:GetIntegration - Allows you to retrieve information about an integration

  • profile:GetMatches - Allows you to retrieve possible profile matches

  • profile:GetProfileObjectType - Allows you to retrieve profile object types

  • profile:ListIntegrations - Allows you to list integrations

  • profile:ListProfileObjects - Allows you to list profile objects

  • profile:ListProfileObjectTypes - Allows you to list profile object types

  • profile:ListTagsForResource - Allows you to list tags for a resource

  • profile:MergeProfiles - Allows you to merge profile matches

  • profile:PutIntegration - Allows you to add an integration between the service and a third-party service which includes Amazon AppFlow and Amazon Connect

  • profile:PutProfileObject - Allows you to create and update objects

  • profile:PutProfileObjectType - Allows you to create and update object types

  • profile:SearchProfiles - Allows you to search profiles

  • profile:TagResource - Allows you to tag resources

  • profile:UntagResource - Allows you to untag resources

  • profile:UpdateDomain - Allows you to update domains

  • profile:UpdateProfile - Allows you to update profiles

 November 12, 2021

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Connect Customer Profiles

Added the following actions so Amazon Connect flows and the agent experience can interact with the profiles in your default Customer Profiles domain:

  • profile:SearchProfiles

  • profile:CreateProfile

  • profile:UpdateProfile

  • profile:AddProfileKey

Added the following action so Amazon Connect flows and the agent experience can interact with the profile objects in your default Customer Profiles domain:

  • profile:ListProfileObjects

Added the following action so Amazon Connect flows and the agent experience can determine whether Customer Profiles is enabled for your Amazon Connect instance:

  • profile:ListAccountIntegrations

November 12, 2021

AmazonConnectVoiceIDFullAccess – Added new AWS managed policy

Added a new AWS managed policy so you can set up your users to use Amazon Connect Voice ID.

This policy provides full access to Amazon Connect Voice ID through the AWS console, SDK, or other means.

 September 27, 2021

AmazonConnectCampaignsServiceLinkedRolePolicy – Added new service-linked role policy

Added a new service-linked role policy for outbound campaigns.

The policy provides access to retrieve all the outbound campaigns.

 September 27, 2021

AmazonConnectServiceLinkedRolePolicy – Added actions for Amazon Lex

Added the following actions for the all bots created in the account across all Regions. These actions were added to support integration with Amazon Lex.

  • lex:ListBots - Lists all the bots available in a given Region for your account.

  • lex:ListBotAliases - Lists all the aliases for a given bot.

June 15, 2021

AmazonConnect_FullAccess – Added actions for Amazon Lex

Added the following actions for the all bots created in the account across all Regions. These actions were added to support integration with Amazon Lex.

  • lex:ListBots

  • lex:ListBotAliases

 June 15, 2021

Amazon Connect started tracking changes

Amazon Connect started tracking changes for its AWS managed policies.

 June 15, 2021