Actions, resources, and condition keys for Amazon Connect
Amazon Connect (service prefix: connect) provides the following
service-specific operations, resources, actions, and condition keys for use in IAM permission
policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to secure this service and its resources by using IAM permission policies.
-
View the programmatic service authorization reference
for this service.
Topics
API operations defined by Amazon Connect
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.
| Operation | SDK client | IAM action | Condition key | Possible value(s) | Access level |
|---|---|---|---|---|---|
|
ActivateEvaluationForm |
connect |
Write |
|||
|
AssociateAnalyticsDataSet |
connect |
Write |
|||
|
AssociateApprovedOrigin |
connect |
Write |
|||
|
AssociateBot |
connect |
Write |
|||
|
AssociateContactWithUser |
connect |
Write |
|||
|
AssociateDefaultVocabulary |
connect |
Write |
|||
|
AssociateEmailAddressAlias |
connect |
Write |
|||
|
AssociateFlow |
connect |
Write |
|||
|
AssociateInstanceStorageConfig |
connect |
Write |
|||
|
AssociateLambdaFunction |
connect |
Write |
|||
|
AssociateLexBot |
connect |
Write |
|||
|
AssociatePhoneNumberContactFlow |
connect |
Write |
|||
|
AssociateQueueEmailAddresses |
connect |
Write |
|||
|
AssociateQueueQuickConnects |
connect |
Write |
|||
|
AssociateRoutingProfileQueues |
connect |
Write |
|||
|
AssociateSecurityKey |
connect |
Write |
|||
|
AssociateSecurityProfiles |
connect |
Write |
|||
|
AssociateTrafficDistributionGroupUser |
connect |
Write |
|||
|
AssociateUserProficiencies |
connect |
Write |
|||
|
AssociateWorkspace |
connect |
Write |
|||
|
BatchAssociateAnalyticsDataSet |
connect |
Write |
|||
|
BatchCreateDataTableValue |
connect |
Write |
|||
|
BatchDeleteDataTableValue |
connect |
Write |
|||
|
BatchDescribeDataTableValue |
connect |
Read |
|||
|
BatchDisassociateAnalyticsDataSet |
connect |
Write |
|||
|
BatchGetAttachedFileMetadata |
connect |
Read |
|||
|
BatchGetFlowAssociation |
connect |
List |
|||
|
BatchPutContact |
connect |
Write |
|||
|
BatchUpdateDataTableValue |
connect |
Write |
|||
|
ClaimPhoneNumber |
connect |
Write |
|||
Tagging, Write |
|||||
|
CompleteAttachedFileUpload |
connect |
Write |
|||
|
CreateAgentStatus |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateAttachedFile |
connect |
Write |
|||
|
CreateContact |
connect |
Write |
|||
|
CreateContactFlow |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateContactFlowModule |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateContactFlowModuleAlias |
connect |
Write |
|||
|
CreateContactFlowModuleVersion |
connect |
Write |
|||
|
CreateContactFlowVersion |
connect |
Write |
|||
|
CreateDataTable |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateDataTableAttribute |
connect |
Write |
|||
|
CreateEmailAddress |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateEvaluationForm |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateHoursOfOperation |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateHoursOfOperationOverride |
connect |
Write |
|||
|
CreateInstance |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateIntegrationAssociation |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateNotification |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateParticipant |
connect |
Write |
|||
|
CreatePersistentContactAssociation |
connect |
Write |
|||
|
CreatePredefinedAttribute |
connect |
Write |
|||
|
CreatePrompt |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreatePushNotificationRegistration |
connect |
Write |
|||
|
CreateQueue |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateQuickConnect |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateRoutingProfile |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateRule |
connect |
Write |
|||
|
CreateSecurityProfile |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateTaskTemplate |
connect |
Write |
|||
|
CreateTestCase |
connect |
Tagging, Write |
|||
|
CreateTrafficDistributionGroup |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateUseCase |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateUser |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateUserHierarchyGroup |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateView |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateViewVersion |
connect |
Write |
|||
|
CreateVocabulary |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateWorkspace |
connect |
Write |
|||
Tagging, Write |
|||||
|
CreateWorkspacePage |
connect |
Write |
|||
|
DeactivateEvaluationForm |
connect |
Write |
|||
|
DeleteAttachedFile |
connect |
Write |
|||
|
DeleteContactEvaluation |
connect |
Write |
|||
|
DeleteContactFlow |
connect |
Write |
|||
|
DeleteContactFlowModule |
connect |
Write |
|||
|
DeleteContactFlowModuleAlias |
connect |
Write |
|||
|
DeleteContactFlowModuleVersion |
connect |
Write |
|||
|
DeleteContactFlowVersion |
connect |
Write |
|||
|
DeleteDataTable |
connect |
Write |
|||
|
DeleteDataTableAttribute |
connect |
Write |
|||
|
DeleteEmailAddress |
connect |
Write |
|||
|
DeleteEvaluationForm |
connect |
Write |
|||
|
DeleteHoursOfOperation |
connect |
Write |
|||
|
DeleteHoursOfOperationOverride |
connect |
Write |
|||
|
DeleteInstance |
connect |
Write |
|||
|
DeleteIntegrationAssociation |
connect |
Write |
|||
|
DeleteNotification |
connect |
Write |
|||
|
DeletePredefinedAttribute |
connect |
Write |
|||
|
DeletePrompt |
connect |
Write |
|||
|
DeletePushNotificationRegistration |
connect |
Write |
|||
|
DeleteQueue |
connect |
Write |
|||
|
DeleteQuickConnect |
connect |
Write |
|||
|
DeleteRoutingProfile |
connect |
Write |
|||
|
DeleteRule |
connect |
Write |
|||
|
DeleteSecurityProfile |
connect |
Write |
|||
|
DeleteTaskTemplate |
connect |
Write |
|||
|
DeleteTrafficDistributionGroup |
connect |
Write |
|||
|
DeleteUseCase |
connect |
Write |
|||
|
DeleteUser |
connect |
Write |
|||
|
DeleteUserHierarchyGroup |
connect |
Write |
|||
|
DeleteView |
connect |
Write |
|||
|
DeleteViewVersion |
connect |
Write |
|||
|
DeleteVocabulary |
connect |
Write |
|||
|
DeleteWorkspace |
connect |
Write |
|||
|
DeleteWorkspaceMedia |
connect |
Write |
|||
|
DeleteWorkspacePage |
connect |
Write |
|||
|
DescribeAgentStatus |
connect |
Read |
|||
|
DescribeAuthenticationProfile |
connect |
Read |
|||
|
DescribeContact |
connect |
Read |
|||
|
DescribeContactEvaluation |
connect |
Read |
|||
|
DescribeContactFlow |
connect |
Read |
|||
|
DescribeContactFlowModule |
connect |
Read |
|||
|
DescribeContactFlowModuleAlias |
connect |
Read |
|||
|
DescribeDataTable |
connect |
Read |
|||
|
DescribeDataTableAttribute |
connect |
Read |
|||
|
DescribeEmailAddress |
connect |
Read |
|||
|
DescribeEvaluationForm |
connect |
Read |
|||
|
DescribeHoursOfOperation |
connect |
Read |
|||
|
DescribeHoursOfOperationOverride |
connect |
Read |
|||
|
DescribeInstance |
connect |
Read |
|||
|
DescribeInstanceAttribute |
connect |
Read |
|||
|
DescribeInstanceStorageConfig |
connect |
Read |
|||
|
DescribeNotification |
connect |
Read |
|||
|
DescribePhoneNumber |
connect |
Read |
|||
|
DescribePredefinedAttribute |
connect |
Read |
|||
|
DescribePrompt |
connect |
Read |
|||
|
DescribeQueue |
connect |
Read |
|||
|
DescribeQuickConnect |
connect |
Read |
|||
|
DescribeRoutingProfile |
connect |
Read |
|||
|
DescribeRule |
connect |
Read |
|||
|
DescribeSecurityProfile |
connect |
Read |
|||
|
DescribeTrafficDistributionGroup |
connect |
Read |
|||
|
DescribeUser |
connect |
Read |
|||
|
DescribeUserHierarchyGroup |
connect |
Read |
|||
|
DescribeUserHierarchyStructure |
connect |
Read |
|||
|
DescribeView |
connect |
Read |
|||
|
DescribeVocabulary |
connect |
Read |
|||
|
DescribeWorkspace |
connect |
Read |
|||
|
DisassociateAnalyticsDataSet |
connect |
Write |
|||
|
DisassociateApprovedOrigin |
connect |
Write |
|||
|
DisassociateBot |
connect |
Write |
|||
|
DisassociateEmailAddressAlias |
connect |
Write |
|||
|
DisassociateFlow |
connect |
Write |
|||
|
DisassociateInstanceStorageConfig |
connect |
Write |
|||
|
DisassociateLambdaFunction |
connect |
Write |
|||
|
DisassociateLexBot |
connect |
Write |
|||
|
DisassociatePhoneNumberContactFlow |
connect |
Write |
|||
|
DisassociateQueueEmailAddresses |
connect |
Write |
|||
|
DisassociateQueueQuickConnects |
connect |
Write |
|||
|
DisassociateRoutingProfileQueues |
connect |
Write |
|||
|
DisassociateSecurityKey |
connect |
Write |
|||
|
DisassociateSecurityProfiles |
connect |
Write |
|||
|
DisassociateTrafficDistributionGroupUser |
connect |
Write |
|||
|
DisassociateUserProficiencies |
connect |
Write |
|||
|
DisassociateWorkspace |
connect |
Write |
|||
|
DismissUserContact |
connect |
Write |
|||
|
EvaluateDataTableValues |
connect |
Read |
|||
|
GetAttachedFile |
connect |
Read |
|||
|
GetContactAttributes |
connect |
Read |
|||
|
GetContactMetrics |
connect |
Read |
|||
|
GetCurrentMetricData |
connect |
Read |
|||
|
GetCurrentUserData |
connect |
Read |
|||
|
GetEffectiveHoursOfOperations |
connect |
Read |
|||
|
GetEvaluationFormValidation |
connect |
Read |
|||
|
GetFederationToken |
connect |
Read |
|||
|
GetFlowAssociation |
connect |
Read |
|||
|
GetMetricData |
connect |
Read |
|||
|
GetMetricDataV2 |
connect |
Read |
|||
|
GetPromptFile |
connect |
Read |
|||
|
GetTaskTemplate |
connect |
Read |
|||
|
GetTrafficDistribution |
connect |
List |
|||
|
ImportPhoneNumber |
connect |
Write |
|||
Tagging, Write |
|||||
|
ImportWorkspaceMedia |
connect |
Write |
|||
|
ListAgentStatuses |
connect |
List |
|||
|
ListAnalyticsDataAssociations |
connect |
List |
|||
|
ListAnalyticsDataLakeDataSets |
connect |
List |
|||
|
ListApprovedOrigins |
connect |
List |
|||
|
ListAssociatedContacts |
connect |
List |
|||
|
ListAuthenticationProfiles |
connect |
List |
|||
|
ListBots |
connect |
List |
|||
|
ListContactEvaluations |
connect |
List |
|||
|
ListContactFlowModuleAliases |
connect |
List |
|||
|
ListContactFlowModuleVersions |
connect |
List |
|||
|
ListContactFlowModules |
connect |
List |
|||
|
ListContactFlowVersions |
connect |
List |
|||
|
ListContactFlows |
connect |
List |
|||
|
ListContactReferences |
connect |
List |
|||
|
ListDataTableAttributes |
connect |
List |
|||
|
ListDataTablePrimaryValues |
connect |
List |
|||
|
ListDataTableValues |
connect |
List |
|||
|
ListDataTables |
connect |
List |
|||
|
ListDefaultVocabularies |
connect |
List |
|||
|
ListEntitySecurityProfiles |
connect |
List |
|||
|
ListEvaluationFormVersions |
connect |
List |
|||
|
ListEvaluationForms |
connect |
List |
|||
|
ListFlowAssociations |
connect |
List |
|||
|
ListHoursOfOperationOverrides |
connect |
List |
|||
|
ListHoursOfOperations |
connect |
List |
|||
|
ListInstanceAttributes |
connect |
List |
|||
|
ListInstanceStorageConfigs |
connect |
List |
|||
|
ListInstances |
connect |
List |
|||
|
ListIntegrationAssociations |
connect |
List |
|||
|
ListLambdaFunctions |
connect |
List |
|||
|
ListLexBots |
connect |
List |
|||
|
ListNotifications |
connect |
Read |
|||
|
ListPhoneNumbers |
connect |
List |
|||
|
ListPhoneNumbersV2 |
connect |
List |
|||
|
ListPredefinedAttributes |
connect |
List |
|||
|
ListPrompts |
connect |
List |
|||
|
ListQueueEmailAddresses |
connect |
List |
|||
|
ListQueueQuickConnects |
connect |
List |
|||
|
ListQueues |
connect |
List |
|||
|
ListQuickConnects |
connect |
List |
|||
|
ListRealtimeContactAnalysisSegmentsV2 |
connect |
List |
|||
|
ListRoutingProfileManualAssignmentQueues |
connect |
List |
|||
|
ListRoutingProfileQueues |
connect |
List |
|||
|
ListRoutingProfiles |
connect |
List |
|||
|
ListRules |
connect |
List |
|||
|
ListSecurityKeys |
connect |
List |
|||
|
ListSecurityProfileApplications |
connect |
List |
|||
|
ListSecurityProfileFlowModules |
connect |
List |
|||
|
ListSecurityProfilePermissions |
connect |
List |
|||
|
ListSecurityProfiles |
connect |
List |
|||
|
ListTagsForResource |
connect |
Read |
|||
|
ListTaskTemplates |
connect |
List |
|||
|
ListTrafficDistributionGroupUsers |
connect |
List |
|||
|
ListTrafficDistributionGroups |
connect |
List |
|||
|
ListUseCases |
connect |
List |
|||
|
ListUserHierarchyGroups |
connect |
List |
|||
|
ListUserNotifications |
connect |
Read |
|||
|
ListUserProficiencies |
connect |
List |
|||
|
ListUsers |
connect |
List |
|||
|
ListViewVersions |
connect |
List |
|||
|
ListViews |
connect |
List |
|||
|
ListWorkspaceMedia |
connect |
List |
|||
|
ListWorkspacePages |
connect |
List |
|||
|
ListWorkspaces |
connect |
List |
|||
|
MonitorContact |
connect |
Write |
|||
|
PauseContact |
connect |
Write |
|||
|
PutUserStatus |
connect |
Write |
|||
|
ReleasePhoneNumber |
connect |
Write |
|||
|
ReplicateInstance |
connect |
Write |
|||
|
ResumeContact |
connect |
Write |
|||
|
ResumeContactRecording |
connect |
Write |
|||
|
SearchAgentStatuses |
connect |
Read |
|||
Read |
|||||
|
SearchAvailablePhoneNumbers |
connect |
List |
|||
|
SearchContactEvaluations |
connect |
Read |
|||
Read |
|||||
|
SearchContactFlowModules |
connect |
Read |
|||
Read |
|||||
|
SearchContactFlows |
connect |
Read |
|||
Read |
|||||
|
SearchContacts |
connect |
Read |
|||
Read |
|||||
Read |
|||||
|
SearchDataTables |
connect |
Read |
|||
Read |
|||||
|
SearchEmailAddresses |
connect |
Read |
|||
Read |
|||||
|
SearchEvaluationForms |
connect |
Read |
|||
Read |
|||||
|
SearchHoursOfOperationOverrides |
connect |
Read |
|||
Read |
|||||
|
SearchHoursOfOperations |
connect |
Read |
|||
Read |
|||||
|
SearchNotifications |
connect |
Read |
|||
Read |
|||||
|
SearchPredefinedAttributes |
connect |
Read |
|||
Read |
|||||
|
SearchPrompts |
connect |
Read |
|||
Read |
|||||
|
SearchQueues |
connect |
Read |
|||
Read |
|||||
|
SearchQuickConnects |
connect |
Read |
|||
Read |
|||||
|
SearchResourceTags |
connect |
List |
|||
|
SearchRoutingProfiles |
connect |
Read |
|||
Read |
|||||
|
SearchSecurityProfiles |
connect |
Read |
|||
Read |
|||||
|
SearchUserHierarchyGroups |
connect |
Read |
|||
Read |
|||||
|
SearchUsers |
connect |
Read |
|||
List |
|||||
Read |
|||||
|
SearchViews |
connect |
Read |
|||
Read |
|||||
|
SearchVocabularies |
connect |
List |
|||
|
SearchWorkspaceAssociations |
connect |
Read |
|||
|
SearchWorkspaces |
connect |
Read |
|||
Read |
|||||
|
SendChatIntegrationEvent |
connect |
Write |
|||
|
SendOutboundEmail |
connect |
Write |
|||
|
SendOutboundWebNotification |
connect |
Write |
|||
|
StartAttachedFileUpload |
connect |
Write |
|||
Tagging, Write |
|||||
|
StartChatContact |
connect |
Write |
|||
|
StartContactConversationalAnalyticsJob |
connect |
Write |
|||
|
StartContactEvaluation |
connect |
Write |
|||
Tagging, Write |
|||||
|
StartContactMediaProcessing |
connect |
Write |
|||
|
StartContactRecording |
connect |
Write |
|||
|
StartContactStreaming |
connect |
Write |
|||
|
StartEmailContact |
connect |
Write |
|||
|
StartEvaluationFormValidation |
connect |
Write |
|||
|
StartOutboundChatContact |
connect |
Write |
|||
|
StartOutboundEmailContact |
connect |
Write |
|||
|
StartOutboundVoiceContact |
connect |
Write |
|||
|
StartScreenSharing |
connect |
Write |
|||
|
StartTaskContact |
connect |
Write |
|||
|
StartWebRTCContact |
connect |
Write |
|||
|
StopContact |
connect |
Write |
|||
|
StopContactMediaProcessing |
connect |
Write |
|||
|
StopContactRecording |
connect |
Write |
|||
|
StopContactStreaming |
connect |
Write |
|||
|
SubmitContactEvaluation |
connect |
Write |
|||
|
SuspendContactRecording |
connect |
Write |
|||
|
TagContact |
connect |
Write |
|||
|
TagResource |
connect |
Tagging, Write |
|||
|
TransferContact |
connect |
Write |
|||
|
UntagContact |
connect |
Write |
|||
|
UntagResource |
connect |
Tagging, Write |
|||
|
UpdateAgentStatus |
connect |
Write |
|||
|
UpdateAuthenticationProfile |
connect |
Write |
|||
|
UpdateContact |
connect |
Write |
|||
|
UpdateContactAttributes |
connect |
Write |
|||
|
UpdateContactEvaluation |
connect |
Write |
|||
|
UpdateContactFlowContent |
connect |
Write |
|||
|
UpdateContactFlowMetadata |
connect |
Write |
|||
|
UpdateContactFlowModuleAlias |
connect |
Write |
|||
|
UpdateContactFlowModuleContent |
connect |
Write |
|||
|
UpdateContactFlowModuleMetadata |
connect |
Write |
|||
|
UpdateContactFlowName |
connect |
Write |
|||
|
UpdateContactRoutingData |
connect |
Write |
|||
|
UpdateContactSchedule |
connect |
Write |
|||
|
UpdateDataTableAttribute |
connect |
Write |
|||
|
UpdateDataTableMetadata |
connect |
Write |
|||
|
UpdateDataTablePrimaryValues |
connect |
Write |
|||
|
UpdateEmailAddressMetadata |
connect |
Write |
|||
|
UpdateEvaluationForm |
connect |
Write |
|||
|
UpdateHoursOfOperation |
connect |
Write |
|||
|
UpdateHoursOfOperationOverride |
connect |
Write |
|||
|
UpdateInstanceAttribute |
connect |
Write |
|||
|
UpdateInstanceStorageConfig |
connect |
Write |
|||
|
UpdateNotificationContent |
connect |
Write |
|||
|
UpdateParticipantAuthentication |
connect |
Write |
|||
|
UpdateParticipantRoleConfig |
connect |
Write |
|||
|
UpdatePhoneNumber |
connect |
Write |
|||
|
UpdatePhoneNumberMetadata |
connect |
Write |
|||
|
UpdatePredefinedAttribute |
connect |
Write |
|||
|
UpdatePrompt |
connect |
Write |
|||
|
UpdateQueueHoursOfOperation |
connect |
Write |
|||
|
UpdateQueueMaxContacts |
connect |
Write |
|||
|
UpdateQueueName |
connect |
Write |
|||
|
UpdateQueueOutboundCallerConfig |
connect |
Write |
|||
|
UpdateQueueOutboundEmailConfig |
connect |
Write |
|||
|
UpdateQueueStatus |
connect |
Write |
|||
|
UpdateQuickConnectConfig |
connect |
Write |
|||
|
UpdateQuickConnectName |
connect |
Write |
|||
|
UpdateRoutingProfileAgentAvailabilityTimer |
connect |
Write |
|||
|
UpdateRoutingProfileConcurrency |
connect |
Write |
|||
|
UpdateRoutingProfileDefaultOutboundQueue |
connect |
Write |
|||
|
UpdateRoutingProfileName |
connect |
Write |
|||
|
UpdateRoutingProfileQueues |
connect |
Write |
|||
|
UpdateRule |
connect |
Write |
|||
|
UpdateSecurityProfile |
connect |
Write |
|||
|
UpdateTaskTemplate |
connect |
Write |
|||
|
UpdateTrafficDistribution |
connect |
Write |
|||
|
UpdateUserConfig |
connect |
Write |
|||
|
UpdateUserHierarchy |
connect |
Write |
|||
|
UpdateUserHierarchyGroupName |
connect |
Write |
|||
|
UpdateUserHierarchyStructure |
connect |
Write |
|||
|
UpdateUserIdentityInfo |
connect |
Write |
|||
|
UpdateUserNotificationStatus |
connect |
Write |
|||
|
UpdateUserPhoneConfig |
connect |
Write |
|||
|
UpdateUserProficiencies |
connect |
Write |
|||
|
UpdateUserRoutingProfile |
connect |
Write |
|||
|
UpdateUserSecurityProfiles |
connect |
Write |
|||
|
UpdateViewContent |
connect |
Write |
|||
|
UpdateViewMetadata |
connect |
Write |
|||
|
UpdateWorkspaceMetadata |
connect |
Write |
|||
|
UpdateWorkspacePage |
connect |
Write |
|||
|
UpdateWorkspaceTheme |
connect |
Write |
|||
|
UpdateWorkspaceVisibility |
connect |
Write |
|||
|
ListRealtimeContactAnalysisSegments |
connect-contact-lens |
Read |
|||
|
DescribeView |
connectparticipant |
Read |
Actions defined by Amazon Connect
You can specify the following actions in the Action element of an IAM
policy statement. Use policies to grant permissions to perform an operation in AWS. When
you use an action in a policy, you usually allow or deny access to the API operation or CLI
command with the same name. However, in some cases, a single action controls access to more
than one operation. Alternatively, some operations require several different actions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
Grants permission to activate an evaluation form in the specified Amazon Connect instance. After the evaluation form is activated, it is available to start new evaluations based on the form |
Write |
|||
Grants permission to federate into an Amazon Connect instance (Log in for emergency access functionality in the Amazon Connect console) |
Write |
|||
Grants permission to grant access and to associate a dataset with the specified AWS account |
Write |
|||
Grants permission to associate approved origin for an existing Amazon Connect instance |
Write |
|||
Grants permission to associate a Lex bot for an existing Amazon Connect instance |
Write |
|||
Grants permission to associate a contact with a user using the Amazon Connect API |
Write |
|||
Grants permission to default vocabulary for an existing Amazon Connect instance |
Write |
|||
Grants permission to associate an alias with an email address resource in an Amazon Connect instance |
Write |
|||
Grants permission to associate a resource with a flow in an Amazon Connect instance |
Write |
|||
Grants permission to associate instance storage for an existing Amazon Connect instance |
Write |
|||
Grants permission to associate a Lambda function for an existing Amazon Connect instance |
Write |
|||
Grants permission to associate a Lex bot for an existing Amazon Connect instance |
Write |
|||
Grants permission to associate contact flow resources to phone number resources in an Amazon Connect instance |
Write |
|||
Grants permission to associate a set of email addresses with a queue |
Write |
|||
Grants permission to associate quick connects with a queue in an Amazon Connect instance |
Write |
|||
Grants permission to associate queues with a routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to associate a security key for an existing Amazon Connect instance |
Write |
|||
Grants permission to associate security profiles with an AI agent in an Amazon Connect instance |
Write |
|||
Grants permission to associate a user to a traffic distribution group in the specified Amazon Connect instance |
Write |
|||
Grants permission to associate user proficiencies to a user in an Amazon Connect instance |
Write |
|||
Grants permission to associate a workspace with a user or routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to grant access and to associate the datasets with the specified AWS account |
Write |
|||
Grants permission to batch create values in a data table in an Amazon Connect instance |
Write |
|||
Grants permission to batch delete values in a data table in an Amazon Connect instance |
Write |
|||
Grants permission to batch describe values in a data table in an Amazon Connect instance |
Read |
|||
Grants permission to revoke access and to disassociate the datasets with the specified AWS account |
Write |
|||
Grants permission to get metadata for multiple attached files from an Amazon Connect instance |
Read |
|||
Grants permission to get summary information about the flow associations for the specified Amazon Connect instance |
List |
|||
Grants permission to put contacts in an Amazon Connect instance |
Write |
|||
Grants permission to batch update values in a data table in an Amazon Connect instance |
Write |
|||
Grants permission to claim phone number resources in an Amazon Connect instance or traffic distribution group |
Write |
|||
Grants permission to complete an attached file upload in an Amazon Connect instance |
Write |
|||
Grants permission to create agent status in an Amazon Connect instance |
Write |
|||
Grants permission to create an attached file upload in an Amazon Connect instance |
Write |
|||
Grants permission to create authentication profile resources in an Amazon Connect instance |
Write |
|||
Grants permission to create a new contact using the Amazon Connect API |
Write |
|||
Grants permission to create a contact flow in an Amazon Connect instance |
Write |
|||
Grants permission to create a contact flow module in an Amazon Connect instance |
Write |
|||
Grants permission to create an alias of a flow module version in an Amazon Connect instance |
Write |
|||
Grants permission to create a version of a flow module in an Amazon Connect instance |
Write |
|||
Grants permission to create a version a flow in an Amazon Connect instance |
Write |
|||
Grants permission to create a dataTable in an Amazon Connect instance |
Write |
|||
Grants permission to create an attribute for a data table in an Amazon Connect instance |
Write |
|||
Grants permission to create an email address resource in an Amazon Connect instance |
Write |
|||
Grants permission to create an evaluation form in the specified Amazon Connect instance. The form can be used to define questions related to agent performance, and create sections to organize such questions. Question and section identifiers cannot be duplicated within the same evaluation form |
Write |
|||
Grants permission to create hours of operation in an Amazon Connect instance |
Write |
|||
Grants permission to create an hours of operation override in an Amazon Connect instance |
Write |
|||
Grants permission to create a new Amazon Connect instance |
Write |
|||
Grants permission to create an integration association with an Amazon Connect instance |
Write |
|||
Grants permission to create a notification in an Amazon Connect instance |
Write |
|||
Grants permission to add a participant to an ongoing contact |
Write |
|||
Grants permission to create persistent contact associations for a contact |
Write |
|||
Grants permission to create a predefined attribute in an Amazon Connect instance |
Write |
|||
Grants permission to create a prompt in an Amazon Connect instance |
Write |
|||
Grants permission to create a push notification registration for an Amazon Connect instance |
Write |
|||
Grants permission to create a queue in an Amazon Connect instance |
Write |
|||
Grants permission to create a quick connect in an Amazon Connect instance |
Write |
|||
Grants permission to create a routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to create a rule in an Amazon Connect instance |
Write |
|||
Grants permission to create a security profile for the specified Amazon Connect instance |
Write |
|||
Grants permission to create a task template in an Amazon Connect instance |
Write |
|||
Grants permission to create a traffic distribution group |
Write |
|||
Grants permission to create a use case for an integration association |
Write |
|||
Grants permission to create a user for the specified Amazon Connect instance |
Write |
|||
Grants permission to create a user hierarchy group in an Amazon Connect instance |
Write |
|||
Grants permission to create a view in an Amazon Connect instance |
Write |
|||
Grants permission to create a view version in an Amazon Connect instance |
Write |
|||
Grants permission to create a vocabulary in an Amazon Connect instance |
Write |
|||
Grants permission to create a workspace in an Amazon Connect instance |
Write |
|||
Grants permission to create a workspace page in an Amazon Connect instance |
Write |
|||
Grants permission to deactivate an evaluation form in the specified Amazon Connect instance. After a form is deactivated, it is no longer available for users to start new evaluations based on the form |
Write |
|||
Grants permission to delete an attached file from an Amazon Connect instance |
Write |
|||
Grants permission to delete a contact evaluation in the specified Amazon Connect instance |
Write |
|||
Grants permission to delete a contact flow in an Amazon Connect instance |
Write |
|||
Grants permission to delete a contact flow module in an Amazon Connect instance |
Write |
|||
Grants permission to delete an alias of a flow module version in an Amazon Connect instance |
Write |
|||
Grants permission to delete a version of a flow module in an Amazon Connect instance |
Write |
|||
Grants permission to delete a version of a flow in an Amazon Connect instance |
Write |
|||
Grants permission to delete a data table in an Amazon Connect instance |
Write |
|||
Grants permission to delete an attribute of a data table in an Amazon Connect instance |
Write |
|||
Grants permission to delete an email address resource in an Amazon Connect instance |
Write |
|||
Grants permission to delete an evaluation form in the specified Amazon Connect instance. If the version property is provided, only the specified version of the evaluation form is deleted |
Write |
|||
Grants permission to delete hours of operation in an Amazon Connect instance |
Write |
|||
Grants permission to delete an hours of operation override in an Amazon Connect instance |
Write |
|||
Grants permission to delete an Amazon Connect instance. When you remove an instance, the link to an existing AWS directory is also removed |
Write |
|||
Grants permission to delete an integration association from an Amazon Connect instance. The association must not have any use cases associated with it |
Write |
|||
Grants permission to delete a notification in an Amazon Connect instance |
Write |
|||
Grants permission to delete a predefined attribute in an Amazon Connect instance |
Write |
|||
Grants permission to delete a prompt in an Amazon Connect instance |
Write |
|||
Grants permission to delete a push notification registration for an Amazon Connect instance |
Write |
|||
Grants permission to delete a queue in an Amazon Connect instance |
Write |
|||
Grants permission to delete a quick connect in an Amazon Connect instance |
Write |
|||
Grants permission to delete routing profiles in an Amazon Connect instance |
Write |
|||
Grants permission to delete a rule in an Amazon Connect instance |
Write |
|||
Grants permission to delete a security profile in an Amazon Connect instance |
Write |
|||
Grants permission to delete a task template in an Amazon Connect instance |
Write |
|||
Grants permission to delete a traffic distribution group |
Write |
|||
Grants permission to delete a use case from an integration association |
Write |
|||
Grants permission to delete a user in an Amazon Connect instance |
Write |
|||
Grants permission to delete a user hierarchy group in an Amazon Connect instance |
Write |
|||
Grants permission to delete a view in an Amazon Connect instance |
Write |
|||
Grants permission to delete a view version in an Amazon Connect instance |
Write |
|||
Grants permission to delete a vocabulary in an Amazon Connect instance |
Write |
|||
Grants permission to delete a workspace in an Amazon Connect instance |
Write |
|||
Grants permission to delete workspace media in an Amazon Connect instance |
Write |
|||
Grants permission to delete a workspace page in an Amazon Connect instance |
Write |
|||
Grants permission to describe agent status in an Amazon Connect instance |
Read |
|||
Grants permission to describe authentication profile resources in an Amazon Connect instance |
Read |
|||
Grants permission to describe a contact in an Amazon Connect instance |
Read |
|||
Grants permission to describe a contact evaluation in the specified Amazon Connect instance |
Read |
|||
Grants permission to describe a contact flow in an Amazon Connect instance |
Read |
|||
Grants permission to describe a contact flow module in an Amazon Connect instance |
Read |
|||
Grants permission to describe an alias of a flow module version in an Amazon Connect instance |
Read |
|||
Grants permission to describe a data table in an Amazon Connect instance |
Read |
|||
Grants permission to describe an attribute of a data table in an Amazon Connect instance |
Read |
|||
Grants permission to describe an email address resource in an Amazon Connect instance |
Read |
|||
Grants permission to describe an evaluation form in the specified Amazon Connect instance. If the version property is not provided, the latest version of the evaluation form is described |
Read |
|||
Grants permission to describe hours of operation in an Amazon Connect instance |
Read |
|||
Grants permission to describe an hours of operation override in an Amazon Connect instance |
Read |
|||
Grants permission to view details of an Amazon Connect instance and is also required to create an instance |
Read |
|||
Grants permission to view the attribute details of an existing Amazon Connect instance |
Read |
|||
Grants permission to view the instance storage configuration for an existing Amazon Connect instance |
Read |
|||
Grants permission to describe a notification in an Amazon Connect instance |
Read |
|||
Grants permission to describe phone number resources in an Amazon Connect instance or traffic distribution group |
Read |
|||
Grants permission to describe a predefined attribute in an Amazon Connect instance |
Read |
|||
Grants permission to describe a prompt in an Amazon Connect instance |
Read |
|||
Grants permission to describe a queue in an Amazon Connect instance |
Read |
|||
Grants permission to describe a quick connect in an Amazon Connect instance |
Read |
|||
Grants permission to describe a routing profile in an Amazon Connect instance |
Read |
|||
Grants permission to describe a rule in an Amazon Connect instance |
Read |
|||
Grants permission to describe a security profile in an Amazon Connect instance |
Read |
|||
Grants permission to describe a traffic distribution group |
Read |
|||
Grants permission to describe a user in an Amazon Connect instance |
Read |
|||
Grants permission to describe a hierarchy group for an Amazon Connect instance |
Read |
|||
Grants permission to describe the hierarchy structure for an Amazon Connect instance |
Read |
|||
Grants permission to describe a view in an Amazon Connect instance |
Read |
|||
Grants permission to describe a vocabulary in an Amazon Connect instance |
Read |
|||
Grants permission to describe a workspace in an Amazon Connect instance |
Read |
|||
Grants permission to revoke access and to disassociate a dataset with the specified AWS account |
Write |
|||
Grants permission to disassociate approved origin for an existing Amazon Connect instance |
Write |
|||
Grants permission to disassociate a Lex bot for an existing Amazon Connect instance |
Write |
|||
Grants permission to disassociate an alias from an email address resource in an Amazon Connect instance |
Write |
|||
Grants permission to disassociate a resource from a flow in an Amazon Connect instance |
Write |
|||
Grants permission to disassociate instance storage for an existing Amazon Connect instance |
Write |
|||
Grants permission to disassociate a Lambda function for an existing Amazon Connect instance |
Write |
|||
Grants permission to disassociate a Lex bot for an existing Amazon Connect instance |
Write |
|||
Grants permission to disassociate contact flow resources from phone number resources in an Amazon Connect instance |
Write |
|||
Grants permission to disassociate a set of email addresses from a queue |
Write |
|||
Grants permission to disassociate quick connects from a queue in an Amazon Connect instance |
Write |
|||
Grants permission to disassociate queues from a routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to disassociate the security key for an existing Amazon Connect instance |
Write |
|||
Grants permission to disassociate security profiles with an AI agent in an Amazon Connect instance |
Write |
|||
Grants permission to disassociate a user from a traffic distribution group in the specified Amazon Connect instance |
Write |
|||
Grants permission to disassociate user proficiencies from a user in an Amazon Connect instance |
Write |
|||
Grants permission to disassociate a workspace from a user or routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to dismiss terminated Contact from Agent CCP |
Write |
|||
Grants permission to evaluate values in a data table in an Amazon Connect instance |
Read |
|||
Grants permission to get an attached file from an Amazon Connect instance |
Read |
|||
Grants permission to retrieve the contact attributes for the specified contact |
Read |
|||
Grants permission to get contact metrics in an Amazon Connect instance |
Read |
|||
Grants permission to retrieve current metric data for queues and routing profiles in an Amazon Connect instance |
Read |
|||
Grants permission to retrieve current user data in an Amazon Connect instance |
Read |
|||
Grants permission to get effective hours of operation resources in an Amazon Connect instance |
Read |
|||
Grants permission to get an evaluation form validation in the specified Amazon Connect instance. If the version property is not provided, the validation of the latest version of the evaluation form is provided |
Read |
|||
Grants permission to federate into an Amazon Connect instance when using SAML-based authentication for identity management |
Read |
|||
Grants permission to get information about the flow associations for the specified Amazon Connect instance |
Read |
|||
Grants permission to retrieve historical metric data for queues in an Amazon Connect instance |
Read |
|||
Grants permission to retrieve metric data in an Amazon Connect instance |
Read |
|||
Grants permission to get details about a prompt's presigned Amazon S3 URL in an Amazon Connect instance |
Read |
|||
Grants permission to get details about specified task template in an Amazon Connect instance |
Read |
|||
Grants permission to read traffic distribution for a traffic distribution group |
List |
|||
Grants permission to import phone number resources to an Amazon Connect instance |
Write |
|||
Grants permission to import workspace media in an Amazon Connect instance |
Write |
|||
Grants permission to list agent statuses in an Amazon Connect instance |
List |
|||
Grants permission to list the association status of a dataset for a given Amazon Connect instance |
List |
|||
Grants permission to list data lake datasets available to associate with for a given Amazon Connect instance |
List |
|||
Grants permission to view approved origins of an existing Amazon Connect instance |
List |
|||
Grants permission to list the contacts associated with an email address in an Amazon Connect instance |
List |
|||
Grants permission to list authentication profile resources in an Amazon Connect instance |
List |
|||
Grants permission to view the Lex bots of an existing Amazon Connect instance |
List |
|||
Grants permission to list contact evaluations in the specified Amazon Connect instance |
List |
|||
Grants permission to list the aliases of a flow module in an Amazon Connect instance |
List |
|||
Grants permission to list all the versions of a flow module in an Amazon Connect instance |
List |
|||
Grants permission to list contact flow module resources in an Amazon Connect instance |
List |
|||
Grants permission to list all the versions a flow in an Amazon Connect instance |
List |
|||
Grants permission to list contact flow resources in an Amazon Connect instance |
List |
|||
Grants permission to list references associated with a contact in an Amazon Connect instance |
List |
|||
Grants permission to list attributes of a data table in an Amazon Connect instance |
List |
|||
Grants permission to list primary values in a data table in an Amazon Connect instance |
List |
|||
Grants permission to list values in a data table in an Amazon Connect instance |
List |
|||
Grants permission to list data tables in an Amazon Connect instance |
List |
|||
Grants permission to list default vocabularies associated with a Amazon Connect instance |
List |
|||
Grants permission to list security profiles associated with an entity in an Amazon Connect instance |
List |
|||
Grants permission to list versions of an evaluation form in the specified Amazon Connect instance |
List |
|||
Grants permission to list evaluation forms in the specified Amazon Connect instance |
List |
|||
Grants permission to list summary information about the flow associations for the specified Amazon Connect instance |
List |
|||
Grants permission to list hours of operation override resources in an Amazon Connect instance |
List |
|||
Grants permission to list hours of operation resources in an Amazon Connect instance |
List |
|||
Grants permission to view the attributes of an existing Amazon Connect instance |
List |
|||
Grants permission to view storage configurations of an existing Amazon Connect instance |
List |
|||
Grants permission to view the Amazon Connect instances associated with an AWS account |
List |
|||
Grants permission to list summary information about the integration associations for the specified Amazon Connect instance |
List |
|||
Grants permission to view the Lambda functions of an existing Amazon Connect instance |
List |
|||
Grants permission to view the Lex bots of an existing Amazon Connect instance |
List |
|||
Grants permission to list notifications in an Amazon Connect instance |
Read |
|||
Grants permission to list phone number resources in an Amazon Connect instance |
List |
|||
Grants permission to list phone number resources in an Amazon Connect instance |
List |
|||
Grants permission to list predefined attributes in an Amazon Connect instance |
List |
|||
Grants permission to list prompt resources in an Amazon Connect instance |
List |
|||
Grants permission to list the email address metadata associated with a queue |
List |
|||
Grants permission to list quick connect resources in a queue in an Amazon Connect instance |
List |
|||
Grants permission to list queue resources in an Amazon Connect instance |
List |
|||
Grants permission to list quick connect resources in an Amazon Connect instance |
List |
|||
Grants permission to list the analysis segments for a real-time analysis session |
Read |
|||
Grants permission to list the analysis segments for a real-time chat analytics session |
List |
|||
Grants permission to list manual assignment queue resources in a routing profile in an Amazon Connect instance |
List |
|||
Grants permission to list queue resources in a routing profile in an Amazon Connect instance |
List |
|||
Grants permission to list routing profile resources in an Amazon Connect instance |
List |
|||
Grants permission to list rules associated with a Amazon Connect instance |
List |
|||
Grants permission to view the security keys of an existing Amazon Connect instance |
List |
|||
Grants permission to list applications associated with a specific security profile in an Amazon Connect instance |
List |
|||
Grants permission to list flow modules associated with a security profile in an Amazon Connect instance |
List |
|||
Grants permission to list permissions associated with security profile in an Amazon Connect instance |
List |
|||
Grants permission to list security profile resources in an Amazon Connect instance |
List |
|||
Grants permission to list tags for an Amazon Connect resource |
Read |
|||
Grants permission to list task template resources in an Amazon Connect instance |
List |
|||
Grants permission to list the active user associations for a traffic distribution group |
List |
|||
Grants permission to list traffic distribution groups |
List |
|||
Grants permission to list the use cases of an integration association |
List |
|||
Grants permission to list the hierarchy group resources in an Amazon Connect instance |
List |
|||
Grants permission to list notifications for a user in an Amazon Connect instance |
Read |
|||
Grants permission to list user proficiencies from a user in an Amazon Connect instance |
List |
|||
Grants permission to list user resources in an Amazon Connect instance |
List |
|||
Grants permission to list the view versions in an Amazon Connect instance |
List |
|||
Grants permission to list the views in an Amazon Connect instance |
List |
|||
Grants permission to list workspace media in an Amazon Connect instance |
List |
|||
Grants permission to list workspace pages in an Amazon Connect instance |
List |
|||
Grants permission to list workspaces in an Amazon Connect instance |
List |
|||
Grants permission to monitor an ongoing contact |
Write |
|||
Grants permission to pause an ongoing contact |
Write |
|||
Grants permission to switch User Status in an Amazon Connect instance |
Write |
|||
Grants permission to release phone number resources in an Amazon Connect instance |
Write |
|||
Grants permission to create a replica of an Amazon Connect instance |
Write |
|||
Grants permission to resume a paused contact |
Write |
|||
Grants permission to resume recording for the specified contact |
Write |
|||
Grants permission to search agent status resources in an Amazon Connect instance |
Read |
|||
Grants permission to search phone number resources in an Amazon Connect instance or traffic distribution group |
List |
|||
Grants permission to search evaluation resources in an Amazon Connect instance |
Read |
|||
Grants permission to search contact flow module resources in an Amazon Connect instance |
Read |
|||
Grants permission to search contact flow resources in an Amazon Connect instance |
Read |
|||
Grants permission to search contacts in an Amazon Connect instance |
Read |
|||
Grants permission to search data tables in an Amazon Connect instance |
Read |
|||
Grants permission to search email address resources in an Amazon Connect instance |
Read |
|||
Grants permission to search evaluation forms resources in an Amazon Connect instance |
Read |
|||
Grants permission to search hours of operation override resources in an Amazon Connect instance |
Read |
|||
Grants permission to search hours of operation resources in an Amazon Connect instance |
Read |
|||
Grants permission to search notifications in an Amazon Connect instance |
Read |
|||
Grants permission to search predefined attributes in an Amazon Connect instance |
Read |
|||
Grants permission to search prompt resources in an Amazon Connect instance |
Read |
|||
Grants permission to search queue resources in an Amazon Connect instance |
Read |
|||
Grants permission to search quick connect resources in an Amazon Connect instance |
Read |
|||
Grants permission to search tags that are used in an Amazon Connect instance |
List |
|||
Grants permission to search routing profile resources in an Amazon Connect instance |
Read |
|||
Grants permission to search security profile resources in an Amazon Connect instance |
Read |
|||
Grants permission to search user hierarchy group resources in an Amazon Connect instance |
Read |
|||
Grants permission to search user resources in an Amazon Connect instance |
Read |
|||
Grants permission to search views in an Amazon Connect instance |
Read |
|||
Grants permission to search vocabularies in a Amazon Connect instance |
List |
|||
Grants permission to search workspace associations in an Amazon Connect instance |
Read |
|||
Grants permission to search workspaces in an Amazon Connect instance |
Read |
|||
Grants permission to send chat integration events using the Amazon Connect API |
Write |
|||
Grants permission to send outbound email using the Amazon Connect API |
Write |
|||
Grants permission to start an attached file upload in an Amazon Connect instance |
Write |
|||
Grants permission to initiate a chat using the Amazon Connect API |
Write |
|||
Grants permission to start analysis for a contact in Amazon Connect instance |
Write |
|||
Grants permission to start an empty evaluation in the specified Amazon Connect instance, using the given evaluation form for the particular contact. The evaluation form version used for the contact evaluation corresponds to the currently activated version. If no version is activated for the evaluation form, the contact evaluation cannot be started |
Write |
|||
Grants permission to start message processing on an ongoing contact |
Write |
|||
Grants permission to start recording for the specified contact |
Write |
|||
Grants permission to start chat streaming using the Amazon Connect API |
Write |
|||
Grants permission to initiate an inbound email using the Amazon Connect API |
Write |
|||
Grants permission to start an evaluation form validation in the specified Amazon Connect instance |
Write |
|||
Grants permission to initiate an outbound chat using the Amazon Connect API |
Write |
|||
Grants permission to initiate an outbound email using the Amazon Connect API |
Write |
|||
Grants permission to initiate outbound calls using the Amazon Connect API |
Write |
|||
Grants permission to start screen sharing for contact |
Write |
|||
Grants permission to initiate a task using the Amazon Connect API |
Write |
|||
Grants permission to initiate a WebRTC contact using the Amazon Connect API |
Write |
|||
Grants permission to stop contacts that were initiated using the Amazon Connect API. If you use this operation on an active contact the contact ends, even if the agent is active on a call with a customer |
Write |
|||
Grants permission to stop message processing on an ongoing contact |
Write |
|||
Grants permission to stop recording for the specified contact |
Write |
|||
Grants permission to stop chat streaming using the Amazon Connect API |
Write |
|||
Grants permission to submit a contact evaluation in the specified Amazon Connect instance. Answers included in the request are merged with existing answers for the given evaluation. If no answers or notes are passed, the evaluation is submitted with the existing answers and notes. You can delete an answer or note by passing an empty object ({}) to the question identifier |
Write |
|||
Grants permission to suspend recording for the specified contact |
Write |
|||
Grants permission to tag a contact in an Amazon Connect instance |
Write |
|||
Grants permission to tag an Amazon Connect resource |
Tagging, Write |
|||
Grants permission to transfer the contact to another queue or agent |
Write |
|||
Grants permission to untag a contact in an Amazon Connect instance |
Write |
|||
Grants permission to untag an Amazon Connect resource |
Tagging, Write |
|||
Grants permission to update agent status in an Amazon Connect instance |
Write |
|||
Grants permission to update authentication profile resources in an Amazon Connect instance |
Write |
|||
Grants permission to update a contact in an Amazon Connect instance |
Write |
|||
Grants permission to create or update the contact attributes associated with the specified contact |
Write |
|||
Grants permission to update details about a contact evaluation in the specified Amazon Connect instance. A contact evaluation must be in the draft state. Answers included in the request are merged with existing answers for the given evaluation. An answer or note can be deleted by passing an empty object ({}) to the question identifier |
Write |
|||
Grants permission to update contact flow content in an Amazon Connect instance |
Write |
|||
Grants permission to update the metadata of a contact flow in an Amazon Connect instance |
Write |
|||
Grants permission to update an alias of a flow module version in an Amazon Connect instance |
Write |
|||
Grants permission to update contact flow module content in an Amazon Connect instance |
Write |
|||
Grants permission to update the metadata of a contact flow module in an Amazon Connect instance |
Write |
|||
Grants permission to update the name and description of a contact flow in an Amazon Connect instance |
Write |
|||
Grants permission to update routing properties on a contact in an Amazon Connect instance |
Write |
|||
Grants permission to update the schedule of a contact that is already scheduled in an Amazon Connect instance |
Write |
|||
Grants permission to update an attribute of a data table in an Amazon Connect instance |
Write |
|||
Grants permission to update metadata of a data table in an Amazon Connect instance |
Write |
|||
Grants permission to update primary values in a data table in an Amazon Connect instance |
Write |
|||
Grants permission to update the metadata of an email address resource in an Amazon Connect instance |
Write |
|||
Grants permission to update details about a specific evaluation form version in the specified Amazon Connect instance. Question and section identifiers cannot be duplicated within the same evaluation form |
Write |
|||
Grants permission to update hours of operation in an Amazon Connect instance |
Write |
|||
Grants permission to update an hours of operation override in an Amazon Connect instance |
Write |
|||
Grants permission to update the attribute for an existing Amazon Connect instance |
Write |
|||
Grants permission to update the storage configuration for an existing Amazon Connect instance |
Write |
|||
Grants permission to update the content of a notification in an Amazon Connect instance |
Write |
|||
Grants permission to update and continue authentication for a specific contact |
Write |
|||
Grants permission to update participant role configurations associated with a contact |
Write |
|||
Grants permission to update phone number resources in an Amazon Connect instance or traffic distribution group |
Write |
|||
Grants permission to update the metadata of a phone number resource in an Amazon Connect instance or traffic distribution group |
Write |
|||
Grants permission to update a predefined attribute in an Amazon Connect instance |
Write |
|||
Grants permission to update a prompt's name, description, and Amazon S3 URI in an Amazon Connect instance |
Write |
|||
Grants permission to update queue hours of operation in an Amazon Connect instance |
Write |
|||
Grants permission to update queue capacity in an Amazon Connect instance |
Write |
|||
Grants permission to update a queue name and description in an Amazon Connect instance |
Write |
|||
Grants permission to update queue outbound caller config in an Amazon Connect instance |
Write |
|||
Grants permission to update the outbound email configuration for a queue in an Amazon Connect instance |
Write |
|||
Grants permission to update queue status in an Amazon Connect instance |
Write |
|||
Grants permission to update the configuration of a quick connect in an Amazon Connect instance |
Write |
|||
Grants permission to update a quick connect name and description in an Amazon Connect instance |
Write |
|||
Grants permission to update a routing profile agent availability timer in an Amazon Connect instance |
Write |
|||
Grants permission to update the concurrency in a routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to update the outbound queue in a routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to update a routing profile name and description in an Amazon Connect instance |
Write |
|||
Grants permission to update the queues in routing profile in an Amazon Connect instance |
Write |
|||
Grants permission to update a rule for an existing Amazon Connect instance |
Write |
|||
Grants permission to update a security profile group for a user in an Amazon Connect instance |
Write |
|||
Grants permission to update task template belonging to a Amazon Connect instance |
Write |
|||
Grants permission to update traffic distribution for a traffic distribution group |
Write |
|||
Grants permission to update a hierarchy group for a user in an Amazon Connect instance |
Write |
|||
Grants permission to update a user hierarchy group name in an Amazon Connect instance |
Write |
|||
Grants permission to update user hierarchy structure in an Amazon Connect instance |
Write |
|||
Grants permission to update identity information for a user in an Amazon Connect instance |
Write |
|||
Grants permission to update the status of a user notification in an Amazon Connect instance |
Write |
|||
Grants permission to update phone configuration settings for a user in an Amazon Connect instance |
Write |
|||
Grants permission to update user proficiencies from a user in an Amazon Connect instance |
Write |
|||
Grants permission to update a routing profile for a user in an Amazon Connect instance |
Write |
|||
Grants permission to update security profiles for a user in an Amazon Connect instance |
Write |
|||
Grants permission to update a view's content in an Amazon Connect instance |
Write |
|||
Grants permission to update a view's metadata in an Amazon Connect instance |
Write |
|||
Grants permission to update workspace metadata in an Amazon Connect instance |
Write |
|||
Grants permission to update a workspace page in an Amazon Connect instance |
Write |
|||
Grants permission to update workspace theme in an Amazon Connect instance |
Write |
|||
Grants permission to update workspace visibility in an Amazon Connect instance |
Write |
Permission-only actions for Amazon Connect
The following actions are defined by Amazon Connect but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
Grants permission to associate a Customer Profiles domain for an existing Amazon Connect instance |
Write |
|||
Grants permission to describe the status of forecasting, planning, and scheduling integration on an Amazon Connect instance |
Read |
|||
Grants permission to disassociate a Customer Profiles domain for an existing Amazon Connect instance |
Write |
|||
Grants permission to send integration events using the Amazon Connect API |
Write |
|||
Grants permission to send outbound chat messages using the Amazon Connect API |
Write |
|||
Grants permission to send outbound web notifications using the Amazon Connect API |
Write |
|||
Grants permission to enable forecasting, planning, and scheduling integration on an Amazon Connect instance |
Write |
|||
Grants permission to disable forecasting, planning, and scheduling integration on an Amazon Connect instance |
Write |
Resource types defined by Amazon Connect
The following resource types are defined by this service and can be used in the
Resource element of IAM permission policy statements.
| Resource types | ARN | Condition keys |
|---|---|---|
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/agent-state/${AgentStatusId} |
||
arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/${AssistantId}/${AIAgentId}:${Version} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/file/${FileId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/authentication-profile/${AuthenticationProfileId} |
||
arn:${Partition}:connect:${Region}:aws:view/${ViewId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/contact/${ContactId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/contact-evaluation/${EvaluationId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/contact-flow/${ContactFlowId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/flow-module/${ContactFlowModuleId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/view/${ViewId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/view/${ViewId}:${ViewVersion} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/data-table/${DataTableId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/email-address/${EmailAddressId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/evaluation-form/${FormId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/agent-group/${HierarchyGroupId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/operating-hours/${HoursOfOperationId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/integration-association/${IntegrationAssociationId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/phone-number/${PhoneNumberId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/notification/${NotificationId} |
||
arn:${Partition}:connect:${Region}:${Account}:phone-number/${PhoneNumberId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/prompt/${PromptId} |
||
arn:${Partition}:connect:${Region}:aws:view/${ViewId}:${ViewQualifier} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/view/${ViewId}:${ViewQualifier} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/queue/${QueueId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/transfer-destination/${QuickConnectId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/routing-profile/${RoutingProfileId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/rule/${RuleId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/security-profile/${SecurityProfileId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/task-template/${TaskTemplateId} |
||
arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/${TrafficDistributionGroupId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/use-case/${UseCaseId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/agent/${UserId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/vocabulary/${VocabularyId} |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/agent-state/* |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/contact-flow/* |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/phone-number/* |
||
arn:${Partition}:connect:${Region}:${Account}:phone-number/* |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/queue/* |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/transfer-destination/* |
||
arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/workspace/${WorkspaceId} |
Condition keys for Amazon Connect
Amazon Connect defines the following condition keys that can be used in the
Condition element of an IAM policy.
| Condition keys | Description | Type |
|---|---|---|
Filters access by using tag key-value pairs in the request |
String |
|
Filters access by using tag key-value pairs attached to the resource |
String |
|
Filters access by using tag keys in the request |
ArrayOfString |
|
Filters access by restricting access to create contacts based on Assignment Type |
String |
|
Filters access by the attribute type of the Amazon Connect instance |
String |
|
Filters access by Channel |
String |
|
Filters access by ContactAssociationId |
String |
|
Filters access by restricting access to create contacts based on the initiation method of the contact |
String |
|
Filters access by restricting data table operations based on expression type |
String |
|
Filters access by Flow type |
ArrayOfString |
|
Filters access by restricting federation into specified Amazon Connect instances |
String |
|
Filters access by restricting the listed segments using the output type of the Amazon Connect Contact Lens real-time segment |
String |
|
Filters access by restricting the listed segments using the segment types of the Amazon Connect Contact Lens real-time segment |
ArrayOfString |
|
Filters access by restricting the monitor capabilities of the user in the request |
ArrayOfString |
|
Filters access by PreferredUserArn |
ARN |
|
Filters access by restricting which primary attributes the user can manage |
String |
|
Filters access by restricting searches using analysis outputs from Amazon Connect Contact Lens |
ArrayOfString |
|
Filters access by TagFilter condition passed in the search request |
String |
|
Filters access by restricting the storage resource type of the Amazon Connect instance storage configuration |
String |
|
Filters access by restricting creation of a contact for specific subtypes |
String |
|
Filters access by UserArn |
ARN |
