IAM / other / connect

AWS Connect (IAM)

JSON →
AWSconnectother

Amazon Connect is a cloud-based contact center service that makes it easy to set up and manage a customer service center.

iamaws
Permissions
Actions in this service
connect:ListUsers
connect:DescribeUser
connect:ListQueues
connect:DescribeQueue
connect:ListRules
connect:DescribeRule
connect:ListViews
connect:DescribeView
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "connect:ListUsers", "connect:DescribeUser", "connect:ListQueues", "connect:DescribeQueue", "connect:ListRules", "connect:DescribeRule", "connect:ListViews", "connect:DescribeView" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object()s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid connect:* — grants full control including creating, updating, and deleting users, queues, rules, and instances
Avoid connect:CreateInstance and connect:DeleteInstance — can create or remove entire contact center instances
Resources