Les traductions sont fournies par des outils de traduction automatique. En cas de conflit entre le contenu d'une traduction et celui de la version originale en anglais, la version anglaise prévaudra.

AmazonConnectSynchronizationServiceRolePolicy

Descriptif: permet à Amazon Connect de se synchroniser AWS ressources dans toutes les régions en votre nom.

AmazonConnectSynchronizationServiceRolePolicy est un AWS politique gérée.

Utilisation de cette politique

Cette politique est associée à un rôle lié à un service qui permet au service d'effectuer des actions en votre nom. Vous pouvez attacher cette politique à vos utilisateurs, groupes ou rôles.

Détails de la politique

Version de la politique

Version de la politique : v7 (par défaut)

La version par défaut de la politique est la version qui définit les autorisations pour la politique. Lorsqu'un utilisateur ou un rôle doté de la politique demande l'accès à un AWS ressource, AWS vérifie la version par défaut de la politique pour déterminer si la demande doit être autorisée.

Document de politique JSON

{
  "Version" : "2012-10-17",
  "Statement" : [
    {
      "Sid" : "AllowConnectActions",
      "Effect" : "Allow",
      "Action" : [
        "connect:Create*",
        "connect:BatchCreate*",
        "connect:Update*",
        "connect:BatchUpdate*",
        "connect:Delete*",
        "connect:BatchDelete*",
        "connect:Describe*",
        "connect:BatchDescribe*",
        "connect:List*",
        "connect:Search*",
        "connect:Associate*",
        "connect:Disassociate*",
        "connect:Get*",
        "connect:BatchGet*",
        "connect:Import*",
        "connect:TagResource",
        "connect:UntagResource"
      ],
      "Resource" : "*"
    },
    {
      "Sid" : "DisallowedConnectActions",
      "Effect" : "Deny",
      "Action" : [
        "connect:Start*",
        "connect:Stop*",
        "connect:Resume*",
        "connect:Suspend*",
        "connect:*Contact",
        "connect:SearchContacts",
        "connect:*ContactAttributes*",
        "connect:*RealtimeContact*",
        "connect:*AnalyticsData*",
        "connect:*MetricData*",
        "connect:*UserData*",
        "connect:*ContactEvaluation",
        "connect:GetAttachedFile",
        "connect:BatchGetAttachedFileMetadata",
        "connect:DeleteAttachedFile",
        "connect:CompleteAttachedFileUpload",
        "connect:CreateAttachedFile",
        "connect:UpdateContactSchedule",
        "connect:UpdateContactRoutingData",
        "connect:ListContactReferences",
        "connect:CreateParticipant",
        "connect:CreatePersistentContactAssociation",
        "connect:CreateInstance",
        "connect:DeleteInstance",
        "connect:ListInstances",
        "connect:ReplicateInstance",
        "connect:GetFederationToken",
        "connect:ClaimPhoneNumber",
        "connect:ImportPhoneNumber",
        "connect:ReleasePhoneNumber",
        "connect:SearchAvailablePhoneNumbers",
        "connect:CreateTrafficDistributionGroup",
        "connect:DeleteTrafficDistributionGroup",
        "connect:GetTrafficDistribution",
        "connect:UpdateTrafficDistribution"
      ],
      "Resource" : "*"
    },
    {
      "Sid" : "AllowPutMetricsForConnectNamespace",
      "Effect" : "Allow",
      "Action" : "cloudwatch:PutMetricData",
      "Resource" : "*",
      "Condition" : {
        "StringEquals" : {
          "cloudwatch:namespace" : "AWS/Connect"
        }
      }
    },
    {
      "Sid" : "AllowAppIntegrationsListApplications",
      "Effect" : "Allow",
      "Action" : [
        "app-integrations:ListApplicationAssociations",
        "app-integrations:ListApplications"
      ],
      "Resource" : "*"
    },
    {
      "Sid" : "AllowAppIntegrationsScopedToApplications",
      "Effect" : "Allow",
      "Action" : [
        "app-integrations:CreateApplication",
        "app-integrations:GetApplication",
        "app-integrations:UpdateApplication",
        "app-integrations:DeleteApplication",
        "app-integrations:ListTagsForResource",
        "app-integrations:TagResource",
        "app-integrations:UntagResource"
      ],
      "Resource" : "arn:aws:app-integrations:*:*:application/*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    },
    {
      "Sid" : "AllowWisdomActions",
      "Effect" : "Allow",
      "Action" : [
        "wisdom:CreateAssistant",
        "wisdom:DeleteAssistant",
        "wisdom:GetAssistant",
        "wisdom:ListAssistants",
        "wisdom:UpdateAssistantAIAgent",
        "wisdom:RemoveAssistantAIAgent",
        "wisdom:CreateAssistantAssociation",
        "wisdom:DeleteAssistantAssociation",
        "wisdom:GetAssistantAssociation",
        "wisdom:ListAssistantAssociations",
        "wisdom:CreateAIAgent",
        "wisdom:CreateAIAgentVersion",
        "wisdom:DeleteAIAgent",
        "wisdom:DeleteAIAgentVersion",
        "wisdom:GetAIAgent",
        "wisdom:ListAIAgents",
        "wisdom:ListAIAgentVersions",
        "wisdom:UpdateAIAgent",
        "wisdom:CreateAIPrompt",
        "wisdom:CreateAIPromptVersion",
        "wisdom:DeleteAIPrompt",
        "wisdom:DeleteAIPromptVersion",
        "wisdom:GetAIPrompt",
        "wisdom:ListAIPrompts",
        "wisdom:ListAIPromptVersions",
        "wisdom:UpdateAIPrompt",
        "wisdom:CreateAIGuardrail",
        "wisdom:CreateAIGuardrailVersion",
        "wisdom:DeleteAIGuardrail",
        "wisdom:DeleteAIGuardrailVersion",
        "wisdom:GetAIGuardrail",
        "wisdom:ListAIGuardrails",
        "wisdom:ListAIGuardrailVersions",
        "wisdom:UpdateAIGuardrail",
        "wisdom:CreateKnowledgeBase",
        "wisdom:DeleteKnowledgeBase",
        "wisdom:GetKnowledgeBase",
        "wisdom:ListKnowledgeBases",
        "wisdom:UpdateKnowledgeBaseTemplateUri",
        "wisdom:RemoveKnowledgeBaseTemplateUri",
        "wisdom:CreateContent",
        "wisdom:StartContentUpload",
        "wisdom:DeleteContent",
        "wisdom:GetContent",
        "wisdom:GetContentSummary",
        "wisdom:ListContents",
        "wisdom:UpdateContent",
        "wisdom:CreateContentAssociation",
        "wisdom:DeleteContentAssociation",
        "wisdom:GetContentAssociation",
        "wisdom:ListContentAssociations",
        "wisdom:CreateQuickResponse",
        "wisdom:DeleteQuickResponse",
        "wisdom:GetQuickResponse",
        "wisdom:ListQuickResponses",
        "wisdom:UpdateQuickResponse",
        "wisdom:ListTagsForResource",
        "wisdom:TagResource",
        "wisdom:UntagResource",
        "wisdom:ListModels"
      ],
      "Resource" : "*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    },
    {
      "Sid" : "AllowKmsKeyValidationForQinConnectReplicaResources",
      "Effect" : "Allow",
      "Action" : "kms:DescribeKey",
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        },
        "StringLike" : {
          "kms:ViaService" : [
            "wisdom.*.amazonaws.com"
          ]
        }
      }
    },
    {
      "Sid" : "AllowKmsGrantCreationForQinConnectReplicaAssistant",
      "Effect" : "Allow",
      "Action" : "kms:CreateGrant",
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "Bool" : {
          "kms:GrantIsForAWSResource" : "true"
        },
        "ForAllValues:StringEquals" : {
          "kms:EncryptionContextKeys" : [
            "aws:wisdom:assistant:arn"
          ],
          "kms:GrantOperations" : [
            "DescribeKey",
            "Decrypt",
            "GenerateDataKey",
            "CreateGrant"
          ]
        },
        "Null" : {
          "kms:EncryptionContextKeys" : "false",
          "kms:GrantOperations" : "false"
        },
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}",
          "kms:GrantConstraintType" : "EncryptionContextSubset"
        },
        "StringLike" : {
          "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*",
          "kms:ViaService" : "wisdom.*.amazonaws.com"
        }
      }
    },
    {
      "Sid" : "AllowKmsGrantCreationForQinConnectReplicaKnowledgeBase",
      "Effect" : "Allow",
      "Action" : "kms:CreateGrant",
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "Bool" : {
          "kms:GrantIsForAWSResource" : "true"
        },
        "ForAllValues:StringEquals" : {
          "kms:EncryptionContextKeys" : [
            "aws:wisdom:knowledgeBase:arn"
          ],
          "kms:GrantOperations" : [
            "DescribeKey",
            "Decrypt",
            "GenerateDataKey",
            "CreateGrant"
          ]
        },
        "Null" : {
          "kms:EncryptionContextKeys" : "false",
          "kms:GrantOperations" : "false"
        },
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}",
          "kms:GrantConstraintType" : "EncryptionContextSubset"
        },
        "StringLike" : {
          "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*",
          "kms:ViaService" : "wisdom.*.amazonaws.com"
        }
      }
    },
    {
      "Sid" : "AllowKmsCryptoForQinConnectReplicaAssistant",
      "Effect" : "Allow",
      "Action" : [
        "kms:Decrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext"
      ],
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "ForAllValues:StringEquals" : {
          "kms:EncryptionContextKeys" : [
            "aws:wisdom:assistant:arn"
          ]
        },
        "Null" : {
          "kms:EncryptionContextKeys" : "false"
        },
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        },
        "StringLike" : {
          "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*",
          "kms:ViaService" : "wisdom.*.amazonaws.com"
        }
      }
    },
    {
      "Sid" : "AllowKmsCryptoForQinConnectReplicaKnowledgeBase",
      "Effect" : "Allow",
      "Action" : [
        "kms:Decrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext"
      ],
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "ForAllValues:StringEquals" : {
          "kms:EncryptionContextKeys" : [
            "aws:wisdom:knowledgeBase:arn"
          ]
        },
        "Null" : {
          "kms:EncryptionContextKeys" : "false"
        },
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        },
        "StringLike" : {
          "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*",
          "kms:ViaService" : "wisdom.*.amazonaws.com"
        }
      }
    },
    {
      "Sid" : "AllowKmsGrantCreationForQinConnectInstanceAssociationAssistant",
      "Effect" : "Allow",
      "Action" : "kms:CreateGrant",
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "Bool" : {
          "kms:GrantIsForAWSResource" : "true"
        },
        "ForAllValues:StringEquals" : {
          "kms:EncryptionContextKeys" : [
            "aws:wisdom:assistant:arn"
          ],
          "kms:GrantOperations" : [
            "DescribeKey",
            "Decrypt",
            "GenerateDataKey",
            "GenerateDataKeyPair"
          ]
        },
        "Null" : {
          "kms:EncryptionContextKeys" : "false",
          "kms:GrantOperations" : "false"
        },
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}",
          "kms:GrantConstraintType" : "EncryptionContextEquals"
        },
        "StringLike" : {
          "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*",
          "kms:ViaService" : "connect.*.amazonaws.com"
        }
      }
    },
    {
      "Sid" : "AllowKmsGrantCreationForQinConnectInstanceAssociationKnowledgeBase",
      "Effect" : "Allow",
      "Action" : "kms:CreateGrant",
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "Bool" : {
          "kms:GrantIsForAWSResource" : "true"
        },
        "ForAllValues:StringEquals" : {
          "kms:EncryptionContextKeys" : [
            "aws:wisdom:knowledgeBase:arn"
          ],
          "kms:GrantOperations" : [
            "DescribeKey",
            "Decrypt",
            "GenerateDataKey",
            "GenerateDataKeyPair"
          ]
        },
        "Null" : {
          "kms:EncryptionContextKeys" : "false",
          "kms:GrantOperations" : "false"
        },
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}",
          "kms:GrantConstraintType" : "EncryptionContextEquals"
        },
        "StringLike" : {
          "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*",
          "kms:ViaService" : "connect.*.amazonaws.com"
        }
      }
    }
  ]
}

En savoir plus