翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。 # AmazonConnectServiceLinkedRolePolicy **説明**: Amazon Connect がユーザーに代わって AWS リソースを作成および管理できるようにします。 `AmazonConnectServiceLinkedRolePolicy` は [AWS マネージドポリシー](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)です。 ## このポリシーを使用すると このポリシーは、ユーザーに代わってサービスがアクションを実行することを許可する、サービスリンクロールにアタッチされます。ユーザー、グループおよびロールにこのポリシーはアタッチできません。 ## ポリシーの詳細 + **タイプ**: サービスリンクロールポリシー + **作成日時**: 2018 年 9 月 7 日 00:21 UTC + **編集日時:** 2026 年 2 月 12 日 17:59 UTC + **ARN**: `arn:aws:iam::aws:policy/aws-service-role/AmazonConnectServiceLinkedRolePolicy` ## ポリシーのバージョン **ポリシーのバージョン:** v53 (デフォルト) ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを決定します。 ## JSON ポリシードキュメント ``` { "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AllowConnectActions", "Effect" : "Allow", "Action" : [ "connect:*" ], "Resource" : [ "*" ] }, { "Sid" : "AllowDeleteSLR", "Effect" : "Allow", "Action" : [ "iam:DeleteRole" ], "Resource" : "arn:aws:iam::*:role/aws-service-role/connect.amazonaws.com/AWSServiceRoleForAmazonConnect_*" }, { "Sid" : "AllowS3ObjectForConnectBucket", "Effect" : "Allow", "Action" : [ "s3:GetObject", "s3:GetObjectAcl", "s3:PutObject", "s3:PutObjectAcl", "s3:DeleteObject" ], "Resource" : [ "arn:aws:s3:::amazon-connect-*/*" ] }, { "Sid" : "AllowGetBucketMetadataForConnectBucket", "Effect" : "Allow", "Action" : [ "s3:GetBucketLocation", "s3:GetBucketAcl" ], "Resource" : [ "arn:aws:s3:::amazon-connect-*" ] }, { "Sid" : "AllowConnectLogGroupAccess", "Effect" : "Allow", "Action" : [ "logs:CreateLogStream", "logs:DescribeLogStreams", "logs:PutLogEvents" ], "Resource" : [ "arn:aws:logs:*:*:log-group:/aws/connect/*:*" ] }, { "Sid" : "AllowListLexBotAccess", "Effect" : "Allow", "Action" : [ "lex:ListBots", "lex:ListBotAliases" ], "Resource" : "*" }, { "Sid" : "AllowCustomerProfilesForConnectDomain", "Effect" : "Allow", "Action" : [ "profile:SearchProfiles", "profile:CreateProfile", "profile:UpdateProfile", "profile:AddProfileKey", "profile:ListProfileObjectTypes", "profile:ListCalculatedAttributeDefinitions", "profile:ListCalculatedAttributesForProfile", "profile:GetDomain", "profile:ListIntegrations", "profile:GetIntegration", "profile:PutIntegration", "profile:DeleteIntegration", "profile:ListEventTriggers", "profile:ListSegmentDefinitions", "profile:ListProfileAttributeValues", "profile:CreateSegmentEstimate", "profile:GetSegmentEstimate", "profile:BatchGetProfile", "profile:BatchGetCalculatedAttributeForProfile", "profile:GetSegmentMembership", "profile:ListDomainLayouts", "profile:CreateUploadJob", "profile:ListUploadJobs", "profile:DetectProfileObjectType", "profile:GetSimilarProfiles", "profile:GetUploadJob", "profile:GetUploadJobPath", "profile:StartUploadJob", "profile:StopUploadJob", "profile:GetProfileRecommendations", "profile:GetProfileInsights", "profile:ListRecommenders" ], "Resource" : "arn:aws:profile:*:*:domains/amazon-connect-*" }, { "Sid" : "AllowCustomerProfilesEventTriggerForConnectDomain", "Effect" : "Allow", "Action" : [ "profile:CreateEventTrigger", "profile:GetEventTrigger", "profile:UpdateEventTrigger", "profile:DeleteEventTrigger" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/event-triggers/*" ] }, { "Sid" : "AllowCustomerProfilesDomainLayoutsForConnectDomain", "Effect" : "Allow", "Action" : [ "profile:CreateDomainLayout", "profile:UpdateDomainLayout", "profile:DeleteDomainLayout", "profile:GetDomainLayout" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/layouts/*" ] }, { "Sid" : "AllowCustomerProfilesSegmentationImportForConnectDomain", "Effect" : "Allow", "Action" : [ "profile:GetUploadJob", "profile:GetUploadJobPath", "profile:StartUploadJob", "profile:StopUploadJob" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/upload-jobs/*" ] }, { "Sid" : "AllowReadPermissionForCustomerProfileObjects", "Effect" : "Allow", "Action" : [ "profile:ListProfileObjects", "profile:GetProfileObjectType", "profile:ListObjectTypeAttributes", "profile:ListObjectTypeAttributeValues" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/object-types/*" ] }, { "Sid" : "AllowReadPermissionForCustomerProfilePredictiveInsights", "Effect" : "Allow", "Action" : [ "profile:GetRecommender", "profile:CreateRecommender", "profile:UpdateRecommender", "profile:DeleteRecommender", "profile:StopRecommender", "profile:StartRecommender" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/recommenders/*" ] }, { "Sid" : "AllowReadPermissionForCustomerProfilesPersonalizeForRecommenderRecipes", "Effect" : "Allow", "Action" : [ "profile:ListRecommenderRecipes" ], "Resource" : [ "arn:aws:profile:*:*:*" ] }, { "Sid" : "AllowListIntegrationForCustomerProfile", "Effect" : "Allow", "Action" : [ "profile:ListAccountIntegrations" ], "Resource" : "*" }, { "Sid" : "AllowReadForCustomerProfileObjectTemplates", "Effect" : "Allow", "Action" : [ "profile:ListProfileObjectTypeTemplates", "profile:GetProfileObjectTypeTemplate" ], "Resource" : "arn:aws:profile:*:*:/templates*" }, { "Sid" : "AllowAppIntegrationsForConnectEnabledTaggedResources", "Effect" : "Allow", "Action" : [ "app-integrations:GetDataIntegration", "app-integrations:ListDataIntegrationAssociations", "app-integrations:CreateDataIntegrationSchedule", "app-integrations:StartDataIntegrationExecution", "app-integrations:ListDataIntegrationExecutions", "app-integrations:GetDataIntegrationExecution", "app-integrations:ListDataIntegrationSchedules", "app-integrations:UpdateDataIntegrationSchedule", "app-integrations:GetDataIntegrationSchedule" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonConnectEnabled" : "True" } } }, { "Sid" : "AllowWisdomForConnectEnabledTaggedResources", "Effect" : "Allow", "Action" : [ "wisdom:CreateContent", "wisdom:DeleteContent", "wisdom:CreateKnowledgeBase", "wisdom:GetAssistant", "wisdom:GetKnowledgeBase", "wisdom:GetContent", "wisdom:GetRecommendations", "wisdom:GetSession", "wisdom:NotifyRecommendationsReceived", "wisdom:QueryAssistant", "wisdom:StartContentUpload", "wisdom:UpdateContent", "wisdom:UntagResource", "wisdom:TagResource", "wisdom:CreateSession", "wisdom:CreateQuickResponse", "wisdom:GetQuickResponse", "wisdom:SearchQuickResponses", "wisdom:StartImportJob", "wisdom:GetImportJob", "wisdom:ListImportJobs", "wisdom:ListQuickResponses", "wisdom:UpdateQuickResponse", "wisdom:DeleteQuickResponse", "wisdom:PutFeedback", "wisdom:ListContentAssociations", "wisdom:CreateMessageTemplate", "wisdom:UpdateMessageTemplate", "wisdom:UpdateMessageTemplateMetadata", "wisdom:GetMessageTemplate", "wisdom:DeleteMessageTemplate", "wisdom:ListMessageTemplates", "wisdom:SearchMessageTemplates", "wisdom:ActivateMessageTemplate", "wisdom:DeactivateMessageTemplate", "wisdom:CreateMessageTemplateVersion", "wisdom:ListMessageTemplateVersions", "wisdom:CreateMessageTemplateAttachment", "wisdom:DeleteMessageTemplateAttachment", "wisdom:RenderMessageTemplate", "wisdom:CreateAIAgent", "wisdom:CreateAIAgentVersion", "wisdom:DeleteAIAgent", "wisdom:DeleteAIAgentVersion", "wisdom:UpdateAIAgent", "wisdom:UpdateAssistantAIAgent", "wisdom:RemoveAssistantAIAgent", "wisdom:GetAIAgent", "wisdom:ListAIAgents", "wisdom:ListAIAgentVersions", "wisdom:CreateAIPrompt", "wisdom:CreateAIPromptVersion", "wisdom:DeleteAIPrompt", "wisdom:DeleteAIPromptVersion", "wisdom:UpdateAIPrompt", "wisdom:GetAIPrompt", "wisdom:ListAIPrompts", "wisdom:ListAIPromptVersions", "wisdom:CreateAIGuardrail", "wisdom:CreateAIGuardrailVersion", "wisdom:DeleteAIGuardrail", "wisdom:DeleteAIGuardrailVersion", "wisdom:UpdateAIGuardrail", "wisdom:GetAIGuardrail", "wisdom:ListAIGuardrails", "wisdom:ListAIGuardrailVersions", "wisdom:CreateAssistant", "wisdom:ListTagsForResource", "wisdom:SendMessage", "wisdom:GetNextMessage", "wisdom:ListMessages", "wisdom:Retrieve", "wisdom:ListAssistantAssociations" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonConnectEnabled" : "True" } } }, { "Sid" : "AllowListOperationForWisdom", "Effect" : "Allow", "Action" : [ "wisdom:ListAssistants", "wisdom:ListKnowledgeBases" ], "Resource" : "*" }, { "Sid" : "AllowCustomerProfilesCalculatedAttributesForConnectDomain", "Effect" : "Allow", "Action" : [ "profile:GetCalculatedAttributeForProfile", "profile:CreateCalculatedAttributeDefinition", "profile:DeleteCalculatedAttributeDefinition", "profile:GetCalculatedAttributeDefinition", "profile:UpdateCalculatedAttributeDefinition" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/calculated-attributes/*" ] }, { "Sid" : "AllowCustomerProfilesSegmentationForConnectDomain", "Effect" : "Allow", "Action" : [ "profile:CreateSegmentDefinition", "profile:GetSegmentDefinition", "profile:DeleteSegmentDefinition", "profile:CreateSegmentSnapshot", "profile:GetSegmentSnapshot" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/segment-definitions/*" ] }, { "Sid" : "AllowPutMetricsForConnectNamespace", "Effect" : "Allow", "Action" : "cloudwatch:PutMetricData", "Resource" : "*", "Condition" : { "StringEquals" : { "cloudwatch:namespace" : "AWS/Connect" } } }, { "Sid" : "AllowSMSVoiceOperationsForConnect", "Effect" : "Allow", "Action" : [ "sms-voice:SendTextMessage", "sms-voice:DescribePhoneNumbers" ], "Resource" : "arn:aws:sms-voice:*:*:phone-number/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowCognitoForConnectEnabledTaggedResources", "Effect" : "Allow", "Action" : [ "cognito-idp:DescribeUserPool", "cognito-idp:ListUserPoolClients" ], "Resource" : "arn:aws:cognito-idp:*:*:userpool/*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonConnectEnabled" : "True" } } }, { "Sid" : "AllowWritePermissionForCustomerProfileObjects", "Effect" : "Allow", "Action" : [ "profile:PutProfileObject" ], "Resource" : [ "arn:aws:profile:*:*:domains/amazon-connect-*/object-types/*" ] }, { "Sid" : "AllowChimeSDKVoiceConnectorGetOperationForConnect", "Effect" : "Allow", "Action" : [ "chime:GetVoiceConnector" ], "Resource" : "arn:aws:chime:*:*:vc/*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonConnectEnabled" : "True", "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowChimeSDKVoiceConnectorListOperationForConnect", "Effect" : "Allow", "Action" : [ "chime:ListVoiceConnectors" ], "Resource" : "arn:aws:chime:*:*:vc/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SESPermissionsForManagingReceiptRules", "Effect" : "Allow", "Action" : [ "ses:DescribeReceiptRule", "ses:UpdateReceiptRule" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SESPermissionForManagingConnectProvidedSESIdentity", "Effect" : "Allow", "Action" : [ "ses:DeleteEmailIdentity" ], "Resource" : "arn:aws:ses:*:*:identity/*.email.connect.aws*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SESConfigurationSetPermissionsForSendingEmail", "Effect" : "Allow", "Action" : [ "ses:SendRawEmail" ], "Resource" : "arn:aws:ses:*:*:configuration-set/configuration-set-for-connect-DO-NOT-DELETE", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "PassRoleToSESForReceiptRuleManagement", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : [ "arn:aws:iam::*:role/service-role/AmazonConnectEmailSESAccessRole" ], "Condition" : { "StringLike" : { "iam:PassedToService" : "ses.amazonaws.com" } } }, { "Sid" : "AllowSocialMessagingOperations", "Effect" : "Allow", "Action" : [ "social-messaging:SendWhatsAppMessage", "social-messaging:PostWhatsAppMessageMedia", "social-messaging:GetWhatsAppMessageMedia", "social-messaging:GetLinkedWhatsAppBusinessAccountPhoneNumber" ], "Resource" : "arn:aws:social-messaging:*:*:phone-number-id/*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonConnectEnabled" : "True", "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowRetrievalOfWabas", "Effect" : "Allow", "Action" : [ "social-messaging:ListLinkedWhatsAppBusinessAccounts" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowRetrievalOfWhatsAppTemplates", "Effect" : "Allow", "Action" : [ "social-messaging:GetWhatsAppMessageTemplate", "social-messaging:ListWhatsAppMessageTemplates" ], "Resource" : "arn:aws:social-messaging:*:*:waba/*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonConnectEnabled" : "True", "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowMobileTargetingOperationsForConnect", "Effect" : "Allow", "Action" : "mobiletargeting:SendMessages", "Resource" : "arn:aws:mobiletargeting:*:*:apps/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowPollyActions", "Effect" : "Allow", "Action" : [ "polly:ListLexicons", "polly:DescribeVoices", "polly:SynthesizeSpeech" ], "Resource" : [ "*" ] } ] } ``` ## 詳細情報 + [IAM ポリシーのバージョニングについて理解する](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html) + [AWS 管理ポリシーの使用を開始し、最小特権のアクセス許可に移行する](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)