As traduções são geradas por tradução automática. Em caso de conflito entre o conteúdo da tradução e da versão original em inglês, a versão em inglês prevalecerá.
AmazonConnectSynchronizationServiceRolePolicy
Descrição: Permite que o Amazon Connect sincronize AWS recursos em todas as regiões em seu nome.
AmazonConnectSynchronizationServiceRolePolicy é uma política gerenciada pelo AWS.
Utilização desta política
Essa política é vinculada a uma função associada a um serviço, o que possibilita que este serviço execute ações em seu próprio nome. Não é possível vincular esta política a usuários, grupos ou funções.
Detalhes desta política
-
Tipo: Service-linked política de funções
-
Hora da criação: 27 de outubro de 2023, 22:38 UTC
-
Hora da edição: 28 de outubro de 2026, 19:17 UTC
-
ARN:
arn:aws:iam::aws:policy/aws-service-role/AmazonConnectSynchronizationServiceRolePolicy
Versão da política
Versão da política: v7 (padrão)
A versão padrão da política é aquela que define as permissões desta política. Quando um usuário ou função com a política faz uma solicitação para acessar um AWS recurso, AWS verifica a versão padrão da política para determinar se a solicitação deve ser permitida.
Documento da política JSON
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AllowConnectActions", "Effect" : "Allow", "Action" : [ "connect:Create*", "connect:BatchCreate*", "connect:Update*", "connect:BatchUpdate*", "connect:Delete*", "connect:BatchDelete*", "connect:Describe*", "connect:BatchDescribe*", "connect:List*", "connect:Search*", "connect:Associate*", "connect:Disassociate*", "connect:Get*", "connect:BatchGet*", "connect:Import*", "connect:TagResource", "connect:UntagResource" ], "Resource" : "*" }, { "Sid" : "DisallowedConnectActions", "Effect" : "Deny", "Action" : [ "connect:Start*", "connect:Stop*", "connect:Resume*", "connect:Suspend*", "connect:*Contact", "connect:SearchContacts", "connect:*ContactAttributes*", "connect:*RealtimeContact*", "connect:*AnalyticsData*", "connect:*MetricData*", "connect:*UserData*", "connect:*ContactEvaluation", "connect:GetAttachedFile", "connect:BatchGetAttachedFileMetadata", "connect:DeleteAttachedFile", "connect:CompleteAttachedFileUpload", "connect:CreateAttachedFile", "connect:UpdateContactSchedule", "connect:UpdateContactRoutingData", "connect:ListContactReferences", "connect:CreateParticipant", "connect:CreatePersistentContactAssociation", "connect:CreateInstance", "connect:DeleteInstance", "connect:ListInstances", "connect:ReplicateInstance", "connect:GetFederationToken", "connect:ClaimPhoneNumber", "connect:ImportPhoneNumber", "connect:ReleasePhoneNumber", "connect:SearchAvailablePhoneNumbers", "connect:CreateTrafficDistributionGroup", "connect:DeleteTrafficDistributionGroup", "connect:GetTrafficDistribution", "connect:UpdateTrafficDistribution" ], "Resource" : "*" }, { "Sid" : "AllowPutMetricsForConnectNamespace", "Effect" : "Allow", "Action" : "cloudwatch:PutMetricData", "Resource" : "*", "Condition" : { "StringEquals" : { "cloudwatch:namespace" : "AWS/Connect" } } }, { "Sid" : "AllowAppIntegrationsListApplications", "Effect" : "Allow", "Action" : [ "app-integrations:ListApplicationAssociations", "app-integrations:ListApplications" ], "Resource" : "*" }, { "Sid" : "AllowAppIntegrationsScopedToApplications", "Effect" : "Allow", "Action" : [ "app-integrations:CreateApplication", "app-integrations:GetApplication", "app-integrations:UpdateApplication", "app-integrations:DeleteApplication", "app-integrations:ListTagsForResource", "app-integrations:TagResource", "app-integrations:UntagResource" ], "Resource" : "arn:aws:app-integrations:*:*:application/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowWisdomActions", "Effect" : "Allow", "Action" : [ "wisdom:CreateAssistant", "wisdom:DeleteAssistant", "wisdom:GetAssistant", "wisdom:ListAssistants", "wisdom:UpdateAssistantAIAgent", "wisdom:RemoveAssistantAIAgent", "wisdom:CreateAssistantAssociation", "wisdom:DeleteAssistantAssociation", "wisdom:GetAssistantAssociation", "wisdom:ListAssistantAssociations", "wisdom:CreateAIAgent", "wisdom:CreateAIAgentVersion", "wisdom:DeleteAIAgent", "wisdom:DeleteAIAgentVersion", "wisdom:GetAIAgent", "wisdom:ListAIAgents", "wisdom:ListAIAgentVersions", "wisdom:UpdateAIAgent", "wisdom:CreateAIPrompt", "wisdom:CreateAIPromptVersion", "wisdom:DeleteAIPrompt", "wisdom:DeleteAIPromptVersion", "wisdom:GetAIPrompt", "wisdom:ListAIPrompts", "wisdom:ListAIPromptVersions", "wisdom:UpdateAIPrompt", "wisdom:CreateAIGuardrail", "wisdom:CreateAIGuardrailVersion", "wisdom:DeleteAIGuardrail", "wisdom:DeleteAIGuardrailVersion", "wisdom:GetAIGuardrail", "wisdom:ListAIGuardrails", "wisdom:ListAIGuardrailVersions", "wisdom:UpdateAIGuardrail", "wisdom:CreateKnowledgeBase", "wisdom:DeleteKnowledgeBase", "wisdom:GetKnowledgeBase", "wisdom:ListKnowledgeBases", "wisdom:UpdateKnowledgeBaseTemplateUri", "wisdom:RemoveKnowledgeBaseTemplateUri", "wisdom:CreateContent", "wisdom:StartContentUpload", "wisdom:DeleteContent", "wisdom:GetContent", "wisdom:GetContentSummary", "wisdom:ListContents", "wisdom:UpdateContent", "wisdom:CreateContentAssociation", "wisdom:DeleteContentAssociation", "wisdom:GetContentAssociation", "wisdom:ListContentAssociations", "wisdom:CreateQuickResponse", "wisdom:DeleteQuickResponse", "wisdom:GetQuickResponse", "wisdom:ListQuickResponses", "wisdom:UpdateQuickResponse", "wisdom:ListTagsForResource", "wisdom:TagResource", "wisdom:UntagResource", "wisdom:ListModels" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowKmsKeyValidationForQinConnectReplicaResources", "Effect" : "Allow", "Action" : "kms:DescribeKey", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "StringLike" : { "kms:ViaService" : [ "wisdom.*.amazonaws.com" ] } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectReplicaAssistant", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:assistant:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "CreateGrant" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextSubset" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectReplicaKnowledgeBase", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:knowledgeBase:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "CreateGrant" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextSubset" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsCryptoForQinConnectReplicaAssistant", "Effect" : "Allow", "Action" : [ "kms:Decrypt", "kms:GenerateDataKey", "kms:GenerateDataKeyWithoutPlaintext" ], "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:assistant:arn" ] }, "Null" : { "kms:EncryptionContextKeys" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsCryptoForQinConnectReplicaKnowledgeBase", "Effect" : "Allow", "Action" : [ "kms:Decrypt", "kms:GenerateDataKey", "kms:GenerateDataKeyWithoutPlaintext" ], "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:knowledgeBase:arn" ] }, "Null" : { "kms:EncryptionContextKeys" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectInstanceAssociationAssistant", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:assistant:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "GenerateDataKeyPair" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextEquals" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*", "kms:ViaService" : "connect.*.amazonaws.com" } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectInstanceAssociationKnowledgeBase", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:knowledgeBase:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "GenerateDataKeyPair" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextEquals" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*", "kms:ViaService" : "connect.*.amazonaws.com" } } } ] }
Saiba mais
