本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
AmazonConnectSynchronizationServiceRolePolicy
描述：允許 Amazon Connect 代表您跨區域同步 AWS 資源。
AmazonConnectSynchronizationServiceRolePolicy 是 AWS 受管政策。
使用此政策
此政策會連接到服務連結角色，允許服務代表您執行動作。您無法將此政策連接至使用者、群組或角色。
政策詳細資訊
-
類型：服務連結角色政策
-
建立時間：2023 年 10 月 27 日 22：38 UTC
-
編輯時間：2026 年 10 月 28 日 19：17 UTC
-
ARN:
arn:aws:iam::aws:policy/aws-service-role/AmazonConnectSynchronizationServiceRolePolicy
政策版本
政策版本： v7 （預設）
政策的預設版本是定義政策許可的版本。當具有 政策的使用者或角色提出存取 AWS 資源的請求時， 會 AWS 檢查政策的預設版本，以決定是否允許請求。
JSON 政策文件
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AllowConnectActions", "Effect" : "Allow", "Action" : [ "connect:Create*", "connect:BatchCreate*", "connect:Update*", "connect:BatchUpdate*", "connect:Delete*", "connect:BatchDelete*", "connect:Describe*", "connect:BatchDescribe*", "connect:List*", "connect:Search*", "connect:Associate*", "connect:Disassociate*", "connect:Get*", "connect:BatchGet*", "connect:Import*", "connect:TagResource", "connect:UntagResource" ], "Resource" : "*" }, { "Sid" : "DisallowedConnectActions", "Effect" : "Deny", "Action" : [ "connect:Start*", "connect:Stop*", "connect:Resume*", "connect:Suspend*", "connect:*Contact", "connect:SearchContacts", "connect:*ContactAttributes*", "connect:*RealtimeContact*", "connect:*AnalyticsData*", "connect:*MetricData*", "connect:*UserData*", "connect:*ContactEvaluation", "connect:GetAttachedFile", "connect:BatchGetAttachedFileMetadata", "connect:DeleteAttachedFile", "connect:CompleteAttachedFileUpload", "connect:CreateAttachedFile", "connect:UpdateContactSchedule", "connect:UpdateContactRoutingData", "connect:ListContactReferences", "connect:CreateParticipant", "connect:CreatePersistentContactAssociation", "connect:CreateInstance", "connect:DeleteInstance", "connect:ListInstances", "connect:ReplicateInstance", "connect:GetFederationToken", "connect:ClaimPhoneNumber", "connect:ImportPhoneNumber", "connect:ReleasePhoneNumber", "connect:SearchAvailablePhoneNumbers", "connect:CreateTrafficDistributionGroup", "connect:DeleteTrafficDistributionGroup", "connect:GetTrafficDistribution", "connect:UpdateTrafficDistribution" ], "Resource" : "*" }, { "Sid" : "AllowPutMetricsForConnectNamespace", "Effect" : "Allow", "Action" : "cloudwatch:PutMetricData", "Resource" : "*", "Condition" : { "StringEquals" : { "cloudwatch:namespace" : "AWS/Connect" } } }, { "Sid" : "AllowAppIntegrationsListApplications", "Effect" : "Allow", "Action" : [ "app-integrations:ListApplicationAssociations", "app-integrations:ListApplications" ], "Resource" : "*" }, { "Sid" : "AllowAppIntegrationsScopedToApplications", "Effect" : "Allow", "Action" : [ "app-integrations:CreateApplication", "app-integrations:GetApplication", "app-integrations:UpdateApplication", "app-integrations:DeleteApplication", "app-integrations:ListTagsForResource", "app-integrations:TagResource", "app-integrations:UntagResource" ], "Resource" : "arn:aws:app-integrations:*:*:application/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowWisdomActions", "Effect" : "Allow", "Action" : [ "wisdom:CreateAssistant", "wisdom:DeleteAssistant", "wisdom:GetAssistant", "wisdom:ListAssistants", "wisdom:UpdateAssistantAIAgent", "wisdom:RemoveAssistantAIAgent", "wisdom:CreateAssistantAssociation", "wisdom:DeleteAssistantAssociation", "wisdom:GetAssistantAssociation", "wisdom:ListAssistantAssociations", "wisdom:CreateAIAgent", "wisdom:CreateAIAgentVersion", "wisdom:DeleteAIAgent", "wisdom:DeleteAIAgentVersion", "wisdom:GetAIAgent", "wisdom:ListAIAgents", "wisdom:ListAIAgentVersions", "wisdom:UpdateAIAgent", "wisdom:CreateAIPrompt", "wisdom:CreateAIPromptVersion", "wisdom:DeleteAIPrompt", "wisdom:DeleteAIPromptVersion", "wisdom:GetAIPrompt", "wisdom:ListAIPrompts", "wisdom:ListAIPromptVersions", "wisdom:UpdateAIPrompt", "wisdom:CreateAIGuardrail", "wisdom:CreateAIGuardrailVersion", "wisdom:DeleteAIGuardrail", "wisdom:DeleteAIGuardrailVersion", "wisdom:GetAIGuardrail", "wisdom:ListAIGuardrails", "wisdom:ListAIGuardrailVersions", "wisdom:UpdateAIGuardrail", "wisdom:CreateKnowledgeBase", "wisdom:DeleteKnowledgeBase", "wisdom:GetKnowledgeBase", "wisdom:ListKnowledgeBases", "wisdom:UpdateKnowledgeBaseTemplateUri", "wisdom:RemoveKnowledgeBaseTemplateUri", "wisdom:CreateContent", "wisdom:StartContentUpload", "wisdom:DeleteContent", "wisdom:GetContent", "wisdom:GetContentSummary", "wisdom:ListContents", "wisdom:UpdateContent", "wisdom:CreateContentAssociation", "wisdom:DeleteContentAssociation", "wisdom:GetContentAssociation", "wisdom:ListContentAssociations", "wisdom:CreateQuickResponse", "wisdom:DeleteQuickResponse", "wisdom:GetQuickResponse", "wisdom:ListQuickResponses", "wisdom:UpdateQuickResponse", "wisdom:ListTagsForResource", "wisdom:TagResource", "wisdom:UntagResource", "wisdom:ListModels" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "AllowKmsKeyValidationForQinConnectReplicaResources", "Effect" : "Allow", "Action" : "kms:DescribeKey", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "StringLike" : { "kms:ViaService" : [ "wisdom.*.amazonaws.com" ] } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectReplicaAssistant", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:assistant:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "CreateGrant" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextSubset" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectReplicaKnowledgeBase", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:knowledgeBase:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "CreateGrant" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextSubset" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsCryptoForQinConnectReplicaAssistant", "Effect" : "Allow", "Action" : [ "kms:Decrypt", "kms:GenerateDataKey", "kms:GenerateDataKeyWithoutPlaintext" ], "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:assistant:arn" ] }, "Null" : { "kms:EncryptionContextKeys" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsCryptoForQinConnectReplicaKnowledgeBase", "Effect" : "Allow", "Action" : [ "kms:Decrypt", "kms:GenerateDataKey", "kms:GenerateDataKeyWithoutPlaintext" ], "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:knowledgeBase:arn" ] }, "Null" : { "kms:EncryptionContextKeys" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*", "kms:ViaService" : "wisdom.*.amazonaws.com" } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectInstanceAssociationAssistant", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:assistant:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "GenerateDataKeyPair" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextEquals" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:assistant:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:assistant/*", "kms:ViaService" : "connect.*.amazonaws.com" } } }, { "Sid" : "AllowKmsGrantCreationForQinConnectInstanceAssociationKnowledgeBase", "Effect" : "Allow", "Action" : "kms:CreateGrant", "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAllValues:StringEquals" : { "kms:EncryptionContextKeys" : [ "aws:wisdom:knowledgeBase:arn" ], "kms:GrantOperations" : [ "DescribeKey", "Decrypt", "GenerateDataKey", "GenerateDataKeyPair" ] }, "Null" : { "kms:EncryptionContextKeys" : "false", "kms:GrantOperations" : "false" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "kms:GrantConstraintType" : "EncryptionContextEquals" }, "StringLike" : { "kms:EncryptionContext:aws:wisdom:knowledgeBase:arn" : "arn:aws:wisdom:*:${aws:PrincipalAccount}:knowledge-base/*", "kms:ViaService" : "connect.*.amazonaws.com" } } } ] }
進一步了解
