Amazon Connect Now Lets You Stack Up to 7 Security Profiles per User!
Hey there, it's me, Shii-chan! Today I found a permissions update that makes access control a little happier, so let me share it.
AWS What's New
aws.amazon.com
What was announced?
From AWS What's New comes an Amazon Connect update. You can now assign up to 7 security profiles to a single user, up from the previous limit of 2. That's a big jump!
A security profile is the set of permissions that decides which resources a user can touch. What grew here is how many of those you can stack on one person.
The story so far
Until now, the cap was 2 profiles per user. So if an agent served several lines of business, you often couldn't cleanly split permissions per line because you ran out of slots, and you ended up folding everything into one broader profile.
What changes
An agent who serves multiple lines of business can now carry a distinct, scoped permission set for each one, enforced through tag-based or hierarchy-based access controls.
The announcement gives this example:
a financial services company with separate lines for credit cards, mortgages, auto loans, personal banking, investments, insurance, and fraud can now assign an agent seven security profiles, one per line of business
Each profile grants access only to the resources tagged for that specific division.
Dive Deep
The key point is that this isn't about widening access; it keeps least privilege intact while giving you flexibility. You don't have to build one overly broad profile anymore, so you can match your security model directly to your org structure.
Access control is enforced via tag-based or hierarchy-based rules. For the finer details like configuration limitations, check the Amazon Connect Administrator Guide when you actually set it up.
The feature is available in all AWS regions where Amazon Connect is offered.
Wrap-up
- Security profiles per user increased from 2 to up to 7
- Stack scoped permissions per line of business, keeping least privilege via tag/hierarchy-based controls
- Available in every AWS region where Amazon Connect is offered
If you run a contact center that spans multiple lines of business, this makes your permission design a lot easier. Nice one!
