Independent study lab
This is an independent, free, learning-only student project. It respects every company and vendor. Trademarks belong to their owners. It is not affiliated with or endorsed by Amazon Web Services, Cisco, Genesys, Salesforce, Twilio, or any other company. If you have a concern, the page will be removed or corrected promptly through the contact form. Nothing here is sold. There are no ads. The author is happy to volunteer for any organization.
SAML, least privilege, and the admin you forgot — Learn it in 5 minutes
About five minutes of reading
Federation does not remove the need for a break-glass admin, and it does not make that admin safe.
Use SAML for agents. Keep one local emergency admin whose password is vaulted. Security profiles should split flow editors, user admins, recording listeners, and people who may export contacts.
IAM for builders should be a role they assume, with the instance ARN, not a long-lived key in a flow.
- Review security profiles when someone changes jobs.
- Recording access is a security profile permission. Treat it like access to the conversation, because it is.
- CloudTrail the control plane.
- Global Resiliency sign-in uses an extra endpoint. The IdP and the firewall both need it.
Number on this page: Profiles 100. Security profiles per instance, default
Sources and go deeper
- List of security profile permissions in Connect Customer - Amazon Connect Customer AWS docs. last checked 2026-10
- Security in Connect Customer - Amazon Connect Customer AWS docs. last checked 2026-10
- Encryption at rest in Connect Customer - Amazon Connect Customer AWS docs. last checked 2026-10
- AWS Key Management Service - AWS Key Management Service AWS docs. last checked 2026-10
- Configure SAML with IAM for Connect Customer - Amazon Connect Customer AWS docs. last checked 2026-10
- RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3 | RFC Editor RFC. last checked 2026-10
- Identity and access management - Wikipedia Wikipedia. last checked 2026-10
- SAML - Wikipedia Wikipedia. last checked 2026-10
- Transport Layer Security - Wikipedia Wikipedia. last checked 2026-10