Salesforce Docs Portal

Create the Security Profile

Create a dedicated Amazon Connect security profile for the third-party A2A integration. This profile becomes the authorization boundary between the Amazon Q orchestration agent and the external Salesforce A2A application.

To create the empty, dedicated profile, run this command. 
aws connect create-security-profile \
  --security-profile-name <YOUR_PROFILE_NAME> \
  --description "Allows the Amazon Q orchestration agent to delegate to the Salesforce A2A relay" \
  --instance-id <CONNECT_INSTANCE_ID> \
  --region <REGION>
The command returns a security profile ID and ARN. The command doesn’t yet grant access to the A2A application or attach the profile to an AI agent. Let’s complete those steps next.