Salesforce Docs Portal

Configure AWS Identity and Access Management (IAM) Role for Voice

When using Salesforce Voice with Partner Telephony from Amazon Connect, you must create a role with the correct policy information. Then, when you set up a contact center in Salesforce using a new or existing Amazon Connect instance, use this IAM role ARN in Amazon Connect. Salesforce then accesses your Amazon Connect instance to build out your contact center automatically.

Required Editions

This article applies to:

  • Salesforce Voice with Partner Telephony from Amazon Connect
View supported editions.
Important
Important Salesforce Voice with Partner Telephony from Amazon Connect is different from the default Salesforce Voice product. In the default Voice product, Salesforce handles many of the Amazon Connect management and configuration tasks for you. If that’s what you want to set up, we’ve got you covered—see Set Up Salesforce Voice with Amazon Connect.

You can also skip these steps by manually creating a contact center based on an existing Amazon Connect instance.

To create your IAM role, follow these steps:

  1. Log in to your AWS account, access the IAM dashboard, and select Roles from the sidebar.
  2. Create a role.
    1. Click the Create role button.

      Create role

    2. Select AWS account as the trusted entity type. Enter 793525387755 as the Account ID. Click Next: Permissions.

      Trusted entity type

    3. On the Add permissions page, don’t select any options. Click Next.Add permissions
    4. On the Name, review, and create page, enter ProvisioningRole for the Role name.
      Important
      Important The role name must be spelled exactly as specified: “ProvisioningRole” (without a space). During the contact center creation flow, we look for this role by name.
    5. On the Add tags section, don’t select any options.
    6. Click Create role.Name, review, and create page
  3. After the role is created, select it from the list of roles.
  4. Create an inline policy.
    1. Go to the https://github.com/service-cloud-voice/examples-from-doc/blob/main/iam_policies/SCVProvisioningPolicy.json GitHub page and click the Copy raw contents icon to copy the entire policy in JSON format.
    2. Return to your AWS account and from the Permissions tab of the role, click Add inline policy.

      Add inline policy

    3. In the JSON tab, paste the policy you just copied, replacing any existing content.
    4. In the policy statement, replace all occurrences of <AWS_ACCOUNT_ID> with your 12-digit AWS Account ID.
    5. If you're integrating your contact center with an existing Amazon Connect instance and you've configured the instance to save call recordings to an Amazon S3 bucket, replace <BYOAC_CUSTOM_S3_BUCKET> with the name of the Amazon S3 bucket. Otherwise, skip this step and don't replace <BYOAC_CUSTOM_S3_BUCKET>.
    6. Click Review policy.
    7. Name it ProvisioningPolicy.
    8. Click Create policy.
  5. From the AWS IAM Roles summary page for ProvisioningRole, click the copy icon next to the Role ARN to copy the ARN to the clipboard. Save the ARN. You need it when specifying the IAM Role ARN during contact center setup.

    Copy to clipboard

After creating the IAM role, use the role ARN value when you set up Voice in your Salesforce org.