The health check stack creates specific Identity and Access Management (IAM) roles and
policies for the contact center in your AWS account. These resources provide the necessary
permissions for the health check Lambda function to analyze your contact center configuration
and generate a diagnostic report.
Required Editions
This article applies to:
- Salesforce Voice with Amazon Connect
- Salesforce Voice with Partner Telephony from Amazon Connect
The health check stack creates these roles:
- <ContactCenterName>-HealthCheckRole: This role is responsible for triggering the health
check Lambda function directly from the contact center details page. It also grants
permission to fetch the output result file containing the health report. An example is
available in BYOAHealthCheckStack.yaml in GitHub.
- <ContactCenterName>-HealthCheckLambdaExecutionRole: This role is assumed by the Lambda
function while it runs. It includes the
AWSLambdaBasicExecutionRole, which
provides the basic permissions necessary for the lambda function to execute within AWS.
Health Check Access Policy
The stack includes the
<ContactCenterName>-HealthCheckAccessPolicy which defines the scope of
permissions the health check lambda uses to verify the status of your contact center
resources. An example policy is available in BYOAHealthCheckStack.yaml in GitHub.
