# Amazon Connect Customer Attributes

Schema attributes for resources in the **Amazon Connect Customer** dataset.

## Resource Nodes

| Resource name | Resource type | Resource ID | Identity attribute | Display attribute |
| --- | --- | --- | --- | --- |
| Amazon Connect Customer Instance | `std:application` | `aws:connectcustomer-instance` | `instanceArn` | `instanceAlias` |
| Amazon Connect Customer Domain | `std:application` | `aws:connectcustomer-assistant` | `assistantArn` | `name` |
| Amazon Connect Customer AI Agent | `std:agent` | `aws:connectcustomer-ai-agent` | `aiAgentArn` | `agentName` |
| Amazon Connect Customer Knowledge Base | `std:capability` | `aws:connectcustomer-knowledge-base` | `knowledgeBaseArn` | `name` |
| Amazon Connect Customer Prompt | `std:capability` | `aws:connectcustomer-prompt` | `promptArn` | `name` |
| Amazon Connect Customer Guardrail | `std:capability` | `aws:connectcustomer-guardrail` | `guardrailArn` | `name` |
| Amazon Connect Customer Tool | `std:capability` | `aws:connectcustomer-tool` | `toolId` | `toolName` |
| Amazon Connect Customer Security Profile | `std:capability` | `aws:connectcustomer-security-profile` | `securityProfileArn` | `name` |

For AI agent and capability nodes, `type` is the SailPoint subtype `AGENT`, `MCP`, or `TOOL`. The `category` attribute contains the AWS AI agent kind, such as `ORCHESTRATION`, `ANSWER_RECOMMENDATION`, or `MANUAL_SEARCH`. Instance and domain resources don't use the subtype attribute.

## Amazon Connect Customer Instance

**Resource ID**: `aws:connectcustomer-instance`

**Resource type**: `std:application`

**Identity attribute**: `instanceArn`

**Display attribute**: `instanceAlias`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The Connect instance ARN. |
| `instanceArn` | string | The Amazon Connect instance ARN. |
| `instanceId` | string | The Connect instance ID. |
| `instanceAlias` | string | The display name of the Connect instance. |
| `instanceStatus` | string | The status of the Connect instance. |
| `identityManagementType` | string | The Connect identity management or identity provider type. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |

## Amazon Connect Customer Domain

The Amazon Connect console uses **domain** for the object that the API calls an **assistant**.

**Resource ID**: `aws:connectcustomer-assistant`

**Resource type**: `std:application`

**Identity attribute**: `assistantArn`

**Display attribute**: `name`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The Amazon Connect Customer domain ARN. |
| `assistantArn` | string | The domain / assistant ARN. |
| `assistantId` | string | The domain / assistant ID. |
| `name` | string | The domain / assistant display name. |
| `status` | string | The domain status. |
| `capabilityType` | string | The domain capability type, such as V2. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |

## Amazon Connect Customer AI Agent

The connector aggregates one node for each published AI agent version. It doesn't aggregate draft or `$LATEST` versions. The identity is the version-qualified ARN.

**Resource ID**: `aws:connectcustomer-ai-agent`

**Resource type**: `std:agent`

**Identity attribute**: `aiAgentArn`

**Display attribute**: `agentName`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The AI agent ARN. Published versions use a version-qualified ARN. SYSTEM agents that AWS doesn't expose as numbered versions use an unqualified ARN. |
| `aiAgentArn` | string | The AI agent ARN. Published versions use a version-qualified ARN. SYSTEM agents without numbered versions use an unqualified ARN without the `:$LATEST` suffix. |
| `aiAgentId` | string | The base AI agent ID. |
| `agentName` | string | The AI agent name and version. CUSTOMER agents use `{name}:{version}`, such as `SupportOrchestrator:2`. SYSTEM agents use `{name}:LATEST`. |
| `agentDescription` | string | The AI agent description. |
| `status` | string | The lifecycle status, such as ACTIVE. This attribute isn't a soft-disable setting. |
| `type` | string | The SailPoint subtype. Always AGENT. |
| `category` | string | The AI agent kind, such as ORCHESTRATION, ANSWER\_RECOMMENDATION, or MANUAL\_SEARCH. |
| `origin` | string | The agent origin: SYSTEM or CUSTOMER. |
| `locale` | string | The agent locale. |
| `versionNumber` | string | The published version number. This value is empty for SYSTEM agents that AWS doesn't expose as numbered versions. |
| `lastModified` | string | The last modification time in ISO-8601 format. |
| `tags` | string | The comma-separated agent tags, such as `env:prod,team:support`. |
| `roleArn` | string | The Connect instance service role ARN from `DescribeInstance.ServiceRole`. This value can link to `aws:iam-role`. |
| `inboundCredentials` | string | The non-secret inbound credential metadata. |
| `suggestedMessages` | string | The suggested messages. |
| `spStatus` | string | The SailPoint-normalized agent status. |
| `spDescription` | string | The SailPoint description, which matches `agentDescription`. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |

## Amazon Connect Customer Knowledge Base

**Resource ID**: `aws:connectcustomer-knowledge-base`

**Resource type**: `std:capability`

**Identity attribute**: `knowledgeBaseArn`

**Display attribute**: `name`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The Amazon Connect Customer knowledge base ARN. |
| `knowledgeBaseArn` | string | The Amazon Connect Customer knowledge base ARN. |
| `knowledgeBaseId` | string | The Amazon Connect Customer knowledge base ID. |
| `name` | string | The Amazon Connect Customer knowledge base display name. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |
| `type` | string | The SailPoint subtype. Always MCP. |

## Amazon Connect Customer Prompt

**Resource ID**: `aws:connectcustomer-prompt`

**Resource type**: `std:capability`

**Identity attribute**: `promptArn`

**Display attribute**: `name`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The Amazon Connect Customer prompt ARN. |
| `promptArn` | string | The Amazon Connect Customer prompt ARN. |
| `promptId` | string | The Amazon Connect Customer prompt ID. |
| `name` | string | The Amazon Connect Customer prompt display name. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |
| `type` | string | The SailPoint subtype. Always MCP. |

## Amazon Connect Customer Guardrail

**Resource ID**: `aws:connectcustomer-guardrail`

**Resource type**: `std:capability`

**Identity attribute**: `guardrailArn`

**Display attribute**: `name`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The Amazon Connect Customer guardrail ARN. |
| `guardrailArn` | string | The Amazon Connect Customer guardrail ARN. |
| `guardrailId` | string | The Amazon Connect Customer guardrail ID. |
| `name` | string | The Amazon Connect Customer guardrail display name. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |
| `type` | string | The SailPoint subtype. Always MCP. |

## Amazon Connect Customer Tool

**Resource ID**: `aws:connectcustomer-tool`

**Resource type**: `std:capability`

**Identity attribute**: `toolId`

**Display attribute**: `toolName`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The Amazon Connect Customer tool ID. |
| `toolId` | string | The unique AWS tool ID. |
| `toolName` | string | The Amazon Connect Customer tool display name. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |
| `type` | string | The SailPoint subtype. Always TOOL. |

## Amazon Connect Customer Security Profile

**Resource ID**: `aws:connectcustomer-security-profile`

**Resource type**: `std:capability`

**Identity attribute**: `securityProfileArn`

**Display attribute**: `name`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The Amazon Connect Customer security profile ARN. |
| `securityProfileArn` | string | The Amazon Connect Customer security profile ARN. |
| `securityProfileId` | string | The Amazon Connect Customer security profile ID. |
| `name` | string | The Amazon Connect Customer security profile display name. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID where the resource resides. |
| `spBusinessApplication` | string | The SailPoint business application. Always Amazon Connect Customer. |
| `type` | string | The SailPoint subtype. Always TOOL. |

## Resource Links

| Resource name | Resource type | Resource ID | Identity form |
| --- | --- | --- | --- |
| Amazon Connect Customer Domain Belongs To Instance | `std:access` | `aws:connectcustomer-assistant-belongs-to-instance` | `aws:connectcustomer-assistant-belongs-to-instance#{Assistant ARN}#{Instance ARN}` |
| Amazon Connect Customer AI Agent Belongs To Domain | `std:access` | `aws:connectcustomer-agent-belongs-to-assistant` | `aws:connectcustomer-agent-belongs-to-assistant#{AI Agent ARN}#{Assistant ARN}` |
| Amazon Connect Customer AI Agent Uses Knowledge Base | `std:access` | `aws:connectcustomer-agent-uses-knowledge-base` | `aws:connectcustomer-agent-uses-knowledge-base#{AI Agent ARN}#{Knowledge Base ARN}` |
| Amazon Connect Customer AI Agent Uses Prompt | `std:access` | `aws:connectcustomer-agent-uses-prompt` | `aws:connectcustomer-agent-uses-prompt#{AI Agent ARN}#{Prompt ARN}` |
| Amazon Connect Customer AI Agent Uses Guardrail | `std:access` | `aws:connectcustomer-agent-uses-guardrail` | `aws:connectcustomer-agent-uses-guardrail#{AI Agent ARN}#{Guardrail ARN}` |
| Amazon Connect Customer AI Agent Uses Tool | `std:access` | `aws:connectcustomer-agent-uses-tool` | `aws:connectcustomer-agent-uses-tool#{AI Agent ARN}#{Tool ARN}` |
| Amazon Connect Customer AI Agent Has Security Profile | `std:access` | `aws:connectcustomer-agent-has-security-profile` | `aws:connectcustomer-agent-has-security-profile#{AI Agent ARN}#{Security Profile ARN}` |
| Amazon Connect Customer AI Agent Uses Role | `std:access` | `aws:connectcustomer-agent-uses-role` | `aws:connectcustomer-agent-uses-role#{AI Agent ARN}#{Role ARN}` |