{"id":25824218,"url":"https://github.com/thewizardofaws/amazon-connect-contact-center","last_synced_at":"2026-03-03T03:45:29.721Z","repository":{"id":278038363,"uuid":"934322022","full_name":"thewizardofaws/amazon-connect-contact-center","owner":"thewizardofaws","description":"IaC and DevOps for an Amazon Connect Contact Center architecture","archived":false,"fork":false,"pushed_at":"2025-02-17T17:01:15.000Z","size":5,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-17T17:35:01.118Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/thewizardofaws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-02-17T16:28:35.000Z","updated_at":"2025-02-17T17:01:19.000Z","dependencies_parsed_at":"2025-02-17T17:46:09.926Z","dependency_job_id":null,"html_url":"https://github.com/thewizardofaws/amazon-connect-contact-center","commit_stats":null,"previous_names":["thewizardofaws/amazon-connect-contact-center"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewizardofaws%2Famazon-connect-contact-center","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewizardofaws%2Famazon-connect-contact-center/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewizardofaws%2Famazon-connect-contact-center/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewizardofaws%2Famazon-connect-contact-center/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/thewizardofaws","download_url":"https://codeload.github.com/thewizardofaws/amazon-connect-contact-center/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241150729,"owners_count":19918355,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-02-28T12:37:26.625Z","updated_at":"2026-03-03T03:45:29.715Z","avatar_url":"https://github.com/thewizardofaws.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Amazon Connect Contact Center Infrastructure as Code\n\n[![AWS](https://img.shields.io/badge/AWS-Amazon%20Connect-orange?style=flat-square)](https://aws.amazon.com/connect/)\n[![Infrastructure as Code](https://img.shields.io/badge/Infrastructure%20as%20Code-Terraform-blue?style=flat-square)](https://www.terraform.io/)\n[![License: MIT-0](https://img.shields.io/badge/License-MIT--0-brightgreen.svg)](LICENSE)\n\nTerraform modules for deploying and managing Amazon Connect contact center infrastructure. Enables consistent, repeatable deployments with version-controlled infrastructure.\n\n## Overview\n\n[Amazon Connect](https://aws.amazon.com/connect/) is a cloud-based omnichannel contact center service. This repository provides reusable Terraform modules for:\n\n* Connect instances\n* Contact flows\n* Queues\n* IAM roles\n* Lambda functions (e.g., transcription and sentiment analysis)\n* S3 buckets for storage\n\n## Quick Start\n\n1. **Prerequisites**: AWS CLI configured with appropriate credentials and Terraform installed\n2. **Clone**: `git clone \u003crepository-url\u003e`\n3. **Configure**: Customize variables in `connect/terraform/variables.tf`\n4. **Deploy**: Navigate to `connect/terraform/` and run `terraform init \u0026\u0026 terraform apply`\n\n## Repository Structure\n\n```\n├── connect/terraform/          # Terraform root module\n│   ├── modules/                # Reusable Terraform modules\n│   │   ├── connect_instance/   # Amazon Connect instance\n│   │   ├── contact_flow/       # Contact flow definitions\n│   │   ├── queue/              # Contact queues\n│   │   ├── iam_role/           # IAM roles and policies\n│   │   ├── lambda_function/    # Lambda functions\n│   │   └── s3_bucket/          # S3 bucket resources\n│   └── main.tf                 # Root module configuration\n├── lambda/                     # Lambda function source code\n│   └── transcribe_sentiment/   # Transcription and sentiment analysis\n└── scripts/                    # Deployment scripts\n```\n\n## Contributing\n\nSee [CONTRIBUTIONS.md](CONTRIBUTIONS.md) for guidelines.\n\n## Security\n\nSee [CONTRIBUTIONS.md#security-issue-notifications](CONTRIBUTIONS.md#security-issue-notifications) for reporting security issues.\n\n### Security Hardening\n\nThis infrastructure implements several security best practices:\n\n#### IAM Security\n- **Least Privilege**: IAM roles and policies follow the principle of least privilege, granting only necessary permissions\n- **Service-Specific Roles**: Separate IAM roles for Connect, Lambda, and other services\n- **Policy Validation**: All IAM policies are reviewed and validated before deployment\n\n#### Data Protection\n- **Encryption at Rest**: S3 buckets use server-side encryption (AES256) by default\n- **Encryption in Transit**: All AWS API calls use TLS/SSL\n- **S3 Bucket Policies**: Restrictive bucket policies limit access to authorized roles only\n\n#### Network Security\n- **Private Access**: Connect instances can be configured for private VPC connectivity\n- **No Public Endpoints**: All resources are accessed through secure AWS endpoints\n\n#### Monitoring and Logging\n- **CloudWatch Logs**: All Lambda functions log to CloudWatch with 14-day retention\n- **CloudWatch Alarms**: Automated monitoring with SNS notifications for critical events\n- **Audit Trail**: All infrastructure changes are tracked through Terraform state\n\n#### Best Practices\n1. **Secrets Management**: Use AWS Secrets Manager or Parameter Store for sensitive data\n2. **Regular Audits**: Review IAM policies and permissions quarterly\n3. **Access Control**: Implement MFA for all AWS accounts\n4. **Version Pinning**: Terraform providers and modules use version constraints\n5. **State Encryption**: Ensure Terraform state files are stored in encrypted S3 buckets with versioning enabled\n\n#### Compliance Considerations\n- Ensure compliance with your organization's data retention policies\n- Review and adjust S3 lifecycle rules based on regulatory requirements\n- Implement data classification and tagging for compliance tracking\n\n## Backup and Recovery\n\n### Backup Strategy\n\n#### Infrastructure State\n- **Terraform State**: Stored in versioned S3 bucket (recommended: enable versioning and encryption)\n- **State Locking**: Use DynamoDB for state locking to prevent concurrent modifications\n- **State Backups**: Regularly backup Terraform state files before major changes\n\n#### Data Backups\n- **S3 Bucket Versioning**: Enabled by default for call recordings bucket\n- **S3 Lifecycle Policies**: Configured to retain versions and manage storage costs\n- **Cross-Region Replication**: Consider enabling for critical recordings (manual configuration)\n\n#### Configuration Backups\n- **Contact Flows**: Stored as JSON files in `connect/contact_flows/` directory\n- **Terraform Configurations**: All infrastructure code is version-controlled in Git\n- **Variable Files**: Environment-specific configurations stored in `.tfvars` files\n\n### Recovery Procedures\n\n#### Infrastructure Recovery\n1. **Full Infrastructure Restore**:\n   ```bash\n   terraform init\n   terraform plan -var-file=\u003cenvironment\u003e.tfvars\n   terraform apply -var-file=\u003cenvironment\u003e.tfvars\n   ```\n\n2. **State File Recovery**:\n   - Restore from S3 versioning if state file is corrupted\n   - Import existing resources if state is lost:\n     ```bash\n     terraform import \u003cresource_type\u003e.\u003cname\u003e \u003cresource_id\u003e\n     ```\n\n#### Data Recovery\n1. **S3 Object Recovery**:\n   - Use S3 versioning to restore previous versions\n   - Use S3 cross-region replication if enabled\n   - Restore from backups if automated backups are configured\n\n2. **DynamoDB Recovery**:\n   - Use point-in-time recovery (PITR) if enabled\n   - Restore from DynamoDB backups\n\n#### Disaster Recovery Planning\n1. **RTO/RPO Objectives**: Define Recovery Time Objective (RTO) and Recovery Point Objective (RPO)\n2. **Multi-Region Setup**: Consider deploying to multiple AWS regions for high availability\n3. **Documentation**: Maintain runbooks for common recovery scenarios\n4. **Testing**: Regularly test backup and recovery procedures\n\n#### Backup Verification\n- **Monthly Checks**: Verify Terraform state backups\n- **Quarterly Tests**: Perform full infrastructure recovery tests\n- **Monitoring**: Set up CloudWatch alarms for backup failures\n\n### Recovery Contacts\n- **Infrastructure Team**: [Your team contact]\n- **AWS Support**: Escalate critical issues through AWS Support\n- **On-Call Rotation**: Ensure 24/7 coverage for production environments\n\n## Resources\n\n* [AWS AMER Resources - Re:Invent Your Contact Center with Amazon Connect](https://amer.resources.awscloud.com/contact-center/maximizing-amazon-connect-cl-evaluation-technical)\n* [AWS GitHub Repos for Amazon Connect](https://github.com/amazon-connect)\n* [Terraform AWS Provider Documentation](https://registry.terraform.io/providers/hashicorp/aws/latest/docs)\n* [Amazon Connect Best Practices](https://docs.aws.amazon.com/connect/latest/adminguide/best-practices.html)\n\n## License\n\nMIT-0 License. See [LICENSE](LICENSE).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fthewizardofaws%2Famazon-connect-contact-center","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fthewizardofaws%2Famazon-connect-contact-center","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fthewizardofaws%2Famazon-connect-contact-center/lists"}