Amazon Connect Health (health-agent)

Additions

Actions

• ActivateSubscription
  
  • Description:  Grants permission to activate a subscription to enable billing for a user
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Subscription

    Required: Yes

• CancelAppointment
  
  • Description:  Grants permission to cancel an appointment
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• CreateAgent
  
  • Description:  Grants permission to create a new agent with an initial version in DRAFT state
  • Access:  Write
  • Resources: 

    Name: Agent

    Required: Yes

    Name: Domain

    Required: Yes

• CreateDomain
  
  • Description:  Grants permission to create a new domain for managing HealthAgent resources
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    health-agent:TagResource

    iam:PassRole

• CreateIntegration
  
  • Description:  Grants permission to create a new integration for a domain
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• CreateSession
  
  • Description:  Grants permission to create a new session with specified agent configurations
  • Access:  Write
  • Resources: 

    Name: Agent

    Required: Yes

    Name: Domain

    Required: Yes

    Name: Session

    Required: Yes

• CreateSubscription
  
  • Description:  Grants permission to create a new subscription within a domain for billing and user management
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Subscription

    Required: Yes

• DeactivateSubscription
  
  • Description:  Grants permission to deactivate a subscription to stop billing for a user
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Subscription

    Required: Yes

• DeleteAgent
  
  • Description:  Grants permission to delete an agent configuration and all its versions
  • Access:  Write
  • Resources: 

    Name: Agent

    Required: Yes

    Name: Domain

    Required: Yes

• DeleteDomain
  
  • Description:  Grants permission to delete a domain and all associated resources
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

• DeleteIntegration
  
  • Description:  Grants permission to delete an integration
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• GetAgent
  
  • Description:  Grants permission to retrieve an agent configuration, defaulting to the most recent version if not specified
  • Access:  Read
  • Resources: 

    Name: Agent

    Required: Yes

    Name: Domain

    Required: Yes

• GetCareTeamProvider
  
  • Description:  Grants permission to retrieve the care team provider of a patient
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• GetDomain
  
  • Description:  Grants permission to retrieve information about a domain
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

• GetIntegration
  
  • Description:  Grants permission to get an existing integration
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• GetMedicalScribeListeningSession
  
  • Description:  Grants permission to retrieve details about an existing Medical Scribe listening session
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Subscription

    Required: Yes

• GetPatient
  
  • Description:  Grants permission to retrieve patient information
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• GetPatientInsightsJob
  
  • Description:  Grants permission to get details of a started patient insights job
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: PatientInsightsJob

    Required: Yes

• GetPractitioner
  
  • Description:  Grants permission to retrieve practitioner information
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• GetSessionContext
  
  • Description:  Grants permission to retrieve structured session context including attributes and collected data
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Session

    Required: Yes

• GetSubscription
  
  • Description:  Grants permission to retrieve information about a subscription
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Subscription

    Required: Yes

• InvokeAgent
  
  • Description:  Grants permission to invoke an agent within a session with streaming response support
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Session

    Required: Yes

• ListAgents
  
  • Description:  Grants permission to list all agents in a domain
  • Access:  List
  • Resources: 

    Name: Domain

    Required: Yes

• ListAppointmentSlots
  
  • Description:  Grants permission to list available appointment slots
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• ListDomains
  
  • Description:  Grants permission to list domains for a given account
  • Access:  List
• ListIntegrations
  
  • Description:  Grants permission to list integrations for a domain
  • Access:  List
  • Resources: 

    Name: Domain

    Required: Yes

• ListPatientAppointments
  
  • Description:  Grants permission to list patient appointments
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• ListPatientInsuranceCoverages
  
  • Description:  Grants permission to list patient insurance coverages
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• ListProviders
  
  • Description:  Grants permission to retrieve active providers available for scheduling appointments with a patient
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• ListSubscriptions
  
  • Description:  Grants permission to list all subscriptions within a domain
  • Access:  List
  • Resources: 

    Name: Domain

    Required: Yes

• ListTagsForResource
  
  • Description:  Grants permission to list the tags for the specified resource
  • Access:  List
  • Resources: 

    Name: Domain

    Required: No

• MatchPatient
  
  • Description:  Grants permission to match a patient
  • Access:  Read
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• PublishAgent
  
  • Description:  Grants permission to publish an agent configuration version
  • Access:  Write
  • Resources: 

    Name: Agent

    Required: Yes

    Name: Domain

    Required: Yes

• RescheduleAppointment
  
  • Description:  Grants permission to reschedule an appointment
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• ScheduleAppointment
  
  • Description:  Grants permission to schedule an appointment for a patient
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• StartMedicalScribeListeningSession
  
  • Description:  Grants permission to start a new Medical Scribe listening session for real-time audio transcription
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Subscription

    Required: Yes

• StartPatientInsightsJob
  
  • Description:  Grants permission to start a new patient insights job
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: PatientInsightsJob

    Required: Yes

• TagResource
  
  • Description:  Grants permission to add the specified tags to the specified resource
  • Access:  Tagging
  • Resources: 

    Name: Domain

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to remove the tags identified by the TagKeys list from a resource
  • Access:  Tagging
  • Resources: 

    Name: Domain

    Required: No

  • Conditions: 

    aws:TagKeys

• UpdateAgent
  
  • Description:  Grants permission to update a draft agent configuration, creating a new draft version if none exists
  • Access:  Write
  • Resources: 

    Name: Agent

    Required: Yes

    Name: Domain

    Required: Yes

• UpdateIntegration
  
  • Description:  Grants permission to update an existing integration
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Integration

    Required: Yes

• UpdateSession
  
  • Description:  Grants permission to update session attributes such as departmentId and appointmentType
  • Access:  Write
  • Resources: 

    Name: Domain

    Required: Yes

    Name: Session

    Required: Yes

Resources

• Domain
  
  • Arn:  arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• PatientInsightsJob
  
  • Arn:  arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/patient-insights-job/${JobId}
• Subscription
  
  • Arn:  arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/subscription/${SubscriptionId}
• Integration
  
  • Arn:  arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/integration/${IntegrationId}
• Agent
  
  • Arn:  arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/agent/${AgentId}
• Session
  
  • Arn:  arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/session/${SessionId}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString