Amazon Connect: Prerequisites for Uploading Identity Documents via Amazon S3 for Phone Number Porting

Required IAM Permissions

To upload identity documents to the Amazon S3 bucket, you must log in as an IAM user or assume an IAM role that has the following six permissions:

1. kms:Decrypt — Allows decryption using the S3 bucket's AWS Key Management Service (KMS) encryption key.
2. kms:GenerateDataKey — Allows the generation of data encryption keys for uploading objects to the encrypted bucket.
3. s3:ListAllMyBuckets — Allows listing all S3 buckets in the AWS account.
4. s3:PutObject — Allows uploading objects (files) to the S3 bucket.
5. s3:PutObjectAcl — Allows setting Access Control List (ACL) permissions on uploaded objects.
6. s3:GetBucketOwnershipControls — Allows reading the bucket ownership control settings.

For information on creating IAM users or roles with these permissions, see Creating IAM Users and Creating IAM Roles in the AWS documentation.

Identity Document Requirements

The identity documents required for your request depend on the country code and phone number type requested. Review the Amazon Connect Phone Number Requirements documentation to determine what documents you need.

Step-by-Step Upload Instructions

The S3 upload link and the Grantee key will be provided by Amazon Web Services Support in your active support case. Once received, follow these steps:
Step 1: Log in to the AWS Management Console at https://console.aws.amazon.com/ using the AWS account that opened the Support Case.
Step 2: Open the S3 upload link provided by Amazon Web Services Support in your case.
Step 3: Click Add Files and upload the required identity documents.
Step 4: Expand the Permissions section. Select Specify individual ACL permissions and click Add grantee at the end of the Access Control List (ACL) block.
Step 5: Paste the Grantee key provided by Amazon Web Services Support into the Grantee field.
Step 6: Mark the Read checkbox under the Objects section. This step is required — if not marked, Amazon Connect cannot access the uploaded documents.
Step 7: Click Upload.

Important Notes

• The S3 upload link expires after 10 days. Complete the upload within this window.
• By uploading identity documents, you consent to the transfer of your personal data to the United States and its processing and storage in accordance with the AWS Privacy Notice.
• For customers in Japan, additional information about United States data protection laws is available at: https://www.ppc.go.jp/files/pdf/USA_report.pdf