Pre-requisites for uploading documents through the Amazon S3

The pre-requisite for uploading documents through the Amazon S3 console is to log in as a user or assume a role that has the following permissions:

"kms:Decrypt",
"kms:GenerateDataKey"
"s3:ListAllMyBuckets",
"s3:PutObject",
"s3:PutObjectAcl",
"s3:GetBucketOwnershipControls",

For more information on creating IAM users or IAM roles please refer to the following links:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html

Since Amazon Connect is improving the security of processes that involve the validation of identity documents we ask you to
upload the documents directly into our encrypted S3 bucket, while granting Amazon Connect the permission to perform the address
validation process with the carrier on your behalf. Please follow the steps for the upload steps below (steps 1 to 7).
Remember, all the steps are mandatory and cannot be skipped. Missing any of these steps may lead the document to
be inaccessible to Amazon Connect Identity Validation, requiring you to re-upload all data and execute the steps again.

Step 1: Log in the console for the AWS Account that opened the Support Case: https://console.aws.amazon.com/

Step 2: Once authenticated on your account open the S3 upload link generated for your
account: <S3 Link provided by AWS will be shared by us in the case comments>

Step 3: Click on Add Files, and upload the required documents.

The identity documents needed for your request depend on the country code and the number type requested, for more
information about what documents you should provide please check the following
link: https://docs.aws.amazon.com/connect/latest/adminguide/phone-number-requirements.html

Step 4: Expand the section Permissions, select Specify individual ACL permissions and click
on the Add grantee button at the end of the Access control list (ACL) block

Step 5: Paste the following key into the Grantee field: <Key provided by AWS will be shared by us in the case comments>

Step 6: Mark the checkbox named Read under the Objects part

Note: This step is required. If this is not marked, AWS can't access the uploaded docs

Step 7: Click Upload

Please note that this link will expire after 10 days.

AWS will provide the identity documents you upload to our carrier partners for validation. By uploading the identity documents, you consent to the transfer of your personal data to the United States and the processing and storage of such data there in accordance with the AWS Privacy Notice. The laws in the United States regarding personal information may be different from the laws of your country. Any such transfers will comply with safeguards as required by relevant law. For customers in Japan, you can find more information about laws in the United States at this link https://www.ppc.go.jp/files/pdf/USA_report.pdf