Salesforce has introduced an OAuth token risk detection mechanism as part of an ongoing security improvement. In certain configurations, specifically orgs using Salesforce Voice (formerly Service Cloud Voice) REST API integrated via AWS Lambda "InvokeSalesforceRestApiFunction", this change may flag and revoke active OAuth tokens, causing the associated Salesforce User(s) to become frozen without any manual action.
You are likely impacted if you meet one of the following criteria:
・User Symptom: Active Salesforce Voice users in your organization are unexpectedly and automatically changed to a "Frozen" status.
・ Log Error: Your AWS CloudWatch logs for the integration Lambda function return the following authentication failure response:
JSON
{
"error": "invalid_grant",
"error_description": "authentication failure"
}
Steps to verify your AWS CloudWatch Logs:
To confirm if this specific security enhancement is causing the issue, check your Lambda function logs by following these steps:
1. Log in to your AWS Management Console.
2. In the search bar at the top, type "CloudWatch" and select it from the services list.
3. In the left-hand navigation pane, find and click "Log Management".
4. In the search bar, type "InvokeSalesforceRestApiFunction" to look for your specific Lambda function log group (typically named /aws/lambda/{YourCallCenterName}-InvokeSalesforceRestApiFunction).
Open the log group and check if you see the same API response as above.
For more detailed information on navigating and viewing your Lambda function logs, please refer to the AWS CloudWatch Logs Documentation.
https://docs.aws.amazon.com/lambda/latest/dg/monitoring-cloudwatchlogs-view.html
Update: This issue has been resolved. No further action is required from customer end.
005321430

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.