Creating an Amazon Connect instance for Contact Center using a CloudFormation template

Learn how to set up an Amazon Connect instance using a CloudFormation template with SAML authentication. This guide covers configuring a SAML application for single sign-on, deploying the Connect instance template, and optionally linking the SAML application to the Connect instance. The template provisions resources like an S3 bucket, Kinesis Stream, and IAM roles, streamlining your contact center setup.




This article covers the steps to setup a new Amazon Connect instance using a
CloudFormation template. The Connect instance
created by the template will have SAML authentication enabled. If an application is
already configured on the SAML IdP and the metadata file is available during the
deployment of this template, the template will configure all the IAM resources required
to integrate Connect instances with the same IdP.
This article contains the following topics:

Configuring a SAML Application for SSO (Optional)
Deploying a Connect instance template
Configuring the SAML application to Connect instance (Optional)



Configuring a SAML Application for SSO (Optional)

To enable single sign on for Amazon Connect instances, configure an
application in your IdP with SAML authentication enabled. Once the application is
configured, download the SAML metadata xml file.


Note: The value for Relay state in the application can be left blank and be updated after the
Connect instance is set up.




Deploying a Connect instance template

To deploy a Connect instance template

Navigate to Cloudformation service in the AWS console.
Click Create Stack.
Enter the following S3 URL: https://localmeasure-engage.s3.us-east-1.amazonaws.com/connect/cfn.yml



Enter a unique value for InstanceAlias and select an appropriate
LMRegion. If the SSO application is already configured, copy-paste the
entire contents of the metadata xml file in the “SamlXmlDocument”
parameter. This parameter can be left blank, if the SAML application is yet to
be configured.
Click Next and complete the stack deployment.




Configuring the SAML application to Connect instance (Optional)

If tou want to configure the SAML application, note the value of
SamlRelayState from the stack outputs and update the relay state in the
SAML application configured in your SSO for connect instance.


Resources provisioned by this template
Connect instance
S3 bucket for transcripts
KMS key for S3 bucket
Kinesis Stream
Customer Profiles domain
KMS Key for Customer Profiles domain
Wisdom Knowledge Base
Wisdom Assistant
SAML Identity Provider in IAM
IAM Role for SAML