Skip to main content

AWS Secrets

SCCAC-Secret-{SalesforceOrgId}​

This secret is used to securely store the information needed to bootstrap the setup process and request access tokens from Salesforce for the SCC-AC Connected App. The secret will have 6 entries by the end of the guided setup process:

  • CONNECTED_APP_CONSUMER_KEY: The consumer key for the SCC-AC Connected App
  • CONNECTED_APP_CONSUMER_SECRET: The consumer secret for the SCC-AC Connected App
  • CERTIFICATE_KEY_PASSWORD: The desired password you would like to be used to secure the Java KeyStore file generated during guided setup and placed in S3 by the SCCAC-CertificateManagementFunction.
  • CERTIFICATE_PUBLIC_KEY: The public key for the self-signed certificate generated during guided setup and enclosed in the Java KeyStore file
  • CERTIFICATE_PRIVATE_KEY: The private key for the certificate
  • API_ACCESS_USER_NAME: The username of the Salesforce user with access to the SCC-AC Connected App that will be used to request access tokens to make API calls to Salesforce

Starting with resource version 2.0.0, the secret also has these entries for the External Client App:

  • IS_ECA: true when SCC-AC authenticates with the External Client App, false when it uses the Connected App
  • ECA_CONSUMER_KEY: The consumer key for the SCC-AC External Client App
  • ECA_CONSUMER_SECRET: The consumer secret for the SCC-AC External Client App. New installations enter it after guided setup step 4. For installations migrated from a Connected App, it is copied from CONNECTED_APP_CONSUMER_SECRET during the migration. See Migrating to External Client App (ECA).

SCCAC-InteractionApiAccessTokenSecret-{ContactCenterId}​

This secret is used to securely cache the access token retrieved from Salesforce for making API calls via the SCC-AC Connected App — this decreases overall latency significantly by requesting a new access token only when the previously-vended token expires. When one of the SCC-AC Lambda functions that makes API calls to Salesforce gets back a response indicating that the token is expired, a new token is requested from the Salesforce org and stored in this secret.