How to restrict an Amazon connect agent to change routing profiles only to a subset of available routing profile.

Hello,

Amazon Connect recently released Tag based access controls [https://docs.aws.amazon.com/connect/latest/adminguide/tag-based-access-control.html] that you can try to laverage for your use-case. You can create Tag-based access control to all the security profiles that you want the user restricted to.

Please find blog on [https://aws.amazon.com/blogs/contact-center/configure-granular-access-controls-using-resource-tags-in-amazon-connect/] for example.