How to get security and routing profile?

Question

I have the following cf script creating a simple AWS Connect instance.
```yaml    
Resources: 
  AmazonConnectInstance:
    Type: AWS::Connect::Instance
    Properties:
      Attributes:
        InboundCalls: YES
        OutboundCalls: YES
      IdentityManagementType: CONNECT_MANAGED
      InstanceAlias: 'my-demo-1234fhy49d'
```
Now I'd like to create an admin user in the same script:
```yml
...
ConnectUserAdmin:
    Type: AWS::Connect::User
    Properties:
      IdentityInfo:
        FirstName: admin
        LastName: user
      Username: adminuser
      InstanceArn: !GetAtt AmazonConnectInstance.Arn
      RoutingProfileArn: ?????
      SecurityProfileArns: [?????]
      Password: '1234567890'
```
However, I can't find a way to retrieve instance's security profiles or routing profiles. For example something like this `!GetAtt AmazonConnectInstance.AdminProfileArn` or `!GetAtt AmazonConnectInstance.DefaultRoutingProfileArn` would be helpful. How could I go about it (without using a custom resource)?

**Important**:  I **don't mean** how to retrieve instance's security profiles or routing profiles using GET API or using cli `aws connect`.

iBehr · Accepted Answer

The available return values are [here](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-instance.html#aws-resource-connect-instance-return-values), unfortunately these do not include the properties you are looking for.

However, if you look at the docs for the [Security Profile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-securityprofile.html) and [Routing Profile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-routingprofile.html), you can connect them to the instance ARN.  As such, you create the Profiles and within them reference the instance ARN via the Fn::Get (!GetAtt) of the Instance that you created with you code.

This should look like below in combination with your existing code:

```yaml
Resources: 
  AmazonConnectInstance:
    Type: AWS::Connect::Instance
    Properties:
      Attributes:
        InboundCalls: YES
        OutboundCalls: YES
      IdentityManagementType: CONNECT_MANAGED
      InstanceAlias: 'my-demo-1234fhy49d'

SecuriyProfile:
    Type: AWS::Connect::SecurityProfile
    Properties:
      AllowedAccessControlHierarchyGroupId: String
      AllowedAccessControlTags: 
        - Tag
      Applications: 
        - Application
      Description: String
      HierarchyRestrictedResources: 
        - String
      InstanceArn: !GetAtt AmazonConnectInstance.Arn
      Permissions: 
        - String
      SecurityProfileName: String
      TagRestrictedResources: 
        - String
      Tags: 
        - Tag

RoutingProfile:
    Type: AWS::Connect::RoutingProfile
    Properties:
      AgentAvailabilityTimer: String
      DefaultOutboundQueueArn: String
      Description: String
      InstanceArn: !GetAtt AmazonConnectInstance.Arn
      MediaConcurrencies: 
        - MediaConcurrency
      Name: String
      QueueConfigs: 
        - RoutingProfileQueueConfig
      Tags: 
        - Tag

ConnectUserAdmin:
    Type: AWS::Connect::User
    Properties:
      IdentityInfo:
        FirstName: admin
        LastName: user
      Username: adminuser
      InstanceArn: !GetAtt AmazonConnectInstance.Arn
      RoutingProfileArn: !GetAtt RoutingProfile.RoutingProfileArn
      SecurityProfileArns: !GetAtt SecurityProfile.SecurityProfileArn
      Password: '1234567890'
```

Hope this helps!

How to get security and routing profile?

Relevant content