Skip to content

Security: customer-dynamics/c3-amazon-connect

SECURITY.md

Security Policy

Reporting a Vulnerability

At Customer Dynamics, security is taken seriously. If you discover any security issues or vulnerabilities, please report them to our security team immediately. We appreciate your help in making C3 for Amazon Connect safe for everyone.

To report a security vulnerability, please create a new security advisory in GitHub with a detailed description of the vulnerability and steps to reproduce it. Our security team will respond to your report promptly and work with you to address the issue.

Responsible Disclosure

We encourage responsible disclosure of security vulnerabilities. Please allow us sufficient time to assess and address any reported vulnerabilities before disclosing them publicly. We aim to acknowledge and resolve security issues in a timely manner and will keep you informed of our progress throughout the process.

Scope

This security policy applies to all versions of C3 for Amazon Connect and any associated dependencies.

Vulnerability Management

Our team actively monitors and assesses security vulnerabilities. We regularly update C3 for Amazon Connect to address known vulnerabilities and improve overall security. We also collaborate with the wider open-source community to stay informed about emerging threats and best practices.

Because the resources within C3 for Amazon Connect are hosted on your own AWS account, you are responsible for securing your AWS resources and ensuring that your configurations are properly managed. We recommend following AWS security best practices and regularly reviewing your AWS configurations for potential security risks. Additionally, we recommend watching for new releases of C3 for Amazon Connect and updating your deployment to the latest version to take advantage of security enhancements and bug fixes.

Code of Conduct

All contributors to C3 for Amazon Connect are expected to adhere to our Code of Conduct. This includes maintaining the confidentiality of security-related discussions and respecting the privacy and security of other users.

Contact

For further inquiries or assistance regarding security matters, please contact our security team at security@customerdynamics.com.

There aren’t any published security advisories