🟧 AWS Connect Terraform Module

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-sandbox-contact-center"
  identity_management_type = "CONNECT_MANAGED"
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  identity_management_type = "EXISTING_DIRECTORY"
  directory_id             = "d-1234567890" # from your Directory Service directory
}

module "connect_kms" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-kms?ref=v1.0.0"
  alias  = "casey/connect-recordings"
}

module "connect_recordings_bucket" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-s3-bucket?ref=v1.0.0"
  bucket = "casey-connect-call-recordings"
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  storage_configs = {
    call_recordings = {
      resource_type = "CALL_RECORDINGS"
      storage_config = {
        storage_type = "S3"
        s3_config = {
          bucket_name   = module.connect_recordings_bucket.id
          bucket_prefix = "call-recordings"
          encryption_config = {
            key_id = module.connect_kms.arn # CMK — auditable/revocable via CloudTrail
          }
        }
      }
    }
    chat_transcripts = {
      resource_type = "CHAT_TRANSCRIPTS"
      storage_config = {
        storage_type = "S3"
        s3_config = {
          bucket_name   = module.connect_recordings_bucket.id
          bucket_prefix = "chat-transcripts"
          encryption_config = {
            key_id = module.connect_kms.arn
          }
        }
      }
    }
  }
}

module "connect_dev" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-dev-sandbox"
  identity_management_type = "CONNECT_MANAGED"

  # OFF by default is contact_flow_logs_enabled = true — only disable for a
  # documented, non-production exception.
  contact_flow_logs_enabled = false
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  hours_of_operations = {
    business_hours = {
      name      = "Business Hours"
      time_zone = "America/Chicago"
      config = [
        { day = "MONDAY", start_time = { hours = 8, minutes = 0 }, end_time = { hours = 17, minutes = 0 } },
        { day = "TUESDAY", start_time = { hours = 8, minutes = 0 }, end_time = { hours = 17, minutes = 0 } },
        { day = "WEDNESDAY", start_time = { hours = 8, minutes = 0 }, end_time = { hours = 17, minutes = 0 } },
        { day = "THURSDAY", start_time = { hours = 8, minutes = 0 }, end_time = { hours = 17, minutes = 0 } },
        { day = "FRIDAY", start_time = { hours = 8, minutes = 0 }, end_time = { hours = 17, minutes = 0 } },
      ]
    }
  }

  queues = {
    support = {
      name                   = "Member Support"
      hours_of_operation_key = "business_hours"
    }
  }

  routing_profiles = {
    standard = {
      name                       = "Standard"
      description                = "Standard voice + chat routing"
      default_outbound_queue_key = "support"
      media_concurrencies = [
        { channel = "VOICE", concurrency = 1 },
        { channel = "CHAT", concurrency = 3 },
      ]
      queue_configs = [
        { queue_key = "support", channel = "VOICE", priority = 1, delay = 0 },
      ]
    }
  }
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  #... hours_of_operations / queues / routing_profiles as in example 5...

  security_profiles = {
    agent = {
      name        = "Agent"
      permissions = ["BasicAgentAccess", "OutboundCallAccess"]
    }
  }

  users = {
    jdoe = {
      name                  = "jdoe"
      routing_profile_key   = "standard"
      security_profile_keys = ["agent"]
      identity_info = {
        first_name = "Jane"
        last_name  = "Doe"
        email      = "jdoe@casey-corp.com"
      }
      phone_config = {
        phone_type = "SOFT_PHONE"
      }
    }
  }

  # Never hardcoded — supplied from a secrets manager or generated-password module
  user_passwords = {
    jdoe = var.jdoe_initial_password
  }
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  user_hierarchy_structure = {
    level_one   = { name = "Region" }
    level_two   = { name = "Site" }
    level_three = { name = "Team" }
  }

  user_hierarchy_groups = {
    central_region = { name = "Central Region" }
    omaha_site     = { name = "Omaha", parent_group_key = "central_region" }
    support_team   = { name = "Support", parent_group_key = "omaha_site" }
  }
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  lambda_function_associations = {
    id_lookup = {
      function_arn = module.member_id_lookup_lambda.arn # from terraform-aws-lambda, no version/alias qualifier
    }
  }

  contact_flows = {
    main_ivr = {
      name = "Main IVR"
      type = "CONTACT_FLOW"
      content = jsonencode({
        Version     = "2019-10-30"
        StartAction = "12345678-1234-1234-1234-123456789012"
        Actions     = []
      })
    }
  }
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  contact_flows = {
    main_ivr = {
      name    = "Main IVR"
      content = jsonencode({ Version = "2019-10-30", StartAction = "...", Actions = [] })
    }
  }

  phone_numbers = {
    main_line = {
      country_code = "US"
      type         = "DID"
    }
  }

  phone_number_contact_flow_associations = {
    main_line = { phone_number_key = "main_line", contact_flow_key = "main_ivr" }
  }
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  #... queues / contact_flows / users as in prior examples...

  quick_connects = {
    supervisor_line = {
      name = "Supervisor"
      quick_connect_config = {
        quick_connect_type = "PHONE_NUMBER"
        phone_config       = { phone_number = "+18005551234" }
      }
    }
    transfer_to_support = {
      name = "Transfer to Support"
      quick_connect_config = {
        quick_connect_type = "QUEUE"
        queue_config       = { queue_key = "support", contact_flow_key = "main_ivr" }
      }
    }
  }

  # Wire the quick connect onto a queue by its RAW ID (post-apply), not by
  # module key — see Architecture Notes for why the key-based direction
  # would create a Terraform graph cycle.
  # queues.support.quick_connect_ids = [module.connect.quick_connects["supervisor_line"].quick_connect_id]
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  vocabularies = {
    casey_terms = {
      language_code = "en-US"
      content       = "Phrase\tIPA\tSoundsLike\tDisplayAs\ncasey\t\t\tcasey\n"
    }
  }
}

# Caller's provider block owns default_tags; the module never sets it.
provider "aws" {
  default_tags { tags = { Owner = "platform", ManagedBy = "terraform" } }
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  tags = {
    Environment = "prod" # resource tag — wins over default_tags on key conflict
    DataClass   = "npi"
  }
}

# module.connect.tags_all == { Owner, ManagedBy, Environment, DataClass }

import {
  to = module.connect.aws_connect_instance.this
  id = "f1288a1f-6193-445a-b47e-af739b2"
}

module "connect_saml" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-saml-contact-center"
  identity_management_type = "SAML"
}

module "connect_kms" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-kms?ref=v1.0.0"
  alias  = "casey/connect-recordings"
}

module "connect_recordings_bucket" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-s3-bucket?ref=v1.0.0"
  bucket = "casey-connect-call-recordings"
}

module "connect" {
  source = "git::https://github.com/microsoftexpert/terraform-aws-connect?ref=v1.0.0"

  instance_alias           = "casey-member-contact-center"
  identity_management_type = "CONNECT_MANAGED"

  storage_configs = {
    call_recordings = {
      resource_type = "CALL_RECORDINGS"
      storage_config = {
        storage_type = "S3"
        s3_config = {
          bucket_name       = module.connect_recordings_bucket.id
          bucket_prefix     = "call-recordings"
          encryption_config = { key_id = module.connect_kms.arn }
        }
      }
    }
  }

  hours_of_operations = {
    business_hours = {
      name      = "Business Hours"
      time_zone = "America/Chicago"
      config    = [{ day = "MONDAY", start_time = { hours = 8, minutes = 0 }, end_time = { hours = 17, minutes = 0 } }]
    }
  }

  queues = {
    support = { name = "Member Support", hours_of_operation_key = "business_hours" }
  }

  security_profiles = {
    agent = { name = "Agent", permissions = ["BasicAgentAccess", "OutboundCallAccess"] }
  }

  routing_profiles = {
    standard = {
      name                       = "Standard"
      description                = "Standard voice + chat routing"
      default_outbound_queue_key = "support"
      media_concurrencies        = [{ channel = "VOICE", concurrency = 1 }]
      queue_configs              = [{ queue_key = "support", channel = "VOICE", priority = 1, delay = 0 }]
    }
  }

  user_hierarchy_structure = {
    level_one = { name = "Region" }
    level_two = { name = "Site" }
  }
  user_hierarchy_groups = {
    central = { name = "Central Region" }
  }

  users = {
    jdoe = {
      name                  = "jdoe"
      routing_profile_key   = "standard"
      security_profile_keys = ["agent"]
      hierarchy_group_key   = "central"
      identity_info         = { first_name = "Jane", last_name = "Doe", email = "jdoe@casey-corp.com" }
      phone_config          = { phone_type = "SOFT_PHONE" }
    }
  }
  user_passwords = { jdoe = var.jdoe_initial_password }

  contact_flows = {
    main_ivr = { name = "Main IVR", content = jsonencode({ Version = "2019-10-30", StartAction = "...", Actions = [] }) }
  }

  lambda_function_associations = {
    id_lookup = { function_arn = module.member_id_lookup_lambda.arn }
  }

  phone_numbers = {
    main_line = { country_code = "US", type = "DID" }
  }
  phone_number_contact_flow_associations = {
    main_line = { phone_number_key = "main_line", contact_flow_key = "main_ivr" }
  }

  tags = { Environment = "prod", DataClass = "npi" }
}