Prove for Amazon Connect

Prove for Amazon Connect: The Modern Way of Proving Identity

In our digital-first economy, businesses need to modernize how they establish and maintain trust with consumers. Leveraging 15+ years of identity expertise and development, Prove enables businesses to improve consumer servicing, mitigate fraud, and boost revenue with the world's most accurate identity verification and authentication platform for both onboarding and servicing of end customers.

• 1,500+ enterprise clients including 19 out of the top 20 US banks

• 30B+ transactions authenticated annually

• 385M+ reusable identity tokens: world's largest network of verified identities

• 200+ patents across authentication and identity, fraud, passwordless login, and other identity verification technologies

Amazon Connect Use Cases:

• Replace Voice ID

• Improve IVR Containment

• Deliver Step-Up Authentication

• Optimize Agent Handle Time and CX

• Improve Inbound/Outbound Omnichannel Interactions

• Maintain Up-to-Date Customer Profiles

Prove's Approach and Solutions:

• Call Verification and Spoofing Protection: Prove Caller Authentication confirms a phone number is actively connected during a live interaction-helping detect spoofing, prevent fraud, and ensure the caller is truly who they claim to be.

• Account Takeover Protection: Trust Score and Identity VerifySM provide instant and real-time scoring of behavioral risk assigned to a phone identity token and phone number to prevent account takeovers. Seamlessly safeguard real users while blocking fraudsters.

• Continuous Identity Monitoring: Prove Identity ManagerSM continuously monitors for profile changes, such as phone numbers, device and attribute changes for ongoing identity accuracy.

• Step-Up For High-Risk Events: Instant LinkSM actively authenticates mobile devices and fortifies the SMS OTP process by having users click on an URL link delivered via SMS. Mobile Auth replaces traditional OTPs to passively authenticate when you need.

• Recognize Returning Users Immediately: Prove Unified AuthenticationSM passively and persistently recognizes returning users across sessions and devices without added friction for users.

AWS Specific: IAM roles created by this deployment

This solution's CloudFormation template creates two IAM roles in your AWS account, each used as an execution role by one of the deployed Lambda functions. Both follow least-privilege and grant only the permissions described below.

• Call Auth Lambda execution role - Assumed only by the Call Auth Lambda function. Grants permission to write logs to its own CloudWatch log group and to send AWS X-Ray trace data. No other AWS access.

• Trust Score Lambda execution role - Assumed only by the Trust Score Lambda function. Grants permission to write logs to its own CloudWatch log group and to send AWS X-Ray trace data. No other AWS access.

 
The template also grants Amazon Connect permission to invoke each Lambda function, scoped to the specific Connect instance you provide. Buyers are responsible for any AWS infrastructure charges (Lambda, CloudWatch, X-Ray, and Amazon Connect usage) they incur, which are billed separately from the AWS Marketplace transaction.