Amazon QuickSight in AWS GovCloud (US)

This service is currently available in AWS GovCloud (US-West) only.

Amazon QuickSight is a cloud-scale business intelligence (BI) service that you can use to deliver easy-to-understand insights to the people who you work with, wherever they are. Amazon QuickSight connects to your data in the cloud and combines data from many different sources. In a single data dashboard, Amazon QuickSight can include AWS data, third-party data, big data, spreadsheet data, SaaS data, B2B data, and more. As a fully managed cloud-based service, Amazon QuickSight provides enterprise-grade security, global availability, and built-in redundancy. It also provides the user-management tools that you need to scale from 10 users to 10,000, all with no infrastructure to deploy or manage.

Amazon QuickSight gives decision-makers the opportunity to explore and interpret information in an interactive visual environment. They have secure access to dashboards from any device on your network and from mobile devices.

How Amazon QuickSight differs for AWS GovCloud (US)

Below listed are the differences between the AWS GovCloud (US) and the standard AWS Regions.

• Email based user provisioning is not supported in AWS GovCloud (US).

• Using geospatial visualizations is not supported in AWS GovCloud (US).

• Using Amazon SageMaker integration is not supported in AWS GovCloud (US).

• Amazon QuickSight Q is not supported in AWS GovCloud (US).

• VPC connections are not supported in AWS GovCloud (US).

Amazon QuickSight in AWS GovCloud (US) supports user authorization for federated users only. Amazon QuickSight directly supports authentication through AWS Identity and Access Management (IAM), AWS IAM Identity Center (IAM Identity Center), and AWS Directory Service for Microsoft Active Directory. For more information, see Identity federation in AWS.

If you're a Amazon QuickSight administrator, make sure to allow-list the following domains within your organization's network.

User type	Domain to allow-list
Native Amazon QuickSight and Active Directory users	awsapps.com and amazonaws-us-gov.com
IAM users	amazonaws-us-gov.com

Specialized configurations that allow users to authenticate with a different identity service can also work, even if not directly supported from inside Amazon QuickSight. For example, you can use Amazon Cognito as is described in the Embedded Analytics Tutorial. This authentication method works because it is compatible and transparent to Amazon QuickSight. For more information on Amazon QuickSight authentication, see Identity and Access Management in Amazon QuickSight.

Note

If you are using the Embedded Analytics Tutorial, you can point to AWS GovCloud (US) ARNs and URLs for your resources, but in the step for the static website that uses Amazon CloudFront and Amazon S3, you need to point to a classic AWS Region, for example US East (N. Virginia), for the tutorial to work. This is not necessary outside the tutorial. For more information and additional examples, see Developing with Amazon QuickSight in the Amazon QuickSight User Guide.

Documentation for Amazon QuickSight

Amazon QuickSight documentation.

Export-controlled content

For AWS Services architected within the AWS GovCloud (US) Regions, the following list explains how certain components of data may leave the AWS GovCloud (US) Regions in the normal course of the service offerings. The list can be used as a guide to help meet applicable customer compliance obligations. Data not included in the following list remains within the AWS GovCloud (US) Regions.

• No data will leave the AWS GovCloud (US) Regions for this service.