Important: We've redesigned the Amazon QuickSight analysis workspace. You might encounter screenshots or procedural text that doesn't reflect the new look in the QuickSight console. We're in the process of updating screenshots and procedural text.
To find a feature or item, use the Quick search bar.
For more information on QuickSight's new look, see Introducing new analysis experience on Amazon QuickSight
Accessing AWS resources
| Applies to: Enterprise Edition and Standard Edition |
| Intended audience: System administrators and Amazon QuickSight administrators |
You can control the AWS resources that Amazon QuickSight can access and scope down access to these resources at a more granular level. In Enterprise edition, you can also set up general access defaults for everyone in your account, and you can set up specific access for individual users and groups.
Use the following sections to help you configure your AWS resources to work with Amazon QuickSight.
Before you begin, make sure that you have the correct permissions; your system administrator can give you these. To do so, your system administrator creates a policy that enables you to use certain IAM actions. Your system administrator then associates that policy with your user or group in IAM. The required actions are the following:
-
quicksight:AccountConfigurations– To enable setting default access to AWS resources -
quicksight:ScopeDownPolicy– Scoping policies for permissions to AWS resources -
You can also bring your own IAM roles into QuickSight. For more information, see Passing IAM roles to Amazon QuickSight
To enable or disable the AWS services that Amazon QuickSight can access
-
Sign in to Amazon QuickSight at https://quicksight.aws.amazon.com/
. -
At the upper right, choose your user name, and then choose Manage QuickSight.
-
Choose Security & permissions.
-
Under QuickSight access to AWS services, choose Add or remove.
A screen appears where you can enable all available AWS services.
Note
If you see a permissions error, and you're an authorized Amazon QuickSight administrator, contact your system administrator for assistance.
-
Select the check boxes for the services that you want to allow. Clear check boxes for services that you don't want to allow.
If you have already enabled an AWS service, the check box for that service is already selected. If Amazon QuickSight can't access a particular AWS service, its check box is not selected.
In some cases, you might see a message like the following.
This policy used by Amazon QuickSight for AWS resource access was modified outside of Amazon QuickSight, so you can no longer edit this policy to provide AWS resource permission to Amazon QuickSight. To edit this policy permissions, go to the IAM console and delete this policy permission with policy arn - arn:aws:iam::111122223333:policy/service-role/AWSQuickSightS3Policy.This type of message means that one of the IAM policies that Amazon QuickSight uses was manually altered. To fix this, the system administrator needs to delete the IAM policy listed in the error message and reload the Security & permissions screen before you try again.
-
Choose Update to confirm, or Cancel to return to the previous screen.
Topics
