ISV - Embedded Analytics Resources by Topic
Introduction
Welcome to the Embedded Analytics Resources page! This page is intended to provide you with the resources needed to successfully integrate and embed Amazon QuickSight into your custom websites and applications. Below you will find asset links containing detailed implementation and best practices around the following core Business Intelligence (BI) topics: data strategy, authentication and authorization, asset creation, asset management, and embedded analytics.
Please note that the following resources will require that you have access to an existing Amazon QuickSight account or sign up for a new subscription and that you have the appropriate Identity and Access Management (IAM) permissions. Additionally, most of these resources are primarily focused around Amazon QuickSight accounts that have been configured with IAM federated identities and QuickSight-managed users as the identity method. If you have chosen to use IAM Identity Center enabled applications, some of the resources below may not be applicable for your use case. For more information on the differences between these approaches, please see the Authentication and Authorization section below!
Data Strategy
A robust data strategy forms the foundation for analytics and BI. This section includes resources for choosing the optimal data storage solution, implementing multi-tenancy, managing data effectively, and controlling access to data, all within Amazon QuickSight.
- Supported data sources - Review the available data sources in QuickSight. If your desired data storage solution is not supported, you may need to use an ETL tool to load your data into a supported source.
- Data isolation in multi-tenant application - Learn how to support multi-tenant applications in QuickSight, including data isolation methods like tenant datasets vs shared datasets with access restrictions.
- Query mode comparison - Compare SPICE and Direct Query options, including the benefits, trade-offs, and common use cases.
- Data security - Utilize row-level security and column-level security to control access within your shared QuickSight datasets.
Authentication and Authorization
Authentication and authorization are critical aspects of application security that must be managed to provide appropriate QuickSight access. This section covers resources around the possible access approaches and strategies for restricting user activity.
- QuickSight access approaches - Choose the right access approach for your use case by reviewing the available options including federated identities managed in an external identity provider (IdP), IAM Identity Center, Active Directory, IAM users, or QuickSight users.
- Custom permissions - Leverage custom permission to restrict user functionality beyond the preset QuickSight roles (reader, author, admin) to control or prevent specific actions such as sharing assets or exporting data.
Dashboard Creation
Creating QuickSight assets is a pre-requisite for embedding them into applications. This section includes resources for analysts and engineers who create dashboards to ensure they can meet their requirements for functionality, look-and-feel, and visualizations.
- Author workshop - Follow the hands-on exercises to learn how to enhance your dashboards through visuals, calculations, and interactivity.
- Highcharts integration - For more advanced visualization requirements, learn how to leverage the new Highcharts visual options. Additional information can be found in the QuickSight Learning Series sessions covering this feature - part 1 and part 2.
Asset Management and Deployment
Ensuring business continuity is critical for business intelligence and IT operations (BIOps) teams. This section contains resources for achieving these requirements through automated and scalable methods of asset deployment, migration, replication, and back up.
- Deployment APIs - Leverage the QuickSight APIs to programmatically export and import QuickSight assets for deployment and migration use cases.
- Event-driven deployment- Learn about the integration with Amazon EventBridge events to leverage event-driven actions and deployment
Embedded Analytics
Embedding analytics capabilities into applications is a common strategy for achieving product differentiation, providing data-driven user experiences, and unlocking new monetization opportunities. This section contains resources for choosing the right embedding option for your use case and the considerations and best practices. The diagram above depicts the end-to-end workflow of how the components of your webpages or applications communicate with Amazon QuickSight in order to embed and load assets for your end users.
- Embedding types - Compare the different embedding options in QuickSight (1-click vs API) in order to choose the appropriate solution.
- API embedding options - Further compare the two methods of API-based embedding, registered and anonymous user embedding to understand the appropriate use cases for each.
- Embedding SDK - Utilize the Amazon QuickSight Javascript Embedding SDK to embed assets in your HTML.
- Multi-tenancy and user isolation - Learn how to maintain multi-tenancy in an embedded environment through the use of namespaces, groups, and shared folders.
- Generative BI - Explore how you can leverage the Generative BI capabilities in your embedded consoles and dashboards.
- Runtime capabilities - Review how you can use the embedding SDK and runtime capabilities to dynamically update themes and filters in embedded dashboards and visuals.