ISV - Embedded Analytics Resources by Topic
Introduction
Welcome to the Embedded Analytics Resources page! This page is intended to provide you with the resources needed to successfully integrate and embed Amazon Quick Sight into your custom websites and applications. Below you will find asset links containing detailed implementation and best practices around the following core Business Intelligence (BI) topics: data strategy, authentication and authorization, asset creation, asset management, and embedded analytics.
Please note that the following resources will require that you have access to an existing Amazon Quick Sight account or sign up for a new subscription and that you have the appropriate Identity and Access Management (IAM) permissions. Additionally, most of these resources are primarily focused around Amazon Quick Sight accounts that have been configured with IAM federated identities and Quick Sight-managed users as the identity method. If you have chosen to use IAM Identity Center enabled applications, some of the resources below may not be applicable for your use case. For more information on the differences between these approaches, please see the Authentication and Authorization section below!
Data Strategy
A robust data strategy forms the foundation for analytics and BI. This section includes resources for choosing the optimal data storage solution, implementing multi-tenancy, managing data effectively, and controlling access to data, all within Amazon Quick Sight.
- Supported data sources - Review the available data sources in Quick Sight. If your desired data storage solution is not supported, you may need to use an ETL tool to load your data into a supported source.
- Data isolation in multi-tenant application - Learn how to support multi-tenant applications in Quick Sight, including data isolation methods like tenant datasets vs shared datasets with access restrictions.
- Query mode comparison - Compare SPICE and Direct Query options, including the benefits, trade-offs, and common use cases.
- Data security - Utilize row-level security and column-level security to control access within your shared Quick Sight datasets.
Authentication and Authorization
Authentication and authorization are critical aspects of application security that must be managed to provide appropriate Quick Sight access. This section covers resources around the possible access approaches and strategies for restricting user activity.
- Quick Sight access approaches - Choose the right access approach for your use case by reviewing the available options including federated identities managed in an external identity provider (IdP), IAM Identity Center, Active Directory, IAM users, or Quick Sight users.
- Custom permissions - Leverage custom permission to restrict user functionality beyond the preset Quick Sight roles (reader, author, admin) to control or prevent specific actions such as sharing assets or exporting data.
Dashboard Creation
Creating Quick Sight assets is a pre-requisite for embedding them into applications. This section includes resources for analysts and engineers who create dashboards to ensure they can meet their requirements for functionality, look-and-feel, and visualizations.
- Author workshop - Follow the hands-on exercises to learn how to enhance your dashboards through visuals, calculations, and interactivity.
- Highcharts integration - For more advanced visualization requirements, learn how to leverage the new Highcharts visual options. Additional information can be found in the Quick Sight Learning Series sessions covering this feature - part 1 and part 2.
Asset Management and Deployment
Ensuring business continuity is critical for business intelligence and IT operations (BIOps) teams. This section contains resources for achieving these requirements through automated and scalable methods of asset deployment, migration, replication, and back up.
- Deployment APIs - Leverage the Quick Sight APIs to programmatically export and import Quick Sight assets for deployment and migration use cases.
- Event-driven deployment- Learn about the integration with Amazon EventBridge events to leverage event-driven actions and deployment
Embedded Analytics
Embedding analytics capabilities into applications is a common strategy for achieving product differentiation, providing data-driven user experiences, and unlocking new monetization opportunities. This section contains resources for choosing the right embedding option for your use case and the considerations and best practices. The diagram above depicts the end-to-end workflow of how the components of your webpages or applications communicate with Amazon Quick Sight in order to embed and load assets for your end users.
- Embedding types - Compare the different embedding options in Quick Sight (1-click vs API) in order to choose the appropriate solution.
- API embedding options - Further compare the two methods of API-based embedding, registered and anonymous user embedding to understand the appropriate use cases for each.
- Embedding SDK - Utilize the Amazon Quick Sight Javascript Embedding SDK to embed assets in your HTML.
- Multi-tenancy and user isolation - Learn how to maintain multi-tenancy in an embedded environment through the use of namespaces, groups, and shared folders.
- Generative BI - Explore how you can leverage the Generative BI capabilities in your embedded consoles and dashboards.
- Runtime capabilities - Review how you can use the embedding SDK and runtime capabilities to dynamically update themes and filters in embedded dashboards and visuals.