Amazon Quicksight embed with row-level permissions and no login

Q&A
,
1

I’m trying to work out how to embed a Quicksight dashboard with row-level permissions, without having a user sign in.

I have the following set up:

  • Amazon Cost Intelligence Dashboard (CID) pulling in data from several AWS accounts.
  • I have implemented row-level security on this data so that certain users can only see data on certain aws account ids
  • I want to embed that dashboard in a web application where I already have my own user authentication
  • I want each user in my application to get a different view of the dashboard (only show the relevant aws account id) per user. I don’t want the users to have to log in separately to Quicksight to get that data
  • I’m happy to create a corresponding user (Reader level access) in quicksight for each of the users in my application if needed. I just don’t want them to have to log in to quicksight.

Any pointers on how I implement this?

2

@domaa ,

Based on the details provided, our user based embedding workshop will help you on the question of user access to a dashboard once they have logged into the application :

  • I’m happy to create a corresponding user (Reader level access) in quicksight for each of the users in my application if needed. I just don’t want them to have to log in to quicksight.

The user does not have to login to QuickSight. Once you create a reader in QuickSight, as part of the API call your application makes to QuickSight to retrieve the embedding url for that user, you will pass the UserArn .
Embedding flow ( https://youtu.be/lo4cUa3IwPQ?t=1464 )

Kind regards,
Koushik

3

Thank you. I was talking to someone who suggested this would work: Embed multi-tenant dashboards in SaaS apps using Amazon QuickSight without provisioning or managing users | AWS Big Data Blog

Do you think this is the right implementation?

4

Yes that would a valid solution as well if you don’t want to manage users in QuickSight.

Kind regards,
Koushik

5

Thank you. Appreciate the help :+1: