Today, Amazon QuickSight is announcing the general availability of Client Credentials flow based OAuth through API/CLI to connect to Starburst data sources. This launch enables you to create Starburst connections as part of your Infrastructure as Code (IaC) efforts with full support for AWS CloudFormation.
This type of OAuth solution is used to obtain an access token for machine-to-machine communication. This flow is suitable for scenarios where a client (e.g., a server-side application or a script) needs to access resources hosted on a server without the involvement of a user. The launch includes the support for Token (Client Secrets Based OAuth) & X509 (Client Private Key JWT) based OAuth. This launch also includes the support for Role Based Access Control (RBAC). RBAC is used to display the corresponding schema/table information tied to that role during dataset creation by QuickSight authors.
This feature is now available in all supported Amazon QuickSight regions here. For more details, click here.
This is a companion discussion topic for the original entry at https://aws.amazon.com/about-aws/whats-new/2024/11/amazon-quicksight-client-credentials-oauth-starburst-api-cli/