Hi, for my company we have to set up Quick Sight in multiple accounts for the branches in different countries. Many Quick Sight admin settings such as “Change default resource access”
and “Configure IdP URL and URL parameter” only seem to be manageable through the Quick Sight web admin page and not through Terraform or the API. Are there options to make sure the Quick Sight accounts settings are set up according to our internal configuration rules and to monitor whether the settings in the account stay compliant?
Kind Regards
Nelis
1 Like
Hello @Nelis, welcome to the Quick Sight community!
Unfortunately for some Quick Sight functionalities, you may run into an issue where some features can only be accessed directly in the Quick Sight console and other features are only available through the APIs or Terraform. While I have not tried to update these specific account options through the API before, I went through the documentation to see if I could find anything that would relate to these specific options.
I wasn’t able to find direct reference of those 2 functions that you mentioned above, but I will link some of the documentation I looked through to see if that helps.
- Create Account Subscription
- Create IAM Policy Assignment
- Update Identity Propagation Config
- Update IAM Policy Assignment
As for tracking these settings to ensure they remain with your default configuration, there is not a great option to ensure nothing is changed other than not providing admin level account access to users. There are some monitoring features available with CloudWatch, but that is geared towards monitoring user access of Quick Sight resources, not changes in account settings.
I wish I had a more concrete answer to your questions, but I hope this at least will guide you in the right direction. I think it may be beneficial to submit a support ticket for assistance customizing your account settings and finding alternative ways to programmatically set them. Here are the steps to open a support case. Let me know if you have any further questions!
1 Like
Hello @Nelis, did my previous response help guide you resolve the issue you are facing in Quick Sight? Since we have not heard back from you with any follow-up questions, I will mark my response as the solution. Please let me know if you still need assistance and I can guide you further. Thank you!
1 Like
Hi @DylanM, thank you for your response. It indeed seems there is no API access to these settings and that it is not possible to monitor them for changes. So my question is resolved. Thank you!
1 Like