Can a cross account Lake Formation resource be used in Quick Sight

Q&A
, ,
1

Posting a Customer question along with answer to it.

Can a cross account Lake Formation resource be used in Quick Sight?
(Facing issues in trying to set permissions in Lake Formation)

2

Yes. Cross account database and table resource links in Lake Formation can be used in Quick Sight via Athena connector.

Ensure the following permissions are configured in Lake Formation (in account where resource links have been created.)

  1. Grant describe (permission + grantable) on the resource link to Quick Sight user/group arn.
    Ensure that you are using Quick Sight arn and not iam arn.

  2. Grant on target on the resource link with select (permission + grantable) for Quick Sight user/group arn. (Selecting all tables option is causing error in LF; Selecting needed tables explicitly works.)

Cross check the following in source account’s Lake Formation.

  1. Ensure that the s3 bucket is registered as a data location in Lake Formation.
    (Usually will already be done; Cross check for public buckets as they would work from Athena even without this, but will work from Quick Sight only if explicitly registered in Lake Formation)

Regards,
Arun Santhosh

1 Like
3

Hi,

I’ve tried these steps but it seems something is still a miss as I can’t even see the tables, just the database link name…what could it be missing? I’m unfortunately stuck at this stage at present :frowning:

4

@Raamy
I’m encountering the same issue, i can’t see my tables in QS. Have you been able to resolve it? Please help me figure it out." :pray: