Privacy of embedded dashboard

Q&A
, , ,
1

Hey All,
Can someone pls help me understand if let’s say there is a dashboard in amazonbi account which I’m embedding in my web application using the GetEmbedDashboardUrl API call that QS exposes. Now, this dashboard was visible to only a group of people in the native Quicksight console so my question here is - will the embedded dashboard be visible to every user of my website or will only the same group of people be able to view this dashboard?

2

Hi @shreyavj

If you’re using GetEmbedDashboardUrl in user-based mode, then only users from the authorized group in Quick Sight can view the dashboard.

If you’re using anonymous embedding, any visitor of your site will be able to view it, unless you restrict it via your app logic.

IdentityType=‘IAM’ or ‘QUICKSIGHT’ - Secure embedding (user-based).

  1. Requires users to be registered in Quick Sight.
  2. Access is controlled by Quick Sight groups, permissions, and RLS.
  3. Only authorized users (in the right group or with the right dataset access) can view the dashboard.

IdentityType=‘ANONYMOUS’

  1. Anonymous embedding (no Quick Sight account required).
  2. Anyone with access to your site can view the dashboard, unless restricted at the app level.

Please refer to the below documentation this might be helpful for you.

3

Hey, if I’m registering my Lambda Role as a user in the quicksight account to fetch the dashboard embed url then too every app user will not be able to see the embedded dashboard right? And only users who are actually registered will be able to view?

4

Hi @shreyavj

If your Lambda role is registered in Quick Sight (i.e., using IdentityType=‘IAM’) to call GetDashboardEmbedUrl, then

  • The URL returned is tied to the IAM identity (your Lambda’s IAM role).
  • When you embed that URL into your app, only the Quick Sight users who are authorized (based on Quick Sight group/dataset/dashboard permissions) will be able to view it.
2 Likes
5

Hi @shreyavj

It’s been a while since we last heard from you. If you have any further questions, please let us know how we can assist you.

If we don’t hear back within the next 3 business days, we’ll proceed with close/archive this topic.

Thank you!

6

Hi @shreyavj

Since we have not heard back from you, I’ll go ahead and close/archive this topic. However, if you have any additional questions, feel free to create a new topic in the community and link this discussion for relevant information.

Thank you!