Quicksight: error has been thrown from the AWS Athena client. Insufficient Lake Formation permissions

Rinku_Chavan · May 28, 2024, 7:35am

Quicksight is configured with a IAM role, which Quicksight assumes every time it refreshes Quicksight datasets. Those datasets are connected to an Athena Data Source.

Before applying LakeFormation permissions all has been working as expected. The Quicksight role has then been granted all necessary permissions in Lake Formation.

duncan · May 28, 2024, 7:14pm

Hi @Rinku_Chavan,
When we ran into something similar, we found this issue:

github.com/aws-solutions/aws-devops-monitoring-dashboard

Template doesn't create all needed tables

opened 08:18PM - 03 Jan 22 UTC

closed 08:19PM - 11 Apr 22 UTC

rgg1993

bug

I deployed the solution on AWS Cloudformation, which turned out to be not as smo…oth as it seemed to be. Issues: - Creation of CodeBuildEventsCodeBuildKinesisFirehose and CodeCommitKinesisFirehoseToS3KinesisFirehose: Since Datalake automatically adds a layer of protection on its databases and tables, one must be attentive to when the role is created to go to the Datalake console and grant it the access needed to the database created. Otherwise, on this step it will throw error: `"Access was denied when calling Glue. Please ensure that the role specified in the data format conversion configuration has the necessary permissions. Insufficient Lake Formation permission(s) on aws_codebuild_metrics_table`. Additionally, the template creates so many roles that it's hard to be sure regarding which role should be assigned the permissions. - The solution doesn't create the tables from which the dashboards feed themselves. Yeap. Once the stack was successfully deployed, the dashboards throw error: `awsdatacatalog.aws_devops_metrics_db_so0143.code_deployment_detail_view does not exist` Which makes sense, since when I go to the tables in databases, it shows the following two, missing aws_devops_metrics_db_so0143.code_deployment_detail_view ws_devops_metrics_db_so0143.code_build_detail_view. ![image](https://user-images.githubusercontent.com/70332427/147975942-e35618af-4c7f-413d-842f-c7c685734db8.png) **To Reproduce** Deploy your stack using the cloudformation template linked **Expected behavior** Tables should be created properly so dashboards can be fed. **Please complete the following information about the solution:**

unnamed

Are the 2 checkboxes (shown above) checked off?

Xclipse · June 1, 2024, 1:35am

Did this solution work for you? I am marking this reply as, “Solution,” but let us know if this is not resolved. Thanks for posting your questions on the QuickSight Community!

Rinku_Chavan · June 10, 2024, 9:09am

Hi @duncan
I have checked the same and I could see those 2 checkboxes are checked off as we are using not using IAM access for newly created databased and tables but lakeformation