QuickSight permission on LakeFormation cross-region in the same account

Question & Answer
,
1

For context, my QuickSight account is in eu-west-1 region.
To analyse the cost of my quicksight account, I enable CUR 2.0 Data Export, which only available in us-east-1, which is stored in a Glue Database & Table in us-east-1 region.

Since I need to visualize this data in QuickSight account in eu-west-1, I have created a Table in eu-west-1 using Resource Link. I’m able to query the data in Athena, however, when I try to use create the dataset in QuickSight, I received an error:

An error has been thrown from the AWS Athena client. HIVE_UNSUPPORTED_FORMAT: Table StorageDescriptor is null for table 'myDatabaseName.bcm_data_export' {Name: bcm_data_export,DatabaseName: myDatabaseName,Description: ,Owner: ,Retention: 0,ViewOriginalText: ,ViewExpandedText: ,TableType: ,Parameters: {___lake_formation_authorized_columns___={ "authorizedColumns" : [ ] }, target_table_region=eu-west-1, ___table_owner_account_id___=123456789012, ___use_lakeformation_credentials___=false, __athena_nested_field_filter_enabled=true, ___use_lakeformation_row_column_security___=false},CreatedBy: ,IsRegisteredWithLakeFormation: false,TargetTable: {CatalogId: 123456789012,DatabaseName: targetDatabaseName,Name: targetTableName,Region: us-east-1,},CatalogId: 123456789012,IsRowFilteringEnabled: false,DatabaseId: ,IsMultiDialectView: false} [Execution ID: e9d5cea8-a998-464c-91d9-b06837262dab]

Could you please advise which permission I need to set on Lake Formation to enable QuickSight to access the shared table in eu-west-1?

I have tried the below guidance but have not been successful:

Thank you for any advice!

2

Hello @Giang_Nguyen !

What do your permissions currently look like for Lake Formation?

I would suggest in eu-west-1 make sure that your IAM role has permission to the resource linked glue table, and you will probably want us-east-1 to have access to the initial glue table.