Quick Sight: Security

Q&A
,
1

Hi Community,

I have few questions regarding administration and security.

  1. Is there any provision available in Quick Sight to automatically disable a user from access if he/she has been inactive x number of days?
  2. What is the Quick Sight session duration? How do we configure if we want to change the default?
  3. I create Quick Sight email based accounts and haven’t seen an option for Password expiry. Do we have a mechanism to force password change? Also, can we specify rules for setting passwods (lenght, use of special characters etc?)
  4. We setup the admin console dashboard that gives visibility to user activity in using dashboards. However, I would like to know if the logs capture details like when an author shared a dashboard, published a dashboard and changed an analysis and changes of this nature? This is for Audit Trail purposes.

I would appreciate your answers to these.

Regards,
Giri

1 Like
2

HI @Giridhar.Prabhu ,

Thank you for raising these points. All four of these points are commonly used in our day-to-day work.

Thanks & Regards
Biswajit Dash

3

Hi @Giridhar.Prabhu,

If the identity type is IAM, you can set the session duration. I don’t know if you can do that if the identity type is Quick Sight.

You can find the list of events tracked in CloudTrail here:

There are events for UpdateDashboard and UpdateAnalysis. I’m not sure if UpdateDashboardAccess means the same thing as sharing a dashboard. You may want to test to confirm.

4 Likes
4

Thanks @David_Wong!

I will take a look at the details.

5

Hello @Giridhar.Prabhu, since we have not heard back from you with any follow-up questions, I will mark @David_Wong’s response as the solution. If you need further assistance on this topic, please let us know and we can guide you further. Thank you!

1 Like