Refused to frame 'https://us-east-1.quicksight.aws.amazon.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'"

[shravya]

Hi @seven - Welcome to the Quicksight Community! Thank you for posting your question!

Please refer to this post below and let me know if it solved/got any insights regarding your error

ERROR - Content Security Policy directive - Help!

Hi Daniel, As Enrique recommended please review your security policies for application website, to see if there is no such policy applied to block content from QuickSight (https://us-east-2.quicksight.aws.amazon.com/) you can allow-list your application domain to QuickSight using QuickSight ADMIN user. Detail step to enable is in following link: Allow listing static domains - Amazon QuickSight

ERROR - Content Security Policy directive - Help!

Hello @dmarcus thanks for your question. From the error you are getting I would say that the CSP in your website is restricting the content that your web application can embed using iframes (which is the underlying technology used on QS embedding). Can you review your website CSP to see which is the policy you have applied? CSP can be implemented either on the server side (returning the Content-Security-Policy HTTP header) or by setting it via a meta element <meta http-equiv="Content-Secur…

Thank you,
Shravya