Unable to update analysis via CLI

Question & Answer
,
1

I am unable to update an analysis that was created by me via CLI. The analysis was created by me. I am trying to get a version from another quicksight account and update the one in the below account through aws CLI. The CLI account belongs to a different user. How do we know which user needs to be provided and how?

aws quicksight update-analysis --aws-account-id <accnt_id> --cli-input-json file://C:/Users/SVC_ANY_WFS/Documents/create_analysis.json

An error occurred (AccessDeniedException) when calling the UpdateAnalysis operation: User: arn:aws:iam::<accnt_id>:user/samyagit is not authorized to perform: quicksight:UpdateAnalysis on resource: arn:aws:quicksight:us-east-1:<accnt_id>:analysis/6e8e92c2-eb47-4c06-8e34-ceda503af291 because no identity-based policy allows the quicksight:UpdateAnalysis action

2

@BhavyaBangera ,

The error message here means that user/samyagit made an API call to update an analysis. But it’s not allowed since there is no resource policy for this user .

Before making any policy changes, would recommend reviewing how IAM policies work : Policies and permissions in IAM - AWS Identity and Access Management

The user making those API calls should have relevant permissions in their IAM policies ( Actions, resources, and condition keys for Amazon QuickSight - Service Authorization Reference ) .

Kind regards,
Koushik

1 Like
3

Hi @BhavyaBangera,
It’s been awhile since we last heard from you. Did you have any additional questions regarding your original topic or did Koushik’s response assist with what you were looking for?

If we do not hear back from you within 3 business days, I’ll go ahead and mark the solution.

Thank you!

4

Hi @BhavyaBangera,
Since we have not heard back from you, I’ll go ahead and mark this as solved. However, if you have any additional questions, feel free to create a new topic in the community and link this discussion for any relevant information.

Thank you!