Amazon Quick Sight Resource ARNs - Amazon Quick Sight

Amazon Quick Sight Resource ARNs

The following resource types are defined by Amazon Quick Sight: user, group, dashboard, and topic. These are used in Amazon Quick Sight API calls and as elements of IAM permission statements. To find up-to-date information for Amazon Quick Sight (service prefix: quicksight) resources, actions, and condition context keys for use in IAM permission policies, see Actions, Resources, and Condition Keys for Amazon Quick Sight in the IAM User Guide.

Resource Type ARN Format Condition Keys
user arn:${Partition}:quicksight:${Region}:${Account}:user/${ResourceId} N/A
group arn:${Partition}:quicksight:${Region}:${Account}:group/${ResourceId} N/A
dashboard arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${ResourceId} N/A
topic arn:${Partition}:quicksight:${Region}:${Account}:topic/${ResourceId} N/A
analysis arn:${Partition}:quicksight:${Region}:${Account}:analysis/${ResourceId} N/A
template arn:${Partition}:quicksight:${Region}:${Account}:template/${ResourceId} N/A
theme arn:${Partition}:quicksight:${Region}:${Account}:theme/${ResourceId} N/A

Resource ARNs are constructed from the segments that describe your resource. For example, a resource ARN for an analysis consists of the following segments. 

arn:<partition>:quicksight:<aws-region>:<aws-account-id>:<resource-type>/<resource-id>

The segments are defined as follows:

  • partition – For example, aws or aws-cn.

  • aws-region – The AWS Region that contains the resource.

  • aws-account-id – The AWS account that contains the resource. This excludes the hyphens.

  • resource-type – The type of resource. For this example, this is analyses. For a dashboard, it is dashboard.

  • resource-id – The unique identifier for a specific resource.

The AWS Region, resource type, and resource ID are identified in the URL of the resource when you are using the Amazon Quick Sight console. For example, let's say this is the URL of the analysis you want an ARN for.

https://us-east-2.quicksight.aws.amazon.com/sn/analysis/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111

The AWS Region is us-east-2. The resource-type is analysis. The resource ID in this URL is a1b2c3d4-5678-90ab-cdef-EXAMPLE11111. If your account number is 111122223333, then the ARN for this analysis is as follows.

arn:aws:quicksight:us-east-2:111122223333:analysis/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111

To get your AWS account number, contact your system administrator.

To get the dataset ID

  1. Navigate to the desired dataset page. You will be able to find the ID in the url. For example, https://us-east-1.quicksight.aws.amazon.com/sn/data-sets/085fb6a4-c606-4949-b1ee-52cffadac462/. The dataset ID in this instance would be 085fb6a4-c606-4949-b1ee-52cffadac462.

  2. Alternatively, you can use an API call to find the dataset ID.

    aws quicksight list-data-sets --aws-account-id your-aws-account-id

    You will see the dataset ID in the result, for example:

    "DataSetId": "a165d37b-c071-4648-8039-e4db5e5f7f08"

To get the data source ID

  • Use an API call to find the data source ID.

    aws quicksight list-data-sources --aws-account-id your-aws-account-id

    You will see the data source ID in the result, for example:

    "DataSourceId": "1491fa60-1f19-4c0f-9f56-c72413a24986"