Generate a QuickSight console federation URL

GET 
/quicksight/preSignedURL

Returns an AWS federation sign-in URL that opens the QuickSight console (https://quicksight.aws.amazon.com/) as the authenticated Amorphic user. The caller needs verticals.view on the supplied role_id. The user must exist in Amorphic and already be registered in QuickSight as {IAMRole}/{user_id}. The Lambda assumes that IAM role for 3600 seconds, requests a federation SigninToken (session duration 3598 seconds), and returns the login URL in Message. The federation URL must be used within 15 minutes of token issue. This Lambda maps InvalidInputException and UnauthorizedUserException to HTTP 400. Unhandled exceptions (including "User is not registered in BI Application") map to HTTP 500. Example: GET /quicksight/preSignedURL

Request

Responses

200

Federation URL in Message. There is no QSConsoleURL field; the URL is the Message string.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

InvalidInputException (including GE-1003 for an invalid Amorphic user) or UnauthorizedUserException. Body is {"Message": " - "}.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

GenericFailure, InconsistentMetadata, or unhandled exception. User not registered in QuickSight raises a bare Exception and is mapped to HTTP 500 as RTE-1001 via EMF-1001.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers