Skip to main content
 print this page

Quicksight Integration and Dashboard Sharing

QuickSight is a cloud-powered business intelligence service that makes it easy to deliver insights. To integrate Quicksight with Amorphic application follow the steps mentioned below -

  1. Subscribe to Quicksight in the region Amorphic application is deployed. qs_signup

  2. Sign up for QuickSight. After clicking 'Sign Up,' you’ll be given the option to choose between Standard and Enterprise editions. qs_options

  3. Select enterprise edition and continue. qs_select_region

  4. In the next screen select ‘Use Role based Federation(SSO)’ and then in the region drop down select AWS region same as Amorphic application deployed region. Give Quicksight Account name as Amorphic application name. Enter the email address for notifications in place of noreply@amorphicdata.com shown in image (if you don't need notifications, you can use noreply@amorphicdata.com) and then select finish. qs_signup_uccess

  5. It takes around 15 seconds to create an account. Once created, console will display Amazon Quicksight information. Select ‘Go to Amazon QuickSight’ button. qs_manage_users

  6. Once the enterprise edition is set up in the account, in the console we need to add the domain of Amorphic application in Quicksight. To do that select Manage Quicksight which will be dropped down once we select our profile on the top right corner of the console. qs_domains_embed

  7. Once we select manage quicksight we will be able to see Domains and Embedding on the left hand side. We need to select that and add Domain name in the text box provided. Domain name is the amorphic application URL (Not the backend Cloudfront URL).

    This step whitelists the domain, allowing the application to embed QuickSight dashboards. This link has the steps of how to add a domain: https://docs.aws.amazon.com/quicksight/latest/user/approve-domain-for-dashboard-embedding.html

  8. Initially, a dummy QuickSight dashboard must be created and registered in the Amorphic application. Open the dashboard details in the Amorphic application (though the embedded dashboard won’t be displayed yet, this step creates the required backend user). This is a temporary hack to create the required user in the backend.

    After this step following user will be created in Quicksight : {projectShortName}-Quicksight-Lambda-ExecutionRole/{projectShortName}-{env}-dashboards.

Note

  • If a user cannot access a private Redshift instance from QuickSight, check the 'Inbound Rules' of the security group used by QuickSight. Ensure there is an inbound rule allowing 'All TCP' traffic to the self-referencing security group.

  • From Amorphic 2.0, usernames in QuickSight will change from {projectShortName}-Quicksight-Lambda-ExecutionRole/lambdaccess to {projectShortName}-Quicksight-Lambda-ExecutionRole/{projectShortName}-{env}-dashboards

  • From Amorphic 2.2, the QuickSight service role needs kms:Decrypt permission to analyze data from AwsDataCatalog.