quicksight:GenerateEmbedUrlForAnonymousUser

Write

quicksight:GenerateEmbedUrlForAnonymousUser is a Write access-level action in the quicksight service. Grants permission to generate a URL used to embed a QuickSight Dashboard or Q Topic for a user not registered with QuickSight

Resource types

ARNs that quicksight:GenerateEmbedUrlForAnonymousUser can be scoped to in an IAM policy.

arn:${Partition}:quicksight:${Region}:${Account}:namespace/${ResourceId}

namespace

arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${ResourceId}

dashboard

arn:${Partition}:quicksight:${Region}:${Account}:theme/${ResourceId}

theme

arn:${Partition}:quicksight:${Region}:${Account}:topic/${ResourceId}

topic

Condition keys

Keys you can use in the Condition block of a policy that grants quicksight:GenerateEmbedUrlForAnonymousUser.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows quicksight:GenerateEmbedUrlForAnonymousUser. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowQuicksightGenerateEmbedUrlForAnonymousUser",
      "Effect": "Allow",
      "Action": "quicksight:GenerateEmbedUrlForAnonymousUser",
      "Resource": "*"
    }
  ]
}

Related actions in quicksight

quicksight:AccountConfigurations Write quicksight:AllowVendedLogDeliveryForResource Permissions management quicksight:BatchAssignLimitsProfile Write quicksight:BatchCreateTopicReviewedAnswer Write quicksight:BatchDeleteKnowledgeBase Write quicksight:BatchDeleteTopicReviewedAnswer Write quicksight:BatchGetPreferences Read quicksight:BatchUnassignLimitsProfile Write quicksight:BatchUpdatePreferences Write quicksight:CancelIngestion Write quicksight:CreateAccountCustomization Write quicksight:CreateAccountSubscription Write

View all quicksight actions →