This will setup Amazon QuickSight, so that users in the Cost Optimization Account can create analysis’ and dashboards.
Log into the console in the Cost Optimization account as an IAM user with the required permissions, go to the Amazon QuickSight console:
If you havent used QuickSight before click on Sign up for QuickSight, otherwise skip this step and proceed to Setup QuickSight IAM Policy below:
Select the Standard edition, and click Continue:
Select the region which should be the same as your CUR file source, Enter your QuickSight account name, Notification email address, select Amazon Athena and click Choose S3 buckets:
Select S3 Buckets You Can Access Across AWS, under Use a different bucket enter the CUR bucket name, click Add S3 bucket and click Finish:
Go to the IAM Dashboard
Click Policies and search for the AWSQuickSightS3Policy, click on the AWSQuickSightS3Policy policy:
Click Edit policy,
We will add the s3 resource arn:aws:s3:::cost* below the existing s3 bucket. This will allow QuickSight to access any S3 bucket starting with cost, so Cost Optimization users can easily create new datasets without requiring additional QuickSight privileges. Click Review policy:
Click Save changes:
Congratulations - QuickSight is now setup for your users. The Cost Optimization team can self manage QuickSight, and access to data sets in S3 with the correct bucket name.