X
Lab complete!
Now that you have completed this lab, make sure to update your Well-Architected review if you have implemented these changes in your workload.
Click here to access the Well-Architected Tool
Setup Amazon QuickSight
This will setup Amazon QuickSight, so that users in the Cost Optimization Account can create analysis' and dashboards.
Setup QuickSight for the first time
Log into the console in the Cost Optimization account as an IAM user with the required permissions, go to the Amazon QuickSight console:
If you havent used QuickSight before click on Sign up for QuickSight, otherwise skip this step and proceed to Setup QuickSight IAM Policy below:
Select the Standard edition, and click Continue:
Select the region which should be the same as your CUR file source, Enter your QuickSight account name, Notification email address, select Amazon Athena and click Choose S3 buckets:
Select S3 Buckets You Can Access Across AWS, under Use a different bucket enter the CUR bucket name, click Add S3 bucket and click Finish:
Click Finish:
Setup QuickSight IAM Policy
Go to the IAM Dashboard
Click Policies and select Create Policy:
Go to JSON Editor. We will add the s3 resource arn:aws:s3:::cost* below the existing s3 bucket. This will allow QuickSight to access any S3 bucket starting with cost, so Cost Optimization users can easily create new datasets without requiring additional QuickSight privileges. Copy the policy given below into JSON editor and Click Next:
Name your policy to AWSQuickSightS3Policy, add Description and click Create Policy:
Click AWSQuickSightS3Policy policy to attach it to QuickSight role:
Go to Policy Usage tab and click Attach:
Select AWS QuickSight Service role and click Attach Policy:
Congratulations - QuickSight is now setup for your users. The Cost Optimization team can self manage QuickSight, and access to data sets in S3 with the correct bucket name.