Amazon Quick Sight Resource ARNs - Amazon Quick Sight
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Quick Sight Resource ARNs

The following resource types are defined by Amazon Quick Sight: user, group, dashboard, and topic. These are used in Amazon Quick Sight API calls and as elements of IAM permission statements. To find up-to-date information for Amazon Quick Sight (service prefix: quicksight) resources, actions, and condition context keys for use in IAM permission policies, see Actions, Resources, and Condition Keys for Amazon Quick Sight in the IAM User Guide.

Resource Type ARN Format Condition Keys
user arn:${Partition}:quicksight:${Region}:${Account}:user/${ResourceId} N/A
group arn:${Partition}:quicksight:${Region}:${Account}:group/${ResourceId} N/A
dashboard arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${ResourceId} N/A
topic arn:${Partition}:quicksight:${Region}:${Account}:topic/${ResourceId} N/A
analysis arn:${Partition}:quicksight:${Region}:${Account}:analysis/${ResourceId} N/A
template arn:${Partition}:quicksight:${Region}:${Account}:template/${ResourceId} N/A
theme arn:${Partition}:quicksight:${Region}:${Account}:theme/${ResourceId} N/A

Resource ARNs are constructed from the segments that describe your resource. For example, a resource ARN for an analysis consists of the following segments. 

arn:<partition>:quicksight:<aws-region>:<aws-account-id>:<resource-type>/<resource-id>

The segments are defined as follows:

  • partition – For example, aws or aws-cn.

  • aws-region – The Amazon Web Services Region that contains the resource.

  • aws-account-id – The Amazon Web Services account that contains the resource. This excludes the hyphens.

  • resource-type – The type of resource. For this example, this is analyses. For a dashboard, it is dashboard.

  • resource-id – The unique identifier for a specific resource.

The Amazon Web Services Region, resource type, and resource ID are identified in the URL of the resource when you are using the Amazon Quick Sight console. For example, let's say this is the URL of the analysis you want an ARN for.

https://us-east-2.quicksight.aws.amazon.com/sn/analysis/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111

The Amazon Web Services Region is us-east-2. The resource-type is analysis. The resource ID in this URL is a1b2c3d4-5678-90ab-cdef-EXAMPLE11111. If your account number is 111122223333, then the ARN for this analysis is as follows.

arn:aws:quicksight:us-east-2:111122223333:analysis/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111

To get your Amazon Web Services account number, contact your system administrator.

To get the dataset ID

  1. Navigate to the desired dataset page. You will be able to find the ID in the url. For example, https://us-east-1.quicksight.aws.amazon.com/sn/data-sets/085fb6a4-c606-4949-b1ee-52cffadac462/. The dataset ID in this instance would be 085fb6a4-c606-4949-b1ee-52cffadac462.

  2. Alternatively, you can use an API call to find the dataset ID.

    aws quicksight list-data-sets --aws-account-id your-aws-account-id

    You will see the dataset ID in the result, for example:

    "DataSetId": "a165d37b-c071-4648-8039-e4db5e5f7f08"

To get the data source ID

  • Use an API call to find the data source ID.

    aws quicksight list-data-sources --aws-account-id your-aws-account-id

    You will see the data source ID in the result, for example:

    "DataSourceId": "1491fa60-1f19-4c0f-9f56-c72413a24986"