Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon QuickSight

Amazon QuickSight (service prefix: quicksight) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon QuickSight
Actions defined by Amazon QuickSight
Permission-only actions for Amazon QuickSight
Resource types defined by Amazon QuickSight
Condition keys for Amazon QuickSight

API operations defined by Amazon QuickSight

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
BatchCreateTopicReviewedAnswer	quicksight:BatchCreateTopicReviewedAnswer			Write
BatchDeleteKnowledgeBase	quicksight:BatchDeleteKnowledgeBase			Write
BatchDeleteKnowledgeBase	quicksight:DeleteKnowledgeBase			Write
BatchDeleteTopicReviewedAnswer	quicksight:BatchDeleteTopicReviewedAnswer			Write
CancelIngestion	quicksight:CancelIngestion			Write
CreateAccountCustomization	quicksight:CreateAccountCustomization			Write
CreateAccountCustomization	quicksight:TagResource			Tagging, Write
CreateAccountSubscription	quicksight:CreateAccountSubscription			Write
	quicksight:Subscribe			Write
	quicksight:TagResource			Tagging, Write
CreateActionConnector	quicksight:CreateActionConnector			Write
	quicksight:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	quicksight.amazonaws.com	Write
CreateAgent	quicksight:CreateAgent			Write
CreateAnalysis	quicksight:CreateAnalysis			Write
	quicksight:CreateFolderMembership			Write
	quicksight:DescribeTemplate			Read
	quicksight:DescribeTheme			Read
	quicksight:PassDataSet			Read
	quicksight:TagResource			Tagging, Write
CreateBrand	quicksight:CreateBrand			Write
CreateBrand	quicksight:TagResource			Tagging, Write
CreateCustomPermissions	quicksight:CreateCustomPermissions			Write
CreateCustomPermissions	quicksight:TagResource			Tagging, Write
CreateDashboard	quicksight:CreateDashboard			Write
	quicksight:CreateFolderMembership			Write
	quicksight:DescribeTemplate			Read
	quicksight:DescribeTheme			Read
	quicksight:PassDataSet			Read
	quicksight:TagResource			Tagging, Write
CreateDataSet	quicksight:CreateDataSet			Write
	quicksight:CreateFolderMembership			Write
	quicksight:PassDataSet			Read
	quicksight:PassDataSource			Read
	quicksight:TagResource			Tagging, Write
CreateDataSource	quicksight:CreateDataSource			Write
	quicksight:CreateFolderMembership			Write
	quicksight:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	quicksight.amazonaws.com	Write
CreateFlow	quicksight:CreateFlow			Write
CreateFlow	quicksight:TagResource			Tagging, Write
CreateFolder	quicksight:CreateFolder			Write
CreateFolder	quicksight:TagResource			Tagging, Write
CreateFolderMembership	quicksight:CreateFolderMembership			Write
	quicksight:UpdateAnalysisPermissions			Permissions management, Write
	quicksight:UpdateDashboardPermissions			Permissions management, Write
	quicksight:UpdateDataSetPermissions			Permissions management, Write
	quicksight:UpdateDataSourcePermissions			Permissions management, Write
	quicksight:UpdateTopicPermissions			Permissions management, Write
CreateGroup	quicksight:CreateGroup			Write
CreateGroupMembership	quicksight:CreateGroupMembership			Write
CreateIAMPolicyAssignment	quicksight:CreateIAMPolicyAssignment			Write
CreateIngestion	quicksight:CreateIngestion			Write
CreateNamespace	quicksight:CreateNamespace			Write
CreateNamespace	quicksight:TagResource			Tagging, Write
CreateOAuthClientApplication	quicksight:CreateDataSource			Write
	quicksight:CreateOAuthClientApplication			Write
	quicksight:TagResource			Tagging, Write
CreateRefreshSchedule	quicksight:CreateRefreshSchedule			Write
CreateRoleMembership	quicksight:CreateRoleMembership			Write
CreateRoleMembership	quicksight:SetGroupMapping			Write
CreateSpace	quicksight:CreateSpace			Write
CreateTemplate	quicksight:CreateTemplate			Write
	quicksight:DescribeAnalysis			Read
	quicksight:DescribeTemplate			Read
	quicksight:TagResource			Tagging, Write
CreateTemplateAlias	quicksight:CreateTemplateAlias			Write
CreateTheme	quicksight:CreateTheme			Write
CreateTheme	quicksight:TagResource			Tagging, Write
CreateThemeAlias	quicksight:CreateThemeAlias			Write
CreateTopic	quicksight:CreateFolderMembership			Write
	quicksight:CreateTopic			Write
	quicksight:PassDataSet			Read
	quicksight:TagResource			Tagging, Write
CreateTopicRefreshSchedule	quicksight:CreateTopicRefreshSchedule			Write
CreateVPCConnection	quicksight:CreateVPCConnection			Write
	quicksight:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	quicksight.amazonaws.com	Write
DeleteAccountCustomPermission	quicksight:DeleteAccountCustomPermission			Write
DeleteAccountCustomization	quicksight:DeleteAccountCustomization			Write
DeleteAccountSubscription	quicksight:DeleteAccountSubscription			Write
DeleteAccountSubscription	quicksight:Unsubscribe			Write
DeleteActionConnector	quicksight:DeleteActionConnector			Write
DeleteAgent	quicksight:DeleteAgent			Write
DeleteAnalysis	quicksight:DeleteAnalysis			Write
DeleteBrand	quicksight:DeleteBrand			Write
DeleteBrandAssignment	quicksight:DeleteBrandAssignment			Write
DeleteCustomPermissions	quicksight:DeleteCustomPermissions			Write
DeleteDashboard	quicksight:DeleteDashboard			Write
DeleteDataSet	quicksight:DeleteDataSet			Write
DeleteDataSetRefreshProperties	quicksight:DeleteDataSetRefreshProperties			Write
DeleteDataSource	quicksight:DeleteDataSource			Write
DeleteDefaultQBusinessApplication	quicksight:DeleteDefaultQBusinessApplication			Write
DeleteFlow	quicksight:DeleteFlow			Write
DeleteFolder	quicksight:DeleteFolder			Write
DeleteFolderMembership	quicksight:DeleteFolderMembership			Write
	quicksight:UpdateAnalysisPermissions			Permissions management, Write
	quicksight:UpdateDashboardPermissions			Permissions management, Write
	quicksight:UpdateDataSetPermissions			Permissions management, Write
	quicksight:UpdateDataSourcePermissions			Permissions management, Write
	quicksight:UpdateTopicPermissions			Permissions management, Write
DeleteGroup	quicksight:DeleteGroup			Write
DeleteGroupMembership	quicksight:DeleteGroupMembership			Write
DeleteIAMPolicyAssignment	quicksight:DeleteIAMPolicyAssignment			Write
DeleteIdentityPropagationConfig	quicksight:DeleteIdentityPropagationConfig			Write
DeleteKnowledgeBase	quicksight:DeleteKnowledgeBase			Write
DeleteNamespace	quicksight:DeleteNamespace			Write
DeleteOAuthClientApplication	quicksight:DeleteDataSource			Write
DeleteOAuthClientApplication	quicksight:DeleteOAuthClientApplication			Write
DeleteRefreshSchedule	quicksight:DeleteRefreshSchedule			Write
DeleteRoleCustomPermission	quicksight:DeleteRoleCustomPermission			Write
DeleteRoleMembership	quicksight:DeleteRoleMembership			Write
DeleteRoleMembership	quicksight:SetGroupMapping			Write
DeleteSpace	quicksight:DeleteSpace			Write
DeleteTemplate	quicksight:DeleteTemplate			Write
DeleteTemplateAlias	quicksight:DeleteTemplateAlias			Write
DeleteTheme	quicksight:DeleteTheme			Write
DeleteThemeAlias	quicksight:DeleteThemeAlias			Write
DeleteTopic	quicksight:DeleteTopic			Write
DeleteTopicRefreshSchedule	quicksight:DeleteTopicRefreshSchedule			Write
DeleteUser	quicksight:DeleteUser			Write
DeleteUserByPrincipalId	quicksight:DeleteUserByPrincipalId			Write
DeleteUserCustomPermission	quicksight:DeleteUserCustomPermission			Write
DeleteUserCustomPermission	quicksight:UpdateUser			Write
DeleteVPCConnection	quicksight:DeleteVPCConnection			Write
DeleteVPCConnection	iam:PassRole	iam:PassedToService	quicksight.amazonaws.com	Write
DescribeAccountCustomPermission	quicksight:DescribeAccountCustomPermission			Read
DescribeAccountCustomization	quicksight:DescribeAccountCustomization			Read
DescribeAccountSettings	quicksight:DescribeAccountSettings			Read
DescribeAccountSubscription	quicksight:DescribeAccountSubscription			Read
DescribeActionConnector	quicksight:DescribeActionConnector			Read
DescribeActionConnectorPermissions	quicksight:DescribeActionConnectorPermissions			Read
DescribeAgent	quicksight:DescribeAgent			Read
DescribeAgentPermissions	quicksight:DescribeAgentPermissions			Read
DescribeAnalysis	quicksight:DescribeAnalysis			Read
DescribeAnalysisDefinition	quicksight:DescribeAnalysis			Read
DescribeAnalysisPermissions	quicksight:DescribeAnalysisPermissions			Read
DescribeAssetBundleExportJob	quicksight:DescribeAssetBundleExportJob			Read
DescribeAssetBundleImportJob	quicksight:DescribeAssetBundleImportJob			Read
DescribeAutomationJob	quicksight:DescribeAutomationJob			Read
DescribeBrand	quicksight:DescribeBrand			Read
DescribeBrandAssignment	quicksight:DescribeBrandAssignment			Read
DescribeBrandPublishedVersion	quicksight:DescribeBrandPublishedVersion			Read
DescribeCustomPermissions	quicksight:DescribeCustomPermissions			Read
DescribeDashboard	quicksight:DescribeDashboard			Read
DescribeDashboardDefinition	quicksight:DescribeDashboard			Read
DescribeDashboardPermissions	quicksight:DescribeDashboardPermissions			Read
DescribeDashboardSnapshotJob	quicksight:DescribeDashboardSnapshotJob			Read
DescribeDashboardSnapshotJobResult	quicksight:DescribeDashboardSnapshotJobResult			Read
DescribeDashboardsQAConfiguration	quicksight:DescribeDashboardsQAConfiguration			Read
DescribeDataSet	quicksight:DescribeDataSet			Read
DescribeDataSetPermissions	quicksight:DescribeDataSetPermissions			Read
DescribeDataSetRefreshProperties	quicksight:DescribeDataSetRefreshProperties			Read
DescribeDataSource	quicksight:DescribeDataSource			Read
DescribeDataSourcePermissions	quicksight:DescribeDataSourcePermissions			Read
DescribeDefaultQBusinessApplication	quicksight:DescribeDefaultQBusinessApplication			Read
DescribeFlow	quicksight:DescribeFlow			Read
DescribeFolder	quicksight:DescribeFolder			Read
DescribeFolderPermissions	quicksight:DescribeFolderPermissions			Read
DescribeFolderResolvedPermissions	quicksight:DescribeFolderResolvedPermissions			Read
DescribeGroup	quicksight:DescribeGroup			Read
DescribeGroupMembership	quicksight:DescribeGroupMembership			Read
DescribeIAMPolicyAssignment	quicksight:DescribeIAMPolicyAssignment			Read
DescribeIngestion	quicksight:DescribeIngestion			Read
DescribeIpRestriction	quicksight:DescribeIpRestriction			Read
DescribeKeyRegistration	quicksight:DescribeKeyRegistration			Read
DescribeKeyRegistration	quicksight:ListCustomerManagedKeys			List
DescribeKnowledgeBase	quicksight:DescribeKnowledgeBase			Read
DescribeKnowledgeBasePermissions	quicksight:DescribeKnowledgeBasePermissions			Permissions management, Write
DescribeNamespace	quicksight:DescribeNamespace			Read
DescribeOAuthClientApplication	quicksight:DescribeDataSource			Read
DescribeOAuthClientApplication	quicksight:DescribeOAuthClientApplication			Read
DescribeQPersonalizationConfiguration	quicksight:DescribeQPersonalizationConfiguration			Read
DescribeQuickSightQSearchConfiguration	quicksight:DescribeQuickSightQSearchConfiguration			Read
DescribeRefreshSchedule	quicksight:DescribeRefreshSchedule			Read
DescribeRoleCustomPermission	quicksight:DescribeRoleCustomPermission			Read
DescribeSelfUpgradeConfiguration	quicksight:DescribeSelfUpgradeConfiguration			Read
DescribeSpace	quicksight:DescribeSpace			Read
DescribeSpacePermissions	quicksight:DescribeSpacePermissions			Permissions management, Write
DescribeTemplate	quicksight:DescribeTemplate			Read
DescribeTemplateAlias	quicksight:DescribeTemplateAlias			Read
DescribeTemplateDefinition	quicksight:DescribeTemplate			Read
DescribeTemplatePermissions	quicksight:DescribeTemplatePermissions			Read
DescribeTheme	quicksight:DescribeTheme			Read
DescribeThemeAlias	quicksight:DescribeThemeAlias			Read
DescribeThemePermissions	quicksight:DescribeThemePermissions			Read
DescribeTopic	quicksight:DescribeTopic			Read
DescribeTopicPermissions	quicksight:DescribeTopicPermissions			Permissions management, Write
DescribeTopicRefresh	quicksight:DescribeTopicRefresh			Read
DescribeTopicRefreshSchedule	quicksight:DescribeTopicRefreshSchedule			Read
DescribeUser	quicksight:DescribeUser			Read
DescribeVPCConnection	quicksight:DescribeVPCConnection			Read
GenerateEmbedUrlForAnonymousUser	quicksight:GenerateEmbedUrlForAnonymousUser			Write
GenerateEmbedUrlForRegisteredUser	quicksight:GenerateEmbedUrlForRegisteredUser			Write
GenerateEmbedUrlForRegisteredUserWithIdentity	quicksight:GenerateEmbedUrlForRegisteredUserWithIdentity			Write
GetDashboardEmbedUrl	quicksight:GetAnonymousUserEmbedUrl			Read
	quicksight:GetAuthCode			Read
	quicksight:GetDashboardEmbedUrl			Read
GetFlowMetadata	quicksight:GetFlowMetadata			Read
GetFlowPermissions	quicksight:GetFlowPermissions			Read
GetIdentityContext	quicksight:GetIdentityContext			Read
GetSessionEmbedUrl	quicksight:GetAuthCode			Read
GetSessionEmbedUrl	quicksight:GetSessionEmbedUrl			Read
ListActionConnectors	quicksight:ListActionConnectors			List
ListAgents	quicksight:ListAgents			List
ListAnalyses	quicksight:ListAnalyses			List
ListAssetBundleExportJobs	quicksight:ListAssetBundleExportJobs			List
ListAssetBundleImportJobs	quicksight:ListAssetBundleImportJobs			List
ListBrands	quicksight:ListBrands			List
ListCustomPermissions	quicksight:ListCustomPermissions			List
ListDashboardVersions	quicksight:ListDashboardVersions			List
ListDashboards	quicksight:ListDashboards			List
ListDataSets	quicksight:ListDataSets			List
ListDataSources	quicksight:ListDataSources			List
ListFlows	quicksight:ListFlows			List
ListFolderMembers	quicksight:ListFolderMembers			Read
ListFolders	quicksight:ListFolders			List
ListFoldersForResource	quicksight:ListFoldersForResource			List
ListGroupMemberships	quicksight:ListGroupMemberships			List
ListGroups	quicksight:ListGroups			List
ListIAMPolicyAssignments	quicksight:ListIAMPolicyAssignments			List
ListIAMPolicyAssignmentsForUser	quicksight:ListIAMPolicyAssignmentsForUser			List
ListIdentityPropagationConfigs	quicksight:ListIdentityPropagationConfigs			List
ListIngestions	quicksight:ListIngestions			List
ListKnowledgeBases	quicksight:ListKnowledgeBases			List
ListNamespaces	quicksight:ListNamespaces			List
ListOAuthClientApplications	quicksight:ListDataSources			List
ListOAuthClientApplications	quicksight:ListOAuthClientApplications			List
ListRefreshSchedules	quicksight:ListRefreshSchedules			List
ListRoleMemberships	quicksight:GetGroupMapping			Read
ListRoleMemberships	quicksight:ListRoleMemberships			List
ListSelfUpgrades	quicksight:ListSelfUpgrades			List
ListSpaceResources	quicksight:ListSpaceResources			List
ListSpaces	quicksight:ListSpaces			List
ListTagsForResource	quicksight:ListTagsForResource			Read
ListTemplateAliases	quicksight:ListTemplateAliases			List
ListTemplateVersions	quicksight:ListTemplateVersions			List
ListTemplates	quicksight:ListTemplates			List
ListThemeAliases	quicksight:ListThemeAliases			List
ListThemeVersions	quicksight:ListThemeVersions			List
ListThemes	quicksight:ListThemes			List
ListTopicRefreshSchedules	quicksight:ListTopicRefreshSchedules			List
ListTopicReviewedAnswers	quicksight:ListTopicReviewedAnswers			List
ListTopics	quicksight:ListTopics			List
ListUserGroups	quicksight:ListUserGroups			List
ListUsers	quicksight:ListUsers			List
ListUsersIndexCapacity	quicksight:ListUsersIndexCapacity			List
ListVPCConnections	quicksight:ListVPCConnections			List
PredictQAResults	quicksight:PredictQAResults			Read
PutDataSetRefreshProperties	quicksight:PutDataSetRefreshProperties			Write
RegisterUser	quicksight:RegisterUser			Write
RegisterUser	quicksight:TagResource			Tagging, Write
RestoreAnalysis	quicksight:CreateFolderMembership			Write
	quicksight:ListFoldersForResource			List
	quicksight:RestoreAnalysis			Write
SearchActionConnectors	quicksight:SearchActionConnectors			List
SearchAgents	quicksight:SearchAgents			List
SearchAnalyses	quicksight:SearchAnalyses			List
SearchDashboards	quicksight:SearchDashboards			List
SearchDataSets	quicksight:SearchDataSets			List
SearchDataSources	quicksight:SearchDataSources			List
SearchFlows	quicksight:SearchFlows			List
SearchFolders	quicksight:SearchFolders			Read
SearchGroups	quicksight:SearchGroups			List
SearchKnowledgeBases	quicksight:SearchKnowledgeBases			List
SearchSpaces	quicksight:SearchSpaces			List
SearchTopics	quicksight:SearchTopics			List
StartAssetBundleExportJob	quicksight:StartAssetBundleExportJob			Write
StartAssetBundleImportJob	quicksight:StartAssetBundleImportJob			Write
StartAutomationJob	quicksight:StartAutomationJob			Write
StartDashboardSnapshotJob	quicksight:StartDashboardSnapshotJob			Write
StartDashboardSnapshotJobSchedule	quicksight:StartDashboardSnapshotJobSchedule			Write
TagResource	quicksight:TagResource			Tagging, Write
UntagResource	quicksight:UntagResource			Tagging, Write
UpdateAccountCustomPermission	quicksight:UpdateAccountCustomPermission			Write
UpdateAccountCustomization	quicksight:UpdateAccountCustomization			Write
UpdateAccountSettings	quicksight:UpdateAccountSettings			Write
UpdateActionConnector	quicksight:UpdateActionConnector			Write
UpdateActionConnectorPermissions	quicksight:UpdateActionConnectorPermissions			Permissions management, Write
UpdateAgent	quicksight:UpdateAgent			Write
UpdateAgentPermissions	quicksight:UpdateAgentPermissions			Permissions management, Write
UpdateAnalysis	quicksight:DescribeTemplate			Read
	quicksight:DescribeTheme			Read
	quicksight:PassDataSet			Read
	quicksight:UpdateAnalysis			Write
UpdateAnalysisPermissions	quicksight:UpdateAnalysisPermissions			Permissions management, Write
UpdateApplicationWithTokenExchangeGrant	quicksight:UpdateApplicationWithTokenExchangeGrant			Write
UpdateBrand	quicksight:UpdateBrand			Write
UpdateBrandAssignment	quicksight:UpdateBrandAssignment			Write
UpdateBrandPublishedVersion	quicksight:UpdateBrandPublishedVersion			Write
UpdateCustomPermissions	quicksight:UpdateCustomPermissions			Write
UpdateDashboard	quicksight:DescribeTemplate			Read
	quicksight:DescribeTheme			Read
	quicksight:PassDataSet			Read
	quicksight:UpdateDashboard			Write
UpdateDashboardLinks	quicksight:UpdateDashboardLinks			Write
UpdateDashboardPermissions	quicksight:UpdateDashboardPermissions			Permissions management, Write
UpdateDashboardPublishedVersion	quicksight:UpdateDashboardPublishedVersion			Write
UpdateDashboardsQAConfiguration	quicksight:UpdateDashboardsQAConfiguration			Write
UpdateDataSet	quicksight:PassDataSet			Read
	quicksight:PassDataSource			Read
	quicksight:UpdateDataSet			Write
UpdateDataSetPermissions	quicksight:UpdateDataSetPermissions			Permissions management, Write
UpdateDataSource	quicksight:UpdateDataSource			Write
UpdateDataSource	iam:PassRole	iam:PassedToService	quicksight.amazonaws.com	Write
UpdateDataSourcePermissions	quicksight:UpdateDataSourcePermissions			Permissions management, Write
UpdateDefaultQBusinessApplication	quicksight:UpdateDefaultQBusinessApplication			Write
UpdateFlow	quicksight:UpdateFlow			Write
UpdateFlowPermissions	quicksight:UpdateFlowPermissions			Permissions management, Write
UpdateFolder	quicksight:UpdateFolder			Write
UpdateFolderPermissions	quicksight:UpdateFolderPermissions			Permissions management, Write
UpdateGroup	quicksight:UpdateGroup			Write
UpdateIAMPolicyAssignment	quicksight:UpdateIAMPolicyAssignment			Write
UpdateIdentityPropagationConfig	quicksight:UpdateIdentityPropagationConfig			Write
UpdateIpRestriction	quicksight:UpdateIpRestriction			Write
UpdateKeyRegistration	quicksight:RegisterCustomerManagedKey			Write
	quicksight:RemoveCustomerManagedKey			Write
	quicksight:UpdateKeyRegistration			Write
UpdateKnowledgeBasePermissions	quicksight:UpdateKnowledgeBasePermissions			Permissions management, Write
UpdateOAuthClientApplication	quicksight:UpdateDataSource			Write
UpdateOAuthClientApplication	quicksight:UpdateOAuthClientApplication			Write
UpdatePublicSharingSettings	quicksight:UpdatePublicSharingSettings			Write
UpdateQPersonalizationConfiguration	quicksight:UpdateQPersonalizationConfiguration			Write
UpdateQuickSightQSearchConfiguration	quicksight:UpdateQuickSightQSearchConfiguration			Write
UpdateRefreshSchedule	quicksight:UpdateRefreshSchedule			Write
UpdateRoleCustomPermission	quicksight:UpdateRoleCustomPermission			Write
UpdateSPICECapacityConfiguration	quicksight:UpdateSPICECapacityConfiguration			Write
UpdateSelfUpgrade	quicksight:UpdateSelfUpgrade			Write
UpdateSelfUpgradeConfiguration	quicksight:UpdateSelfUpgradeConfiguration			Write
UpdateSpace	quicksight:UpdateSpace			Write
UpdateSpacePermissions	quicksight:UpdateSpacePermissions			Permissions management, Write
UpdateSpaceResources	quicksight:UpdateSpaceResources			Write
UpdateTemplate	quicksight:DescribeAnalysis			Read
	quicksight:DescribeTemplate			Read
	quicksight:UpdateTemplate			Write
UpdateTemplateAlias	quicksight:UpdateTemplateAlias			Write
UpdateTemplatePermissions	quicksight:UpdateTemplatePermissions			Permissions management, Write
UpdateTheme	quicksight:UpdateTheme			Write
UpdateThemeAlias	quicksight:UpdateThemeAlias			Write
UpdateThemePermissions	quicksight:UpdateThemePermissions			Permissions management, Write
UpdateTopic	quicksight:PassDataSet			Read
UpdateTopic	quicksight:UpdateTopic			Write
UpdateTopicPermissions	quicksight:UpdateTopicPermissions			Permissions management, Write
UpdateTopicRefreshSchedule	quicksight:UpdateTopicRefreshSchedule			Write
UpdateUser	quicksight:UpdateUser			Write
UpdateUserCustomPermission	quicksight:UpdateUser			Write
UpdateUserCustomPermission	quicksight:UpdateUserCustomPermission			Write
UpdateVPCConnection	quicksight:UpdateVPCConnection			Write
UpdateVPCConnection	iam:PassRole	iam:PassedToService	quicksight.amazonaws.com	Write

Actions defined by Amazon QuickSight

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchAssignLimitsProfile	Grants permission to assign a limits profile to targets	limitsProfile*	aws:ResourceTag/${TagKey}	Write
BatchCreateTopicReviewedAnswer	Grants permission to create reviewed answers for a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
BatchDeleteKnowledgeBase	Grants permission to delete one or more knowledge bases	knowledgeBase*	aws:ResourceTag/${TagKey}	Write
BatchDeleteTopicReviewedAnswer	Grants permission to delete reviewed answers for a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
BatchUnassignLimitsProfile	Grants permission to unassign a limits profile from targets	limitsProfile*	aws:ResourceTag/${TagKey}	Write
CancelIngestion	Grants permission to cancel a SPICE ingestions on a dataset	ingestion*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateAccountCustomization	Grants permission to create an account customization for QuickSight account or namespace		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateAccountSubscription	Grants permission to subscribe to QuickSight		quicksight:DirectoryType quicksight:Edition	Write
CreateActionConnector	Grants permission to create an action connector	actionconnector*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateAgent	Grants permission to create an agent	agent*		Write
CreateAnalysis	Grants permission to create an analysis from a template	analysis*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateBrand	Grants permission to create an Amazon QuickSight brand	brand*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateCustomPermissions	Grants permission to create a QuickSight custom permissions resource	custompermissions*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDashboard	Grants permission to create a QuickSight Dashboard	dashboard*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDataSet	Grants permission to create a dataset	datasource*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateDataSource	Grants permission to create a data source		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateFlow	Grants permission to create a flow	flow*	aws:ResourceTag/${TagKey}	Write
CreateFolder	Grants permission to create a QuickSight folder	folder*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateFolderMembership	Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder	analysis	aws:ResourceTag/${TagKey}	Write
		dashboard	aws:ResourceTag/${TagKey}
		dataset	aws:ResourceTag/${TagKey}
		folder*	aws:ResourceTag/${TagKey}
CreateGroup	Grants permission to create a QuickSight group	group*		Write
CreateGroupMembership	Grants permission to add a QuickSight user to a QuickSight group	group*	aws:RequestTag/${TagKey} aws:TagKeys quicksight:UserName	Write
CreateIAMPolicyAssignment	Grants permission to create an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight	assignment*		Write
CreateIngestion	Grants permission to start a SPICE ingestion on a dataset	ingestion*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateLimitsProfile	Grants permission to create a limits profile	limitsProfile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateNamespace	Grants permission to create an QuickSight namespace	namespace*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateOAuthClientApplication	Grants permission to create an OAuth client application		aws:RequestTag/${TagKey} aws:TagKeys	Write
CreateRefreshSchedule	Grants permission to create a refresh schedule for a dataset	refreshschedule*		Write
CreateRoleMembership	Grants permission to add a group member to a role		quicksight:Group	Write
CreateSpace	Grants permission to create a space	space*		Write
CreateTemplate	Grants permission to create a template	template*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateTemplateAlias	Grants permission to create a template alias	template*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateTheme	Grants permission to create a theme	theme*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateThemeAlias	Grants permission to create an alias for a theme version	theme*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateTopic	Grants permission to create a topic	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateTopicRefreshSchedule	Grants permission to create a refresh schedule for a topic	topic*	aws:ResourceTag/${TagKey}	Write
CreateVPCConnection	Grants permission to create a vpc connection		aws:RequestTag/${TagKey} aws:TagKeys	Write
DeleteAccountCustomPermission	Grants permission to remove the custom permission associated with an account			Write
DeleteAccountCustomization	Grants permission to delete an account customization for QuickSight account or namespace	customization*	aws:ResourceTag/${TagKey}	Write
DeleteAccountSubscription	Grants permission to delete a QuickSight account	account*		Write
DeleteActionConnector	Grants permission to delete an action connector	actionconnector*	aws:ResourceTag/${TagKey}	Write
DeleteAgent	Grants permission to delete an agent	agent*		Write
DeleteAnalysis	Grants permission to delete an analysis	analysis*	aws:ResourceTag/${TagKey}	Write
DeleteBrand	Grants permission to delete an Amazon QuickSight brand	brand*	aws:ResourceTag/${TagKey}	Write
DeleteBrandAssignment	Grants permission to delete a brand assignment			Write
DeleteCustomPermissions	Grants permission to delete a QuickSight custom permissions resource			Write
DeleteDashboard	Grants permission to delete a QuickSight Dashboard	dashboard*	aws:ResourceTag/${TagKey}	Write
DeleteDataSet	Grants permission to delete a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteDataSetRefreshProperties	Grants permission to delete dataset refresh properties for a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
DeleteDataSource	Grants permission to delete a data source	datasource*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteDefaultQBusinessApplication	Grants permission to delete linked QBusiness application for QuickSight account			Write
DeleteFlow	Grants permission to delete a flow	flow*	aws:ResourceTag/${TagKey}	Write
DeleteFolder	Grants permission to delete a QuickSight Folder	folder*	aws:ResourceTag/${TagKey}	Write
DeleteFolderMembership	Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder	analysis	aws:ResourceTag/${TagKey}	Write
		dashboard	aws:ResourceTag/${TagKey}
		dataset	aws:ResourceTag/${TagKey}
		folder*	aws:ResourceTag/${TagKey}
DeleteGroup	Grants permission to remove a user group from QuickSight	group*		Write
DeleteGroupMembership	Grants permission to remove a user from a group so that he/she is no longer a member of the group	group*	quicksight:UserName	Write
DeleteIAMPolicyAssignment	Grants permission to update an existing assignment	assignment*		Write
DeleteIdentityPropagationConfig	Grants permission to remove Amazon services for trusted identity propagation in QuickSight			Write
DeleteKnowledgeBase	Grants permission to delete a knowledge base	knowledgeBase*	aws:ResourceTag/${TagKey}	Write
DeleteLimitsProfile	Grants permission to delete a limits profile	limitsProfile*	aws:ResourceTag/${TagKey}	Write
DeleteNamespace	Grants permission to delete a QuickSight namespace	namespace*	aws:ResourceTag/${TagKey}	Write
DeleteOAuthClientApplication	Grants permission to delete an OAuth client application	oauthClientApplication*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteRefreshSchedule	Grants permission to delete a refresh schedule for a dataset	refreshschedule*		Write
DeleteRoleCustomPermission	Grants permission to remove the custom permission associated with a role			Write
DeleteRoleMembership	Grants permission to remove a group member from a role		quicksight:Group	Write
DeleteSpace	Grants permission to delete a space	space*		Write
DeleteTemplate	Grants permission to delete a template	template*	aws:ResourceTag/${TagKey}	Write
DeleteTemplateAlias	Grants permission to delete a template alias	template*	aws:ResourceTag/${TagKey}	Write
DeleteTheme	Grants permission to delete a theme	theme*	aws:ResourceTag/${TagKey}	Write
DeleteThemeAlias	Grants permission to delete the alias of a theme	theme*	aws:ResourceTag/${TagKey}	Write
DeleteTopic	Grants permission to delete a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteTopicRefreshSchedule	Grants permission to delete a refresh schedule for a topic	topic*	aws:ResourceTag/${TagKey}	Write
DeleteUser	Grants permission to delete a QuickSight user, given the user name	user*	aws:ResourceTag/${TagKey}	Write
DeleteUserByPrincipalId	Grants permission to delete a user identified by its principal ID	user*	aws:ResourceTag/${TagKey}	Write
DeleteUserCustomPermission	Grants permission to remove the custom permission associated with a user	user*	aws:ResourceTag/${TagKey}	Write
DeleteVPCConnection	Grants permission to delete a vpc connection	vpcconnection*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DescribeAccountCustomPermission	Grants permission to describe the custom permission associated with an account			Read
DescribeAccountCustomization	Grants permission to describe an account customization for QuickSight account or namespace	customization*	aws:ResourceTag/${TagKey}	Read
DescribeAccountSettings	Grants permission to describe the administrative account settings for QuickSight account			Read
DescribeAccountSubscription	Grants permission to describe a QuickSight account	account*		Read
DescribeActionConnector	Grants permission to describe an action connector	actionconnector*	aws:ResourceTag/${TagKey}	Read
DescribeActionConnectorPermissions	Grants permission to describe permissions for an action connector	actionconnector*	aws:ResourceTag/${TagKey}	Read
DescribeAgent	Grants permission to describe an agent	agent*		Read
DescribeAgentPermissions	Grants permission to describe agent's permissions	agent*		Read
DescribeAnalysis	Grants permission to describe an analysis	analysis*	aws:ResourceTag/${TagKey}	Read
DescribeAnalysisPermissions	Grants permission to describe permissions for an analysis	analysis*	aws:ResourceTag/${TagKey}	Read
DescribeAssetBundleExportJob	Grants permission to describe an asset bundle export job	assetBundleExportJob*		Read
DescribeAssetBundleImportJob	Grants permission to describe an asset bundle import job	assetBundleImportJob*		Read
DescribeAutomationGroup	Grants permission to describe an automation group	automationGroup*		Read
DescribeAutomationGroupPermissions	Grants permission to describe permissions for an automation group	automationGroup*		Permissions management, Write
DescribeAutomationJob	Grants permission to describe an automation job	automationJob*		Read
DescribeBrand	Grants permission to describe a brand	brand*	aws:ResourceTag/${TagKey}	Read
DescribeBrandAssignment	Grants permission to describe a brand assignment			Read
DescribeBrandPublishedVersion	Grants permission to describes the published version of the brand	brand*	aws:ResourceTag/${TagKey}	Read
DescribeCustomPermissions	Grants permission to describe a custom permissions resource in a QuickSight account	custompermissions*	aws:ResourceTag/${TagKey}	Read
DescribeDashboard	Grants permission to describe a QuickSight Dashboard	dashboard*	aws:ResourceTag/${TagKey}	Read
DescribeDashboardPermissions	Grants permission to describe permissions for a QuickSight Dashboard	dashboard*	aws:ResourceTag/${TagKey}	Read
DescribeDashboardSnapshotJob	Grants permission to describe a dashboard snapshot job	dashboardSnapshotJob*	aws:ResourceTag/${TagKey}	Read
DescribeDashboardSnapshotJobResult	Grants permission to describe result of a dashboard snapshot job	dashboardSnapshotJob*	aws:ResourceTag/${TagKey}	Read
DescribeDashboardsQAConfiguration	Grants permission to describe dashboards qa configuration			Read
DescribeDataSet	Grants permission to describe a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeDataSetPermissions	Grants permission to describe the resource policy of a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeDataSetRefreshProperties	Grants permission to describe refresh properties for a dataset	dataset*	aws:ResourceTag/${TagKey}	Read
DescribeDataSource	Grants permission to describe a data source	datasource*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeDataSourcePermissions	Grants permission to describe the resource policy of a data source	datasource*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeDefaultQBusinessApplication	Grants permission to describe linked QBusiness application Id for QuickSight account			Read
DescribeFlow	Grants permission to describe a flow	flow*	aws:ResourceTag/${TagKey}	Read
DescribeFolder	Grants permission to describe a QuickSight Folder	folder*	aws:ResourceTag/${TagKey}	Read
DescribeFolderPermissions	Grants permission to describe permissions for a QuickSight Folder	folder*	aws:ResourceTag/${TagKey}	Read
DescribeFolderResolvedPermissions	Grants permission to describe resolved permissions for a QuickSight Folder	folder*	aws:ResourceTag/${TagKey}	Read
DescribeGroup	Grants permission to describe a QuickSight group	group*		Read
DescribeGroupMembership	Grants permission to describe a QuickSight group member	group*	quicksight:UserName	Read
DescribeIAMPolicyAssignment	Grants permission to describe an existing assignment	assignment*		Read
DescribeIngestion	Grants permission to describe a SPICE ingestion on a dataset	ingestion*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeIpRestriction	Grants permission to describe the IP restrictions for QuickSight account			Read
DescribeKeyRegistration	Grants permission to describe QuickSight key registration			Read
DescribeKnowledgeBase	Grants permission to describe a knowledge base	knowledgeBase*	aws:ResourceTag/${TagKey}	Read
DescribeKnowledgeBasePermissions	Grants permission to describe the resource policy of a knowledge base	knowledgeBase*	aws:ResourceTag/${TagKey}	Permissions management, Write
DescribeLimitsProfile	Grants permission to describe a limits profile	limitsProfile*	aws:ResourceTag/${TagKey}	Read
DescribeNamespace	Grants permission to describe a QuickSight namespace	namespace*	aws:ResourceTag/${TagKey}	Read
DescribeOAuthClientApplication	Grants permission to describe an OAuth client application	oauthClientApplication*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeQPersonalizationConfiguration	Grants permission to describe a personalization configuration			Read
DescribeQuickSightQSearchConfiguration	Grants permission to describe QuickSight Q Search configuration			Read
DescribeRefreshSchedule	Grants permission to describe a refresh schedule for a dataset	refreshschedule*		Read
DescribeRoleCustomPermission	Grants permission to describe the custom permission associated with a role			Read
DescribeSelfUpgradeConfiguration	Grants permission to describe the administrative self upgrade configuration associated with an account			Read
DescribeSpace	Grants permission to describe a space	space*		Read
DescribeSpacePermissions	Grants permission to describe permissions for a space	space*		Permissions management, Write
DescribeTemplate	Grants permission to describe a template	template*	aws:ResourceTag/${TagKey}	Read
DescribeTemplateAlias	Grants permission to describe a template alias	template*	aws:ResourceTag/${TagKey}	Read
DescribeTemplatePermissions	Grants permission to describe permissions for a template	template*	aws:ResourceTag/${TagKey}	Read
DescribeTheme	Grants permission to describe a theme	theme*	aws:ResourceTag/${TagKey}	Read
DescribeThemeAlias	Grants permission to describe a theme alias	theme*	aws:ResourceTag/${TagKey}	Read
DescribeThemePermissions	Grants permission to describe permissions for a theme	theme*	aws:ResourceTag/${TagKey}	Read
DescribeTopic	Grants permission to describe a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeTopicPermissions	Grants permission to describe the resource policy of a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Permissions management, Write
DescribeTopicRefresh	Grants permission to describe the refresh status of a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
DescribeTopicRefreshSchedule	Grants permission to describe a refresh schedule for a topic	topic*	aws:ResourceTag/${TagKey}	Read
DescribeUser	Grants permission to describe a QuickSight user given the user name	user*	aws:ResourceTag/${TagKey}	Read
DescribeVPCConnection	Grants permission to describe a vpc connection	vpcconnection*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
GenerateEmbedUrlForAnonymousUser	Grants permission to generate a URL used to embed a QuickSight Dashboard or Q Topic for a user not registered with QuickSight	dashboard	aws:ResourceTag/${TagKey} quicksight:AllowedEmbeddingDomains	Write
		namespace*	aws:ResourceTag/${TagKey} quicksight:AllowedEmbeddingDomains
		theme	aws:ResourceTag/${TagKey} quicksight:AllowedEmbeddingDomains
		topic	aws:ResourceTag/${TagKey} quicksight:AllowedEmbeddingDomains
GenerateEmbedUrlForRegisteredUser	Grants permission to generate a URL used to embed a QuickSight Dashboard for a user registered with QuickSight	user*	aws:ResourceTag/${TagKey} quicksight:AllowedEmbeddingDomains	Write
GenerateEmbedUrlForRegisteredUserWithIdentity	Grants permission to generate a URL used to embed a QuickSight Experience for a user registered with QuickSight using Identity-enhanced role session		quicksight:AllowedEmbeddingDomains	Write
GetDashboardEmbedUrl	Grants permission to get a URL used to embed a QuickSight Dashboard	dashboard*	aws:ResourceTag/${TagKey}	Read
GetFlowMetadata	Grants permission to get metadata for a flow	flow*	aws:ResourceTag/${TagKey}	Read
GetFlowPermissions	Grants permission to get permissions for a flow	flow*	aws:ResourceTag/${TagKey}	Read
GetIdentityContext	Grants permission to get identity context for a user	user*	aws:ResourceTag/${TagKey}	Read
GetSessionEmbedUrl	Grants permission to get a URL to embed QuickSight console experience			Read
ListActionConnectors	Grants permission to list action connectors			List
ListAgents	Grants permission to list agents	agent*		List
ListAnalyses	Grants permission to list all analyses in an account	analysis*	aws:ResourceTag/${TagKey}	List
ListAssetBundleExportJobs	Grants permission to list all asset bundle export jobs	assetBundleExportJob*		List
ListAssetBundleImportJobs	Grants permission to list all asset bundle import jobs	assetBundleImportJob*		List
ListAssignmentsForPrincipal	Grants permission to list limits profile assignments for a principal	limitsProfile*	aws:ResourceTag/${TagKey}	List
ListAutomationGroups	Grants permission to list all automation groups in an account			List
ListBrands	Grants permission to lists all brands in an Amazon QuickSight account			List
ListCustomPermissions	Grants permission to list custom permissions resources in QuickSight account			List
ListDashboardVersions	Grants permission to list all versions of a QuickSight Dashboard	dashboard*	aws:ResourceTag/${TagKey}	List
ListDashboards	Grants permission to list all Dashboards in a QuickSight Account	dashboard*	aws:ResourceTag/${TagKey}	List
ListDataSets	Grants permission to list all datasets		aws:RequestTag/${TagKey} aws:TagKeys	List
ListDataSources	Grants permission to list all data sources		aws:RequestTag/${TagKey} aws:TagKeys	List
ListFlows	Grants permission to list all flows in an Amazon QuickSight account			List
ListFolderMembers	Grants permission to list all members in a folder	folder*	aws:ResourceTag/${TagKey}	Read
ListFolders	Grants permission to list all Folders in a QuickSight Account	folder*	aws:ResourceTag/${TagKey}	List
ListFoldersForResource	Grants permission to list all Folders in which a QuickSight resource is a member	analysis	aws:ResourceTag/${TagKey}	List
		dashboard	aws:ResourceTag/${TagKey}
		dataset	aws:ResourceTag/${TagKey}
		datasource	aws:ResourceTag/${TagKey}
		topic	aws:ResourceTag/${TagKey}
ListGroupMemberships	Grants permission to list member users in a group	group*		List
ListGroups	Grants permission to list all user groups in QuickSight	group*		List
ListIAMPolicyAssignments	Grants permission to list all assignments in the current Amazon QuickSight account	assignment*		List
ListIAMPolicyAssignmentsForUser	Grants permission to list all assignments assigned to a user and the groups it belongs	assignment*		List
ListIdentityPropagationConfigs	Grants permission to list Amazon services enabled for trusted identity propagation in QuickSight			List
ListIngestions	Grants permission to list all SPICE ingestions on a dataset		aws:RequestTag/${TagKey} aws:TagKeys	List
ListKnowledgeBases	Grants permission to list all knowledge bases in an account			List
ListLimitsProfiles	Grants permission to list limits profiles	limitsProfile*	aws:ResourceTag/${TagKey}	List
ListNamespaces	Grants permission to lists all namespaces in a QuickSight account			List
ListOAuthClientApplications	Grants permission to list OAuth client applications in an account		aws:RequestTag/${TagKey} aws:TagKeys	List
ListProfileAssignments	Grants permission to list assignments for a limits profile	limitsProfile*	aws:ResourceTag/${TagKey}	List
ListRefreshSchedules	Grants permission to list all refresh schedules on a dataset			List
ListRoleMemberships	Grants permission to list the members of a role			List
ListSelfUpgrades	Grants permission to list all of the pending self upgrade requests associated with an account	user*	aws:ResourceTag/${TagKey}	List
ListSpaceResources	Grants permission to list resources in a space	space*		List
ListSpaces	Grants permission to list spaces			List
ListTagsForResource	Grants permission to list tags of a QuickSight resource	actionconnector	aws:ResourceTag/${TagKey}	Read
		analysis	aws:ResourceTag/${TagKey}
		brand	aws:ResourceTag/${TagKey}
		customization	aws:ResourceTag/${TagKey}
		custompermissions	aws:ResourceTag/${TagKey}
		dashboard	aws:ResourceTag/${TagKey}
		dataset	aws:ResourceTag/${TagKey}
		datasource	aws:ResourceTag/${TagKey}
		emailCustomizationTemplate	aws:ResourceTag/${TagKey}
		flow	aws:ResourceTag/${TagKey}
		folder	aws:ResourceTag/${TagKey}
		namespace	aws:ResourceTag/${TagKey}
		oauthClientApplication	aws:ResourceTag/${TagKey}
		template	aws:ResourceTag/${TagKey}
		theme	aws:ResourceTag/${TagKey}
		topic	aws:ResourceTag/${TagKey}
		user	aws:ResourceTag/${TagKey}
		vpcconnection	aws:ResourceTag/${TagKey}
ListTemplateAliases	Grants permission to list all aliases for a template	template*	aws:ResourceTag/${TagKey}	List
ListTemplateVersions	Grants permission to list all versions of a template	template*	aws:ResourceTag/${TagKey}	List
ListTemplates	Grants permission to list all templates in a QuickSight account	template*	aws:ResourceTag/${TagKey}	List
ListThemeAliases	Grants permission to list all aliases of a theme	theme*	aws:ResourceTag/${TagKey}	List
ListThemeVersions	Grants permission to list all versions of a theme	theme*	aws:ResourceTag/${TagKey}	List
ListThemes	Grants permission to list all themes in an account	theme*	aws:ResourceTag/${TagKey}	List
ListTopicRefreshSchedules	Grants permission to list all refresh schedules on a topic			List
ListTopicReviewedAnswers	Grants permission to list all reviewed answers for topic		aws:RequestTag/${TagKey} aws:TagKeys	List
ListTopics	Grants permission to list all topics		aws:RequestTag/${TagKey} aws:TagKeys	List
ListUserGroups	Grants permission to list groups that a given user is a member of	user*	aws:ResourceTag/${TagKey}	List
ListUsers	Grants permission to list all of the QuickSight users belonging to this account	user*	aws:ResourceTag/${TagKey}	List
ListVPCConnections	Grants permission to list all vpc connections		aws:RequestTag/${TagKey} aws:TagKeys	List
PredictQAResults	Grants permission to predict QA results	dashboard	aws:ResourceTag/${TagKey}	Read
PredictQAResults	Grants permission to predict QA results	topic	aws:ResourceTag/${TagKey}	Read
PutDataSetRefreshProperties	Grants permission to put dataset refresh properties for a dataset	dataset*	aws:ResourceTag/${TagKey}	Write
RegisterUser	Grants permission to create a QuickSight user, whose identity is associated with the IAM identity/role specified in the request	user*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys quicksight:IamArn quicksight:SessionName	Write
RestoreAnalysis	Grants permission to restore a deleted analysis	analysis*	aws:ResourceTag/${TagKey}	Write
SearchActionConnectors	Grants permission to search action connectors	actionconnector*	aws:ResourceTag/${TagKey}	List
SearchAgents	Grants permission to search agents	agent*		List
SearchAnalyses	Grants permission to search for a sub-set of analyses	analysis*	aws:ResourceTag/${TagKey}	List
SearchAutomationGroups	Grants permission to search for automation groups in an account			List
SearchDashboards	Grants permission to search for a sub-set of QuickSight Dashboards	dashboard*	aws:ResourceTag/${TagKey}	List
SearchDataSets	Grants permission to search for a sub-set of QuickSight DatSets	dataset*	aws:ResourceTag/${TagKey}	List
SearchDataSources	Grants permission to search for a sub-set of QuickSight Data Sources	datasource*	aws:ResourceTag/${TagKey}	List
SearchFlows	Grants permission to search flows in an Amazon QuickSight account			List
SearchFolders	Grants permission to search for a sub-set of QuickSight Folders	folder*	aws:ResourceTag/${TagKey}	Read
SearchGroups	Grants permission to search for a sub-set of QuickSight groups	group*		List
SearchKnowledgeBases	Grants permission to search for a sub-set of knowledge bases	knowledgeBase*	aws:ResourceTag/${TagKey}	List
SearchSpaces	Grants permission to search spaces			List
SearchTopics	Grants permission to search for a sub-set of topics	topic*	aws:ResourceTag/${TagKey}	List
StartAssetBundleExportJob	Grants permission to start an asset bundle export job	assetBundleExportJob*		Write
StartAssetBundleImportJob	Grants permission to start an asset bundle import job	assetBundleImportJob*		Write
StartAutomationJob	Grants permission to start an automation job	automation*		Write
StartDashboardSnapshotJob	Grants permission to start a dashboard snapshot job	dashboardSnapshotJob*	aws:ResourceTag/${TagKey}	Write
StartDashboardSnapshotJobSchedule	Grants permission to start a dashboard snapshot job schedule			Write
TagResource	Grants permission to add tags to a QuickSight resource	actionconnector	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		analysis	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		brand	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		customization	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		custompermissions	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		dashboard	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		dataset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		datasource	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		emailCustomizationTemplate	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		flow	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		folder	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		ingestion	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		namespace	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		oauthClientApplication	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		template	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		theme	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		topic	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		user	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
		vpcconnection	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
UntagResource	Grants permission to remove tags from a QuickSight resource	actionconnector	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
		analysis	aws:ResourceTag/${TagKey} aws:TagKeys
		brand	aws:ResourceTag/${TagKey} aws:TagKeys
		customization	aws:ResourceTag/${TagKey} aws:TagKeys
		custompermissions	aws:ResourceTag/${TagKey} aws:TagKeys
		dashboard	aws:ResourceTag/${TagKey} aws:TagKeys
		dataset	aws:ResourceTag/${TagKey} aws:TagKeys
		datasource	aws:ResourceTag/${TagKey} aws:TagKeys
		emailCustomizationTemplate	aws:ResourceTag/${TagKey} aws:TagKeys
		flow	aws:ResourceTag/${TagKey} aws:TagKeys
		folder	aws:ResourceTag/${TagKey} aws:TagKeys
		ingestion	aws:ResourceTag/${TagKey} aws:TagKeys
		namespace	aws:ResourceTag/${TagKey} aws:TagKeys
		oauthClientApplication	aws:ResourceTag/${TagKey} aws:TagKeys
		template	aws:ResourceTag/${TagKey} aws:TagKeys
		theme	aws:ResourceTag/${TagKey} aws:TagKeys
		topic	aws:ResourceTag/${TagKey} aws:TagKeys
		user	aws:ResourceTag/${TagKey} aws:TagKeys
		vpcconnection	aws:ResourceTag/${TagKey} aws:TagKeys
UpdateAccountCustomPermission	Grants permission to update the custom permission associated with an account			Write
UpdateAccountCustomization	Grants permission to update an account customization for QuickSight account or namespace	customization*	aws:ResourceTag/${TagKey}	Write
UpdateAccountSettings	Grants permission to update the administrative account settings for QuickSight account			Write
UpdateActionConnector	Grants permission to update an action connector	actionconnector*	aws:ResourceTag/${TagKey}	Write
UpdateActionConnectorPermissions	Grants permission to update permissions for an action connector	actionconnector*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateAgent	Grants permission to update an agent	agent*		Write
UpdateAgentPermissions	Grants permission to update agent permissions	agent*		Permissions management, Write
UpdateAnalysis	Grants permission to update an analysis	analysis*	aws:ResourceTag/${TagKey}	Write
UpdateAnalysisPermissions	Grants permission to update permissions for an analysis	analysis*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateApplicationWithTokenExchangeGrant	Grants permission to update QuickSight IAM Identity Center application with Token Exchange grant			Write
UpdateAutomationGroupPermissions	Grants permission to update permissions for an automation group	automationGroup*		Permissions management, Write
UpdateBrand	Grants permission to update a brand	brand*	aws:ResourceTag/${TagKey}	Write
UpdateBrandAssignment	Grants permission to update a brand assignment			Write
UpdateBrandPublishedVersion	Grants permission to update the published version of a brand	brand*	aws:ResourceTag/${TagKey}	Write
UpdateCustomPermissions	Grants permission to update a QuickSight custom permissions resource	custompermissions*	aws:ResourceTag/${TagKey}	Write
UpdateDashboard	Grants permission to update a QuickSight Dashboard	dashboard*	aws:ResourceTag/${TagKey}	Write
UpdateDashboardLinks	Grants permission to update a QuickSight Dashboard's links	dashboard*	aws:ResourceTag/${TagKey}	Write
UpdateDashboardPermissions	Grants permission to update permissions for a QuickSight Dashboard	dashboard*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateDashboardPublishedVersion	Grants permission to update a QuickSight Dashboard's Published Version	dashboard*	aws:ResourceTag/${TagKey}	Write
UpdateDashboardsQAConfiguration	Grants permission to update dashboards qa configuration			Write
UpdateDataSet	Grants permission to update a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateDataSet	Grants permission to update a dataset	datasource	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateDataSetPermissions	Grants permission to update the resource policy of a dataset	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Permissions management, Write
UpdateDataSource	Grants permission to update a data source	datasource*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateDataSourcePermissions	Grants permission to update the resource policy of a data source	datasource*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Permissions management, Write
UpdateDefaultQBusinessApplication	Grants permission to update linked QBusiness application Id for QuickSight account			Write
UpdateFlow	Grants permission to update a flow	flow*	aws:ResourceTag/${TagKey}	Write
UpdateFlowPermissions	Grants permission to update permissions for a flow	flow*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateFolder	Grants permission to update a QuickSight Folder	folder*	aws:ResourceTag/${TagKey}	Write
UpdateFolderPermissions	Grants permission to update permissions for a QuickSight Folder	folder*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateGroup	Grants permission to change group description	group*		Write
UpdateIAMPolicyAssignment	Grants permission to update an existing assignment	assignment*		Write
UpdateIdentityPropagationConfig	Grants permission to add and update Amazon services for trusted identity propagation in QuickSight			Write
UpdateIpRestriction	Grants permission to update the IP restrictions for QuickSight account			Write
UpdateKeyRegistration	Grants permission to update QuickSight key registration			Write
UpdateKnowledgeBasePermissions	Grants permission to update the resource policy of a knowledge base	knowledgeBase*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateLimitsProfile	Grants permission to update a limits profile	limitsProfile*	aws:ResourceTag/${TagKey}	Write
UpdateOAuthClientApplication	Grants permission to update an OAuth client application	oauthClientApplication*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdatePublicSharingSettings	Grants permission to enable or disable public sharing on an account			Write
UpdateQPersonalizationConfiguration	Grants permission to update a personalization configuration			Write
UpdateQuickSightQSearchConfiguration	Grants permission to update QuickSight Q Search configuration			Write
UpdateRefreshSchedule	Grants permission to update a refresh schedule for a dataset	refreshschedule*		Write
UpdateRoleCustomPermission	Grants permission to update the custom permission associated with a role			Write
UpdateSPICECapacityConfiguration	Grants permission to update QuickSight SPICE capacity configuration			Write
UpdateSelfUpgrade	Grants permission to take action on pending self upgrade requests associated with an account	user*	aws:ResourceTag/${TagKey}	Write
UpdateSelfUpgradeConfiguration	Grants permission to update the administrative self upgrade configuration associated with an account			Write
UpdateSpace	Grants permission to update a space	space*		Write
UpdateSpacePermissions	Grants permission to update permissions for a space	space*		Permissions management, Write
UpdateSpaceResources	Grants permission to update resources in a space	space*		Write
UpdateTemplate	Grants permission to update a template	template*	aws:ResourceTag/${TagKey}	Write
UpdateTemplateAlias	Grants permission to update a template alias	template*	aws:ResourceTag/${TagKey}	Write
UpdateTemplatePermissions	Grants permission to update permissions for a template	template*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateTheme	Grants permission to update a theme	theme*	aws:ResourceTag/${TagKey}	Write
UpdateThemeAlias	Grants permission to update the alias of a theme	theme*	aws:ResourceTag/${TagKey}	Write
UpdateThemePermissions	Grants permission to update permissions for a theme	theme*	aws:ResourceTag/${TagKey}	Permissions management, Write
UpdateTopic	Grants permission to update a topic	dataset	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateTopic	Grants permission to update a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
UpdateTopicPermissions	Grants permission to update the resource policy of a topic	topic*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Permissions management, Write
UpdateTopicRefreshSchedule	Grants permission to update a refresh schedule for a topic	topic*	aws:ResourceTag/${TagKey}	Write
UpdateUser	Grants permission to update an Amazon QuickSight user	user*	aws:ResourceTag/${TagKey}	Write
UpdateUserCustomPermission	Grants permission to update the custom permission associated with a user	user*	aws:ResourceTag/${TagKey}	Write
UpdateVPCConnection	Grants permission to update a vpc connection	vpcconnection*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write

Permission-only actions for Amazon QuickSight

The following actions are defined by Amazon QuickSight but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AccountConfigurations	Grants permission to enable setting default access to Amazon resources			Write
AllowVendedLogDeliveryForResource	Grants permission to configure log delivery for QuickSuite instance			Permissions management, Write
BatchGetPreferences	Grants permission to get user preferences			Read
BatchUpdatePreferences	Grants permission to update user preferences			Write
CreateAdmin	Grants permission to provision Amazon QuickSight administrators, authors, and readers	user*	aws:ResourceTag/${TagKey}	Write
CreateEmailCustomizationTemplate	Grants permission to create a QuickSight email customization template	emailCustomizationTemplate*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateExtensionAccess	Grants permission to create an extension access	extensionaccess*		Write
CreateReader	Grants permission to provision Amazon QuickSight readers	user*	aws:ResourceTag/${TagKey}	Write
CreateUser	Grants permission to provision Amazon QuickSight authors and readers	user*	aws:ResourceTag/${TagKey}	Write
DeleteEmailCustomizationTemplate	Grants permission to delete a QuickSight email customization template	emailCustomizationTemplate*	aws:ResourceTag/${TagKey}	Write
DeleteExtensionAccess	Grants permission to delete an extension access	extensionaccess*		Write
DescribeChatConfiguration	Grants permission to describe chat configuration			Read
DescribeEmailCustomizationTemplate	Grants permission to describe a QuickSight email customization template	emailCustomizationTemplate*	aws:ResourceTag/${TagKey}	Read
DescribeExtensionAccess	Grants permission to describe an extension access	extensionaccess*		Read
DescribeQuickIndexCapacity	Grants permission to describe index capacity			Read
GetAnonymousUserEmbedUrl	Grants permission to get a URL used to embed a QuickSight Dashboard for a user not registered with QuickSight			Read
GetAuthCode	Grants permission to get an auth code representing a QuickSight user	user*	aws:ResourceTag/${TagKey}	Read
GetCustomPermissionsSummary	Grants permission to get information about the custom permissions in an account			Read
GetGroupMapping	Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight			Read
ListCustomerManagedKeys	Grants permission to list all registered customer managed keys			List
ListExtensionAccesses	Grants permission to list extension accesses			List
ListKMSKeysForUser	Grants permission to list a user's KMS keys			List
ListUsersIndexCapacity	Grants permission to list users index capacity			List
PassDataSet	Grants permission to use a dataset for a template	dataset*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
PassDataSource	Grants permission to use a data source for a data set	datasource*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
QuickSuiteUsageMetrics	Grants permission to get QuickSuite usage metrics			Read
RegisterCustomerManagedKey	Grants permission to register a customer managed key			Write
RemoveCustomerManagedKey	Grants permission to remove a customer managed key			Write
ScopeDownPolicy	Grants permission to manage scoping policies for permissions to Amazon resources			Write
SearchDirectoryGroups	Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight			List
SearchUsers	Grants permission to search the QuickSight users belonging to this account	user*	aws:ResourceTag/${TagKey}	List
SetGroupMapping	Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight			Write
Subscribe	Grants permission to subscribe to Amazon QuickSight, and also to allow the user to upgrade the subscription to Enterprise edition		quicksight:DirectoryType quicksight:Edition	Write
UnpublishFlow	Grants permission to unpublish a flow	flow*	aws:ResourceTag/${TagKey}	Write
Unsubscribe	Grants permission to unsubscribe from Amazon QuickSight, which permanently deletes all users and their resources from Amazon QuickSight			Write
UpdateChatConfiguration	Grants permission to update chat configuration			Write
UpdateEmailCustomizationTemplate	Grants permission to update a QuickSight email customization template	emailCustomizationTemplate*	aws:ResourceTag/${TagKey}	Write
UpdateExtensionAccess	Grants permission to update an extension access	extensionaccess*		Write
UpdateQuickIndexCapacity	Grants permission to update index capacity			Write
UpdateResourcePermissions	Grants permission to update resource-level permissions in QuickSight			Write

Resource types defined by Amazon QuickSight

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
account	arn:${Partition}:quicksight:${Region}:${Account}:account/${ResourceId}
actionconnector	arn:${Partition}:quicksight:${Region}:${Account}:action-connector/${ResourceId}	aws:ResourceTag/${TagKey}
agent	arn:${Partition}:quicksight:${Region}:${Account}:agent/${ResourceId}
analysis	arn:${Partition}:quicksight:${Region}:${Account}:analysis/${ResourceId}	aws:ResourceTag/${TagKey}
approvalPolicy	arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/${ResourceId}
assetBundleExportJob	arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-export-job/${ResourceId}
assetBundleImportJob	arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-import-job/${ResourceId}
assignment	arn:${Partition}:quicksight::${Account}:assignment/${ResourceId}
automation	arn:${Partition}:quicksight:${Region}:${Account}:automation-group/${AutomationGroupId}/automation/${ResourceId}
automationGroup	arn:${Partition}:quicksight:${Region}:${Account}:automation-group/${ResourceId}
automationJob	arn:${Partition}:quicksight:${Region}:${Account}:automation-group/${AutomationGroupId}/automation/${AutomationId}/job/${ResourceId}
brand	arn:${Partition}:quicksight:${Region}:${Account}:brand/${ResourceId}	aws:ResourceTag/${TagKey}
customization	arn:${Partition}:quicksight:${Region}:${Account}:customization/${ResourceId}	aws:ResourceTag/${TagKey}
custompermissions	arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/${ResourceId}	aws:ResourceTag/${TagKey}
dashboard	arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${ResourceId}	aws:ResourceTag/${TagKey}
dashboardSnapshotJob	arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${DashboardId}/snapshot-job/${ResourceId}	aws:ResourceTag/${TagKey}
dataset	arn:${Partition}:quicksight:${Region}:${Account}:dataset/${ResourceId}	aws:ResourceTag/${TagKey}
datasource	arn:${Partition}:quicksight:${Region}:${Account}:datasource/${ResourceId}	aws:ResourceTag/${TagKey}
emailCustomizationTemplate	arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/${ResourceId}	aws:ResourceTag/${TagKey}
extensionaccess	arn:${Partition}:quicksight:${Region}:${Account}:extension-access/${ResourceId}
flow	arn:${Partition}:quicksight:${Region}:${Account}:flow/${ResourceId}	aws:ResourceTag/${TagKey}
folder	arn:${Partition}:quicksight:${Region}:${Account}:folder/${ResourceId}	aws:ResourceTag/${TagKey}
group	arn:${Partition}:quicksight:${Region}:${Account}:group/${ResourceId}
ingestion	arn:${Partition}:quicksight:${Region}:${Account}:dataset/${DatasetId}/ingestion/${ResourceId}	aws:ResourceTag/${TagKey}
knowledgeBase	arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/${ResourceId}	aws:ResourceTag/${TagKey}
limitsProfile	arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/${ResourceId}	aws:ResourceTag/${TagKey}
namespace	arn:${Partition}:quicksight:${Region}:${Account}:namespace/${ResourceId}	aws:ResourceTag/${TagKey}
oauthClientApplication	arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/${ResourceId}	aws:ResourceTag/${TagKey}
refreshschedule	arn:${Partition}:quicksight:${Region}:${Account}:dataset/${DatasetId}/refresh-schedule/${ResourceId}
space	arn:${Partition}:quicksight:${Region}:${Account}:space/${ResourceId}
template	arn:${Partition}:quicksight:${Region}:${Account}:template/${ResourceId}	aws:ResourceTag/${TagKey}
theme	arn:${Partition}:quicksight:${Region}:${Account}:theme/${ResourceId}	aws:ResourceTag/${TagKey}
topic	arn:${Partition}:quicksight:${Region}:${Account}:topic/${ResourceId}	aws:ResourceTag/${TagKey}
user	arn:${Partition}:quicksight:${Region}:${Account}:user/${ResourceId}	aws:ResourceTag/${TagKey}
vpcconnection	arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/${ResourceId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon QuickSight

Amazon QuickSight defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by tag key-value pairs in the request	String
aws:ResourceTag/${TagKey}	Filters access by tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by tag keys	ArrayOfString
quicksight:AllowedEmbeddingDomains	Filters access by the allowed embedding domains	ArrayOfString
quicksight:DirectoryType	Filters access by the user management options	String
quicksight:Edition	Filters access by the edition of QuickSight	String
quicksight:Group	Filters access by QuickSight group ARN	ARN
quicksight:IamArn	Filters access by IAM user or role ARN	ARN
quicksight:KmsKeyArns	Filters access by KMS key ARNs	ArrayOfARN
quicksight:SessionName	Filters access by session name	String
quicksight:UserName	Filters access by user name	String

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon Polly (polly)

Amazon RDS (rds)