Connection error from QuickSight to Athena under Lake Formation environment

0

I encounter the error when I try to create a new Athena dataset on QuickSight (click on [Validate connection] button);

  • Error Code: ACCESS_DENIED_TO_RESULT_STAGING_AREA
  • Error Message: [Simba]AthenaJDBC An error has been thrown from the AWS Athena client. Access denied when writing to location: s3://<Athena-query-result-bucket-name>/xxxx [Execution ID: xxxxx]

Environment:

  • there're 2 s3 buckets; one is "s3://<Source-data-bucket-name>" for query target, and another one is "s3://<Athena-query-result-bucket-name>" for Athena query workgroup.
  • Using Lake Formation, and both buckets are registered as datalake location.
  • After create QuickSight account, I allow access to 2 s3 buckets and Athena via QuickSight account management
  • On Lake Formation console, I did grant;
    • QuickSight execution role (aws-quicksight-service-role-v0) access to 2 s3 buckets
    • QuickSight Group ARN (arn:aws:quicksight:region:accountId:group/default/groupName) access to the raw data access bucket

What else should I do to make enable to create Athena data set on QuickSight console? Thank you for your help.

AWS
질문됨 일 년 전182회 조회
답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인