Connection error from QuickSight to Athena under Lake Formation environment

0

I encounter the error when I try to create a new Athena dataset on QuickSight (click on [Validate connection] button);

  • Error Code: ACCESS_DENIED_TO_RESULT_STAGING_AREA
  • Error Message: [Simba]AthenaJDBC An error has been thrown from the AWS Athena client. Access denied when writing to location: s3://<Athena-query-result-bucket-name>/xxxx [Execution ID: xxxxx]

Environment:

  • there're 2 s3 buckets; one is "s3://<Source-data-bucket-name>" for query target, and another one is "s3://<Athena-query-result-bucket-name>" for Athena query workgroup.
  • Using Lake Formation, and both buckets are registered as datalake location.
  • After create QuickSight account, I allow access to 2 s3 buckets and Athena via QuickSight account management
  • On Lake Formation console, I did grant;
    • QuickSight execution role (aws-quicksight-service-role-v0) access to 2 s3 buckets
    • QuickSight Group ARN (arn:aws:quicksight:region:accountId:group/default/groupName) access to the raw data access bucket

What else should I do to make enable to create Athena data set on QuickSight console? Thank you for your help.

AWS
feita há um ano182 visualizações
Sem respostas

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas