Lake formation Database resource link is not showing in QuickSight

0

I need some help accessing the lake formation database resource link in QuickSight.

Here's the scenario,

In My Account A, I have databases and tables in the lake formation data catalog. The S3 bucket, where all findings are stored from security hub, is also in Account A. I have shared these resources with my another AWS account which is Account B. In Account B, I created a database resource link, and I can access the database and tables in Athena and query them. However, I am not seeing my tables in QuickSight. I also followed the steps in below link provided by QuickSight Experts but still not working.

https://community.amazonquicksight.com/t/can-a-cross-account-lake-formation-resource-be-used-in-quicksight/1302

https://community.amazonquicksight.com/t/security-lake-athena-db-not-visible-for-dataset-selection/8358/4

What might be the reason? Please help me to figure this out.

2 Answers
0
Accepted Answer

Based on your description, it appears you've done all the necessary steps to share your Lake Formation resources with Account B, and you've verified that you can access and query these resources from Athena.

However, not seeing the tables in QuickSight might be due to a couple of potential issues, including permissions and the QuickSight data source setup. Here's a few things you can check:

  • Lake Formation permissions: Lake Formation resources permissions should be correctly set. Please check whether the IAM role associated with QuickSight in Account B has the necessary permissions to access the Lake Formation resources. If it doesn't, you'll need to add these permissions.

  • QuickSight data source: When setting up the data source in QuickSight, make sure you've chosen Athena as the source and provided the correct database name. If everything is set correctly but it's still not working, try to create the data source again.

  • Cross-account setup: It's important to ensure that all your cross-account configurations are correctly set up. Make sure you have shared the resources from Account A with Account B and that the resource link has been created in Account B.

  • QuickSight IAM role permissions: Check the IAM role that QuickSight is using. This role needs to have quicksight:AthenaAccess and s3:GetObject, s3:ListBucket permissions on the data source (bucket) that you're trying to access.

  • Athena settings in QuickSight: If you've set up a custom Athena workgroup, make sure that you've selected it in the Athena settings in QuickSight.

  • Time taken for permissions to propagate: Sometimes, there may be a delay in the propagation of permissions across different AWS services. So, if you've just set the permissions, you might need to wait a bit before they take effect.

profile picture
answered 9 months ago
0

Thank you for your answer. The above issue has been resolved. The issue was with the lake formation permission. The console was not working, so I had to use the CLI to grant permission to the QuickSight IAM Role. Granting permission to the QuickSight User was also quite complicated.

answered 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions