Analytics Dashboard using AWS with access control

Question

Hi,

We want to publish an analytics dashboard with access controls to corporate clients. The login will be their corporate email and want to give them an ability to change their password. The dashboard will have functionality to view tabular data,  charts and also provide ability to download CSV file for the data.

Today, we have a low-cost & low-code solution where we we use AWS Lambda to write data to Google Sheets and then display the sheets data using Google Data Studio (GDS). For GDS, we are able to grant access basis gmail credentials but not able to limit it to corporate emails.

Was wondering if there is any AWS solution which can help with this? We don't want to setup a separate EC2 webserver for this exercise and want to use some equivalent of GDS, Tableau, BI which solves the use case.

Regards,
dbeings

Answer

Hi dbeing,

Amazon Quicksight is the equivalent of GDS, Tableau, Power BI. You can update the Lambda function you currently use to write the data to CSV and store it in S3. Quicksight can then direct query the data from S3 using Amazon Athena. Alternatively, you can load the data from S3 into Quicksight's in-memory engine called SPICE.

Amazon Quicksight is pretty flexible in terms of licensing and the bast part is that it's serverless so you don't have to worry about managing the infrastructure or how it scales.

In regards to access control, you have two options:
- You can create users in Quicksight using the corporate email addresses 
- You can use IAM users, ie create the corporate users in your AWS account and give them access to Quicksight

What I'm thinking is that you can have a Lambda function responsible for user provisioning that will create the Quicksight (or IAM user) and grant them access only if they are a corporate user.

Cheers

Analytics Dashboard using AWS with access control

Relevant content