Downgrading user roles in Amazon Quick
aws ·
This AWS blog post provides a technical guide on downgrading user roles in Amazon Quick, emphasizing the principle of least privilege and cost optimization. The article explains that direct downgrades from Admin or Author to Reader are not supported via the console or API due to security constraints. Administrators must first transfer ownership of dashboards and datasets to prevent orphaned resources before initiating any role changes. Two primary methods are detailed: a manual approach involving user deletion and recreation, and a recommended CLI method that uses a specific step-down sequence through intermediate roles. The CLI technique requires transitioning users through Author and Restricted Reader states before reaching the final Reader tier. Additionally, the post advises reviewing Limit Profiles and Custom Permissions after downgrades to ensure appropriate resource caps and feature restrictions. These practices help maintain a secure environment while reducing costs associated with higher-tier subscriptions.
aws