Embed Quick Sight visuals using Cognito user authentication
aws ·
The article explains how to embed individual Amazon Quick Sight visuals into React applications with per-user authentication using Amazon Cognito. It describes a four-layer serverless architecture comprising a React front end served through CloudFront and S3, Cognito User Pools for JWT-based authentication, API Gateway and Lambda for backend processing, and Quick Sight for rendering visuals via the Embedding SDK. The Lambda function synchronizes Cognito users with Quick Sight by registering new users as READERs and generates time-scoped embed URLs scoped to specific dashboard visuals using the GenerateEmbedUrlForRegisteredUser API. Role-based access control is enforced through API Gateway JWT validation, the READER user role, dashboard permissions, and optional row-level security. The React front end uses the embedding SDK to render visuals and supports applying custom filter groups from the application UI to the embedded visual. Deployment is streamlined through a single AWS CloudFormation stack, and the post includes implementation steps and code snippets for backend and frontend integration.
aws