Quicksight是否需要访问正在查询的S3 Bucket Athena? [英] Should Quicksight Need Access to the S3 Bucket Athena Is Querying?

问题描述

我已经使用存储在S3中的数据，AWS Glue映射的架构，Amazon Athena的查询以及Amazon QuickSight中的可视化设置了报告堆栈.

I have set up a reporting stack using data stored in S3, schema mapped by AWS Glue, queried by Amazon Athena, and visualized in Amazon QuickSight.

我已授予QuickSight访问我拥有的三个aws-athena-query-results存储桶的权限(请参见下文)但是，当我尝试基于Athena表构建报表时，会引发错误.我回去，并明确授予它访问保存我的原始数据的S3存储桶的权限，现在有了可视化效果.

I gave QuickSight permissions to access the three aws-athena-query-results buckets I have (see below) However, when I try to build reports based on my Athena table, it throws an error. I went back in and explicitly gave it access to the S3 bucket that holds my raw data, and now I have visualizations.

我的问题是，是否应该设置它.我的假设是Athena可以访问S3，而QuickSight可以访问Athena及其结果，因此应该无需直接访问每个存储原始数据的S3存储桶.每次有新的S3存储桶要报告时，您都需要授予Athena和QuickSight访问权限，这似乎会产生大量开销.

My question is whether or not this is how it should need to be set up. My assumption was that Athena has access to S3, and QuickSight has access to Athena and it's results, so it shouldn't need direct access to each S3 bucket storing raw data. It seems it would generate a lot of overhead each time there is a new S3 bucket to be reported on that you need to go grant Athena and QuickSight access.

通过阅读此页面:对雅典娜进行故障排除权限不足，尚不清楚需要哪些存储桶.

From reading this page: Troubleshoot Athena Insufficient Permissions, it's unclear which buckets are required.

推荐答案

是的，目前，需要为QuickSight授予对Athena以及Athena访问的基础存储桶的显式访问权限.我从与亚马逊的讨论中得到了这个答案，所以，不幸的是，我没有链接的来源.

Yes, at the moment, QuickSight needs to be granted explicit access to both Athena and the underlying buckets that Athena accesses. I got this answer from discussion with Amazon so, unfortunately, I don't have source to link.

这篇关于Quicksight是否需要访问正在查询的S3 Bucket Athena?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！