AWS Security ChangesHomeSearch

AWS quicksight documentation change

Service: quicksight · 2025-08-16 · Documentation low

File: quicksight/latest/user/embedding-gen-bi.md

Summary

Updated ARN formats and restructured CLI command syntax

Security assessment

Corrects ARN formats to include service/region, improving accuracy but not addressing security vulnerabilities.

Diff

diff --git a/quicksight/latest/user/embedding-gen-bi.md b/quicksight/latest/user/embedding-gen-bi.md
index 98f62f7eb..c27a9c803 100644
--- a//quicksight/latest/user/embedding-gen-bi.md
+++ b//quicksight/latest/user/embedding-gen-bi.md
@@ -69 +69 @@ JSON
-                "Resource": "arn:aws:us-east-1:accountId:user/namespace/userName",
+                "Resource": "arn:aws:quicksight:region:accountId:user/namespace/userName",
@@ -108 +108 @@ JSON
-                    "arn:aws:us-east-1:accountId:user/namespace/userName"
+                    "arn:aws:quicksight:region:accountId:user/namespace/userName"
@@ -704,3 +704,3 @@ JSON
-                    "arn:aws:{{region}}:{{accountId}}:namespace/{{namespace}}",
-                    "arn:aws:{{region}}:{{accountId}}:dashboard/{{dashboardId-1}}",
-                    "arn:aws:{{region}}:{{accountId}}:dashboard/{{dashboardId-2}}"
+                    "arn:aws:quicksight:{{region}}:{{accountId}}:namespace/{{namespace}}",
+                    "arn:aws:quicksight:{{region}}:{{accountId}}:dashboard/{{dashboardId-1}}",
+                    "arn:aws:quicksight:{{region}}:{{accountId}}:dashboard/{{dashboardId-2}}"
@@ -1001,7 +1001,2 @@ To get a signed URL for the dashboard, call `generate-embed-url-for-anynymous-us
-    aws quicksight generate-embed-url-for-anonymous-user \
-    --aws-account-id 111122223333 \
-    --namespace default-or-something-else \
-    --authorized-resource-arns '["topic-arn-topicId","topic-arn-topicId2"]' \
-    --allowed-domains '["domain1","domain2"]' \
-    --experience-configuration 'GenerativeQnA={InitialTopicId="topicId1"}' \
-    --session-tags '["Key": tag-key-1,"Value": tag-value-1,{"Key": tag-key-1,"Value": tag-value-1}]' \
+    aws quicksight generate-embed-url-for-anonymous-user 
+    --aws-account-id 111122223333 
@@ -1008,0 +1004,9 @@ To get a signed URL for the dashboard, call `generate-embed-url-for-anynymous-us
+    --authorized-resource-arns '<dashboard_arn>' 
+    --namespace default 
+    --experience-configuration '{"DashboardVisual":
+    { "InitialDashboardVisualId":
+        { "DashboardId": "<dashboard_id>",
+          "SheetId": "<sheet_id>"
+          "VisualId": "<visual_id>"
+        }
+    }}'