AWS quicksight documentation change

Service: quicksight · 2025-08-28 · Documentation low

File: quicksight/latest/user/embedded-analytics-visuals-for-authenticated-users.md

Summary

Removed two JSON policy examples with AllowedEmbeddingDomains and resource-specific permissions

Security assessment

Policy deletions remove examples of embedding domain restrictions and least-privilege access. No evidence of security fixes, only reduced documentation clarity.

Diff

diff --git a/quicksight/latest/user/embedded-analytics-visuals-for-authenticated-users.md b/quicksight/latest/user/embedded-analytics-visuals-for-authenticated-users.md
index f7081801e..2a5cbbe89 100644
--- a//quicksight/latest/user/embedded-analytics-visuals-for-authenticated-users.md
+++ b//quicksight/latest/user/embedded-analytics-visuals-for-authenticated-users.md
@@ -40,29 +39,0 @@ The following sample policy provides these permissions.
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "quicksight:GenerateEmbedUrlForRegisteredUser"
-                ],
-                "Resource": "arn:aws:quicksight:region:accountId:user/namespace/userName",
-                "Condition": {
-                    "ForAllValues:StringEquals": {
-                        "quicksight:AllowedEmbeddingDomains": [
-                            "https://my.static.domain1.com",
-                            "https://*.my.static.domain2.com"
-                        ]
-                    }
-                }
-            }
-        ]
-    }
-    
-
@@ -73,38 +43,0 @@ The following sample policy provides permission to retrieve an embedding URL for
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Action": "quicksight:RegisterUser",
-                "Resource": "*",
-                "Effect": "Allow"
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "quicksight:GenerateEmbedUrlForRegisteredUser"
-                ],
-                "Resource": [
-                    "arn:aws:quicksight:us-east-1:{{accountId}}:namespace/{{namespace}}",
-                    "arn:aws:quicksight:us-east-1:{{accountId}}:dashboard/{{dashboardId-1}}",
-                    "arn:aws:quicksight:us-east-1:{{accountId}}:dashboard/{{dashboardId-2}}"
-                ],
-                "Condition": {
-                    "ForAllValues:StringEquals": {
-                        "quicksight:AllowedEmbeddingDomains": [
-                            "https://my.static.domain1.com",
-                            "https://*.my.static.domain2.com"
-                        ]
-                    }
-                }
-            }
-        ]
-    }
-    
-