Category: Networking & Content Delivery

In this post, we present a secure solution for delivering HAQM S3 backed content to QuickSight dashboards using public URLs, eliminating the vulnerabilities inherent in public S3 buckets. Specifically, we demonstrate how to use HAQM CloudFront with your private S3 buckets to deliver content to QuickSight. This approach allows organizations to maintain strict security controls while creating visually compelling dashboards that align with their design guidelines and effectively communicate data-driven insights.

AWS PrivateLink interface VPC endpoints provide private connectivity between a QuickSight website, VPCs, or on-premises networks without exposing traffic to the public internet. Traffic between the VPC and the website doesn’t leave the HAQM network, and all communication between the VPC and the website is kept private within AWS, making sure the data in QuickSight is kept secure. Administrators can also use VPC endpoint policies to restrict access to QuickSight accounts that are not authorized on their network. In this post, we show how to establish end-to-end private connectivity from users on premises to a QuickSight website using VPC endpoints and AWS Direct Connect.