Question

我正在使用此处给出的示例（https://github.com/aws-samples/amazon-quicksight-embedding-sample）将Quicksight仪表板嵌入到自定义Web应用程序中。

我使用了Quicksight Authentication（身份类型：QUICKSIGHT），并使用CF堆栈来构建组件。我还按照建议提升了lambda代码。但是，当我尝试从API网关测试相同内容时，却出现错误提示-

**arn:aws:sts::xxxxxxxxxxxx:assumed-role/QuicksightEmbedStack-LambdaExecutionRole-5Z4UVE5XMDBG/GetDashboardEmbedURL is not authorized to perform: quicksight:GetAuthCode on resource: arn:aws:quicksight:region:xxxxxxxxxxxxxxx:user/default/username**
at Object.extractError (/var/task/node_modules/aws-sdk/lib/protocol/json.js:51:27)
at Request.extractError (/var/task/node_modules/aws-sdk/lib/protocol/rest_json.js:55:8)
at Request.callListeners (/var/task/node_modules/aws-sdk/lib/sequential_executor.js:106:20)
at Request.emit (/var/task/node_modules/aws-sdk/lib/sequential_executor.js:78:10)
at Request.emit (/var/task/node_modules/aws-sdk/lib/request.js:683:14)
at Request.transition (/var/task/node_modules/aws-sdk/lib/request.js:22:10)
at AcceptorStateMachine.runTo (/var/task/node_modules/aws-sdk/lib/state_machine.js:14:12)
at /var/task/node_modules/aws-sdk/lib/state_machine.js:26:10
at Request. (/var/task/node_modules/aws-sdk/lib/request.js:38:9)
at Request. (/var/task/node_modules/aws-sdk/lib/request.js:685:12) {
code: 'AccessDeniedException',
time: 2020-06-04T16:07:14.479Z,
requestId: '689b160c-d5b4-49ec-a1e7-5385d705bdd0',
statusCode: 403,
retryable: false,
retryDelay: 85.70687671139328

调查该错误，似乎Lambda函数没有权限对quicksight用户执行quicksight：GetAuthcode。但是，我从lambda角色附带的策略中清楚地看到有关quicksight：GetAuthCode（通过CF堆栈创建）的信息。我不确定我到底在想什么。我被困在这一点上，任何帮助将不胜感激。

未授权执行GetDashboardEmbedURL：quicksight：GetAuthCode

0 个答案: