Visualization Flashcards
Visualization Service
Amazon QuickSight
What is QuickSight ?
- Fast, easy, cloud
-powered business
analytics service - Allows all employees in an organization
to:* Build visualizations - Perform ad-hoc analysis
- Quickly get business insights from data
- Anytime, on any device (browsers, mobile)
- Serverless
QuickSight Data Sources
- Redshift
- Aurora / RDS
- Athena
- EC2-hosted databases
- Files (S3 or on-premises)
- Excel
- CSV, TSV
- Common or extended log format
- Data preparation allows limited ETL
SPICE * Data sets are imported into SPICE
- Super-fast, Parallel, In-memory Calculation
Engine - Uses columnar storage, in
-memory, machine
code generation - Accelerates interactive queries on large
datasets
SPICE - Each user gets …
- 10GB of SPICE
SPICE - Scales to…
hundreds of thousands of users
SPICE - Can accelerate large queries that would
time out in direct query mode (hitting Athena directly)
But if it takes more than 30 minutes to import your data into SPICE it will still time out
QuickSight Use Cases (IDA)
- Interactive ad-hoc exploration / visualization of data
- Dashboards and KPI’s
- Analyze / visualize data from:
- Logs in S3
- On-premise databases
- AWS (RDS, Redshift, Athena, S3)
- SaaS applications, such as Salesforce
- Any JDBC/ODBC data source
QuickSight Anti
-Patterns * Highly formatted canned reports
- QuickSight is for ad-hoc queries, analysis, and visualization
QuickSight Anti
-Patterns / ETL
Use Glue instead, although
QuickSight can do some
transformations
QuickSight Security
Multi-factor authentication on your account, VPC, Row
-level security, Private VPC access
QuickSight Security - VPC connectivity
Add QuickSight’s IP address range to your database security groups
QuickSight Security - Row
-level security
- New for 2021: Column
-level security too (CLS)
– Enterprise edition only
QuickSight Security - Private VPC access
Elastic Network Interface, AWS Direct Connect
QuickSight Security - Resource access
- Must ensure QuickSight is authorized to use Athena / S3 / your S3 buckets
- This can be managed within the QuickSight console (Manage Quicksight / Security & Permissions)\
QuickSight Security - Data access
Can create IAM policies to restrict what data in S3 given QuickSight users can access
Quicksight + Redshift: Security Default access
- By default Quicksight can only access data stored IN THE SAME REGION as the one Quicksight is running within
- So if Quicksight is running in one region, and Redshift in
another, that’s a problem
Quicksight + Redshift: Security - A VPC configured to work across AWS regions won’t work!
Solution: create a new security group with an inbound rule authorizing access from the IP range of QuickSight servers in that region
* Those ranges are documented at
https://docs.aws.amazon.com/quicksight/latest/user/regions.html
QuickSight User Management
- Users defined via IAM, or email signup
- Active Directory connector with QuickSight Enterprise
Edition - All keys are managed by AWS; you CANNOT use customerprovided keys
- Enterprise edition only!
- Can tweak security access using I
QuickSight Pricing - Annual subscription
- Standard: $9 / user /month * Enterprise: $18 / user / month
QuickSight Pricing - Extra SPICE capacity (beyond 10GB)
- $0.25 (standard) $0.38 (enterprise) / GB / user / month