Quicksight Dashboard Embed url showing us-east-1 not eu-west-1

Question

Problem:

I want to programmatically fetch a quicksight dashboard URL through the SDK, (dashboard in region: eu-west-1) however whenever I use the following regions I get the following errors when I use the following regions:

eu-west-1: Error: Operation is being called from endpoint eu-west-1, but your identity region is us-east-1. Please use the us-east-1 endpoint.
us-east-1: No error, but the embed url is us-east-1 and results in a us-east-1.quicksight.aws.amazon.com refused to connect error in the browser, eg: https://us-east-1.quicksight.aws.amazon.com/embed/XXXXXX&identityprovider=quicksight&isauthcode=true',

Example Code:

Note: Credentials added for brevity, but are loaded from profile. Have also tried in Java SDK.

const AWS = require('aws-sdk')
const dotenv = require('dotenv').config()

const init = async () => {
  AWS.config.credentials = {accessKeyId: process.env.ACCESS_KEY_ID, secretAccessKey: process.env.SECRET_ACCESS_KEY}
  AWS.config.region = 'us-east-1'
  // AWS.config.region = 'eu-west-1'

  const quicksight = new AWS.QuickSight()

  const embedUrlParams = {
    AwsAccountId: '111122223333',
    DashboardId: '11111111-2222-3333-4444-555555555555',
    IdentityType: 'QUICKSIGHT',
    UserArn: 'arn:aws:quicksight:us-east-1:111122223333:user/default/quicksight-user-1111'
  }
  const embedUrlRes = await quicksight.getDashboardEmbedUrl(embedUrlParams).promise()
  console.log('embedUrlRes', embedUrlRes)
}

init()

CLI:

When I envoke exactly the same through CLI, eg:

aws quicksight get-dashboard-embed-url --aws-account-id 111122223333 --dashboard-id 11111111-2222-3333-4444-555555555555 --identity-type QUICKSIGHT --user-arn "arn:aws:quicksight:us-east-1:111122223333:user/default/quicksight-user-1111" --profile my-quicksight-profile

I get the a perfectly valid embed url in eu-west-1 that embeds perfect through the browser:

https://eu-west-1.quicksight.aws.amazon.com/embed/XXXXXXXX&identityprovider=quicksight&isauthcode=true

So:

I imaging that the SDK is not behaving as the CLI is in the respect of assuming roles, but I've tried this with little success, as well as pointing to quicksight regional endpoints.

Before I go down the rabbit hole, it would be good to see if anyone has experienced the same and how they resolved it.

Thanks!

Running into the same problem, did you ever find out what the issue was? — av0000, Sep 01 '20 at 18:34
@dangarfield I'm experiencing the same problem. Has anyone found a solution? — Bikal Nepal, Sep 16 '20 at 16:31

score 1 · Answer 1 · answered Feb 09 '21 at 08:38

For people who endup here, While generating and embedded link using sdk if your dashboard is in a different region you have to update quicksight parameters of the sdk to that region

something like the following

// Previous code blocks..
quicksight = new AWS.QuickSight({ region: targetRegion })
quicksight.getDashboardEmbedUrl(Params,function (error, embeddedLink){})

Also you have to whitelist domain on each region since quicksight considers each region as seperate entity

Quicksight Dashboard Embed url showing us-east-1 not eu-west-1

Problem:

Example Code:

CLI:

So:

1 Answers1