Use the topics in this section to create your first analysis. You can use sample data to create either a simple or a more advanced analysis, or you can connect to your own data to create an analysis.
Before you create your first analysis, make sure to complete the steps in
In this section, you sign up for an AWS account, create an AWS Identity and Access Management (IAM) administrator user, and sign up for Amazon QuickSight.
Topics
• Sign up for AWS (p. 20)
• Create an IAM user (p. 20)
• Signing up for an Amazon QuickSight subscription (p. 21)
Sign up for AWS
If you do not have an AWS account, complete the following steps to create one.
To sign up for an AWS account
1. Open https://portal.aws.amazon.com/billing/signup.
2. Follow the online instructions.
Part of the sign-up procedure involves receiving a phone call and entering a verification code on the phone keypad.
Create an IAM user
To create an administrator user for yourself and add the user to an administrators group (console)
1. Sign in to the IAM console as the account owner by choosing Root user and entering your AWS account email address. On the next page, enter your password.
NoteWe strongly recommend that you adhere to the best practice of using the Administrator IAM user that follows and securely lock away the root user credentials. Sign in as the root user only to perform a few account and service management tasks.
2. In the navigation pane, choose Users and then choose Add user.
3. For User name, enter Administrator.
4. Select the check box next to AWS Management Console access. Then select Custom password, and then enter your new password in the text box.
5. (Optional) By default, AWS requires the new user to create a new password when first signing in. You can clear the check box next to User must create a new password at next sign-in to allow the new user to reset their password after they sign in.
6. Choose Next: Permissions.
7. Under Set permissions, choose Add user to group.
8. Choose Create group.
9. In the Create group dialog box, for Group name enter Administrators.
10. Choose Filter policies, and then select AWS managed - job function to filter the table contents.
11. In the policy list, select the check box for AdministratorAccess. Then choose Create group.
NoteYou must activate IAM user and role access to Billing before you can use the AdministratorAccess permissions to access the AWS Billing and Cost Management console. To do this, follow the instructions in step 1 of the tutorial about delegating access to the billing console.
12. Back in the list of groups, select the check box for your new group. Choose Refresh if necessary to see the group in the list.
13. Choose Next: Tags.
14. (Optional) Add metadata to the user by attaching tags as key-value pairs. For more information about using tags in IAM, see Tagging IAM entities in the IAM User Guide.
15. Choose Next: Review to see the list of group memberships to be added to the new user.
When you are ready to proceed, choose Create user.
You can use this same process to create more groups and users and to give your users access to your AWS account resources. To learn about using policies that restrict user permissions to specific AWS resources, see Access management and Example policies.
Signing up for an Amazon QuickSight subscription
When you first sign up for Amazon QuickSight, you get a free trial subscription for four users for 30 days. During the process of signing up, you choose which edition of QuickSight to use and set options for your identity provider.
Before you begin, make sure that you can connect to an existing AWS account. If you don't have an AWS account, see Sign up for AWS (p. 20). The person who signs up for QuickSight needs to have the correct AWS Identity and Access Management (IAM) permissions. For more information, see IAM policy examples for Amazon QuickSight (p. 898).
To test your permissions, you can use the IAM policy simulator; for more information, see Testing IAM policies with the IAM policy simulator. Also, check whether your AWS account is part of an organization based on the AWS Organizations service. If so and you sign in as an IAM user, make sure that you didn't inherit any IAM permissions that deny access to the required permissions. For more information on Organizations, see What is AWS Organizations?
Signing up for a subscription
To subscribe to QuickSight
1. Sign in to your AWS account and open QuickSight from the AWS Management Console.
You can find it under Analytics or by searching for QuickSight.
Your AWS account number is displayed for verification purposes.
2. Choose Sign up for QuickSight.
3. Choose Standard or Enterprise.
a. If you choose Standard, choose the method that you want to connect with. Choose one of the following:
• Use IAM federated identities and QuickSight-managed users.
• Use IAM federated identities only.
b. If you choose Enterprise, choose Enterprise + Q or Enterprise, choose Continue, and then choose the method that you want to connect with.
Choose one of the following:
• Use Active Directory
• Use IAM federated identities and QuickSight-managed users
• Use IAM federated identities only
To sign up for QuickSight with federated users, you need the correct IAM permissions, defined as follows:
• To use role-based federation (that is, single sign-on, or SSO) with QuickSight Standard Edition or QuickSight Enterprise Edition, see IAM identity-based policies for Amazon QuickSight: all access for Standard edition (p. 901).
• To use Microsoft Active Directory with QuickSight Enterprise Edition, see IAM identity-based policies for Amazon QuickSight: all access for Enterprise edition (p. 902). QuickSight Standard Edition doesn't work with Active Directory.
4. For both Standard and Enterprise editions, make choices for the following items:
• Enter a unique account name for QuickSight. Your account name can only contain characters (A–Z and a–z), digits (0–9), and hyphens (-). If you use Microsoft AD, and it has a default alias, this alias is used for the account name.
• Enter a notification email address for the QuickSight account owner or group. This email address receives service and usage notifications.
• (Optional) Choose the AWS Region that you want to use for your initial data storage capacity, called SPICE.
• (Optional) Choose whether to allow autodiscovery of your AWS resources. You can change these options later in Manage Account. For more information, see Allowing autodiscovery of AWS resources (p. 860).
• (Optional) For IAM Role, choose Use an existing role, and then from the list choose a role that you want to use. Or enter the IAM Amazon Resource Name (ARN) in the following format: arn:aws:iam::account-id:role/path/role-name.
NoteMake sure to have your IAM administrator give you permissions to pass any existing IAM roles in QuickSight. If you don't have permissions, or if you don't know if you have permissions, choose QuickSight-managed role. This is the default role. You can always switch to using a different role later if you have the correct permissions. For more information, see Using an existing IAM role in QuickSight.
5. Review the choices that you made, then choose Finish.
6. (Optional) To open QuickSight, choose Go to QuickSight.
If you're using Enterprise edition, you can manage user groups by choosing Manage access to QuickSight. Otherwise, close the browser and notify your users how to connect.
7. (Optional) If you're using SSO or federation, choose the users and groups that are going to use QuickSight.
(p. ).
Topics