AWSQuickSightAssetBundleImportPolicy
Last Modified
Mar 12, 2026
March 12, 2026 at 09:26 PM UTC
Version
v1
Total Versions
1
Created
Mar 27, 2024
Actions
53
Risk
MediumThe same capabilities in a scoped form, resource policy writes, reads across all data, or full access to a whole service. Read from this policy document alone: trust policies, boundaries and SCPs in your account still decide what actually succeeds. How this is assessed
- Medium
Can rewrite resource policies and sharing
Grants 5 permissions management actions across 1 service (quicksight) on any resource, enough to share resources outside the account.
quicksight:updateanalysispermissionsquicksight:updatedashboardpermissionsquicksight:updatedatasetpermissionsquicksight:updatedatasourcepermissionsquicksight:updatethemepermissionsUse with caution: Turn on IAM Access Analyzer external access findings, and keep account-level guards like S3 Block Public Access enabled.
Policy Document
View on GitHub{
"PolicyVersion": {
"Document": {
"Version": "2012-10-17",
"Statement": [
{
"Sid": "TagWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:ListTagsForResource",
"quicksight:TagResource",
"quicksight:UntagResource"
],
"Resource": "arn:aws:quicksight:*:*:*/*"
},
{
"Sid": "DashboardWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:CreateDashboard",
"quicksight:DeleteDashboard",
"quicksight:DescribeDashboard",
"quicksight:UpdateDashboard",
"quicksight:UpdateDashboardPublishedVersion",
"quicksight:DescribeDashboardPermissions",
"quicksight:UpdateDashboardPermissions",
"quicksight:UpdateDashboardLinks"
],
"Resource": "arn:aws:quicksight:*:*:dashboard/*"
},
{
"Sid": "AnalysisWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:CreateAnalysis",
"quicksight:DeleteAnalysis",
"quicksight:DescribeAnalysis",
"quicksight:UpdateAnalysis",
"quicksight:DescribeAnalysisPermissions",
"quicksight:UpdateAnalysisPermissions"
],
"Resource": "arn:aws:quicksight:*:*:analysis/*"
},
{
"Sid": "DataSetWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:CreateDataSet",
"quicksight:DeleteDataSet",
"quicksight:DescribeDataSet",
"quicksight:PassDataSet",
"quicksight:UpdateDataSet",
"quicksight:DeleteDataSetRefreshProperties",
"quicksight:DescribeDataSetRefreshProperties",
"quicksight:PutDataSetRefreshProperties",
"quicksight:UpdateDataSetPermissions",
"quicksight:DescribeDataSetPermissions",
"quicksight:ListRefreshSchedules"
],
"Resource": "arn:aws:quicksight:*:*:dataset/*"
},
{
"Sid": "DataSourceWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:CreateDataSource",
"quicksight:DescribeDataSource",
"quicksight:DeleteDataSource",
"quicksight:PassDataSource",
"quicksight:UpdateDataSource",
"quicksight:UpdateDataSourcePermissions",
"quicksight:DescribeDataSourcePermissions"
],
"Resource": "arn:aws:quicksight:*:*:datasource/*"
},
{
"Sid": "ThemeWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:CreateTheme",
"quicksight:DeleteTheme",
"quicksight:DescribeTheme",
"quicksight:UpdateTheme",
"quicksight:DescribeThemePermissions",
"quicksight:UpdateThemePermissions"
],
"Resource": "arn:aws:quicksight:*:*:theme/*"
},
{
"Sid": "RefreshScheduleWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:CreateRefreshSchedule",
"quicksight:DescribeRefreshSchedule",
"quicksight:DeleteRefreshSchedule",
"quicksight:UpdateRefreshSchedule"
],
"Resource": "arn:aws:quicksight:*:*:dataset/*/refresh-schedule/*"
},
{
"Sid": "VPCConnectionWriteAccess",
"Effect": "Allow",
"Action": [
"quicksight:ListVPCConnections",
"quicksight:CreateVPCConnection",
"quicksight:DescribeVPCConnection",
"quicksight:DeleteVPCConnection",
"quicksight:UpdateVPCConnection"
],
"Resource": "arn:aws:quicksight:*:*:vpcConnection/*"
},
{
"Sid": "AssetBundleImportOperations",
"Effect": "Allow",
"Action": [
"quicksight:DescribeAssetBundleImportJob",
"quicksight:ListAssetBundleImportJobs",
"quicksight:StartAssetBundleImportJob"
],
"Resource": "arn:aws:quicksight:*:*:asset-bundle-import-job/*"
}
]
},
"VersionId": "v1",
"IsDefaultVersion": true,
"CreateDate": "2024-03-27T21:40:34+00:00"
}
}Version History (4 recorded)
Raw historyAWSQuickSightAssetBundleImportPolicy - Policy Version v1
No recorded action delta - this version predates the change index. View the raw diff.
Mar 12, 2026
c8a2fc2Update detected
No recorded action delta - this version predates the change index. View the raw diff.
Sep 18, 2024
aafbae9Update detected
No recorded action delta - this version predates the change index. View the raw diff.
May 13, 2024
1b36617Update detected
No recorded action delta - this version predates the change index. View the raw diff.
Mar 27, 2024
f6924ce