How do you embed a QuickSight dashboard in an application?

Your backend calls GenerateEmbedUrlForRegisteredUser or GenerateEmbedUrlForAnonymousUser to obtain a short-lived URL, and the frontend loads it in an iframe, typically through the QuickSight embedding SDK. The application domain must be allow-listed in QuickSight settings.

Registered-user embedding maps each viewer to a QuickSight identity, so RLS and permissions apply naturally. Anonymous embedding, billed per session, has no identity — isolation is enforced with session tags that the rules dataset matches on.

Parameters can pre-filter the dashboard, but a parameter only controls what is displayed. Row-level security controls what can be queried. In a multi-tenant embed, isolation must come from RLS or session tags, never from a parameter.