Question 1

Can Ana read QuickSight dashboard content?

Accepted Answer

Ana can read dashboard metadata, visuals, and definitions through the QuickSight API. For actual chart values, Ana queries the underlying datasets or runs the associated SQL against your data source, which produces live results rather than cached dashboard snapshots.

Question 2

Does Ana support IAM role assumption?

Accepted Answer

Yes. For tighter security, configure the connector to assume a dedicated TextQL IAM role rather than using long-lived access keys. The role can be scoped to specific QuickSight namespaces or dashboards, and all actions are captured in AWS CloudTrail.

Question 3

How are IAM credentials secured?

Accepted Answer

Access keys or role credentials are encrypted at rest in TextQL's credential vault and injected at the network layer by our egress proxy. Ana's Python sandbox never sees the raw values. Temporary role credentials are refreshed transparently outside the sandbox.

Question 4

Can Ana see SPICE data?

Accepted Answer

Ana can access the metadata of SPICE datasets including refresh history and row counts. To query actual SPICE data Ana either uses the QuickSight query endpoint or reads from the original data source. Both options respect QuickSight's security model.

Question 5

Is CloudTrail integration available?

Accepted Answer

Yes. Because the connector uses standard AWS API calls, every action Ana takes appears in your CloudTrail logs automatically. This gives you a unified audit trail across TextQL and the rest of your AWS environment.