Amazon QuickSight で制限付きフォルダ内を使った時に匿名ユーザー向けのダッシュボード埋め込みが出来るか確認してみた

% cat hoge2.json
{
    "AwsAccountId": "123456789012",
    "FolderId": "hoge0917folder",
    "Name": "hoge0917folder",
    "FolderType": "RESTRICTED",
    "Permissions": [
        {
            "Principal": "arn:aws:quicksight:ap-northeast-1:123456789012:user/default/hogeadmin",
            "Actions": [
                "quicksight:CreateFolder",
                "quicksight:DescribeFolder",
                "quicksight:CreateFolderMembership",
                "quicksight:DeleteFolderMembership",
                "quicksight:DescribeFolderPermissions"
            ]
        }
    ],
    "SharingModel": "ACCOUNT"
}
% aws quicksight create-folder --cli-input-json file://hoge2.json --profile hogeadmin
{
    "Status": 200,
    "Arn": "arn:aws:quicksight:ap-northeast-1:123456789012:folder/hoge0917folder",
    "FolderId": "hoge0917folder",
    "RequestId": "913957d1-298b-4fd0-b403-eecb751f19d9"
}

% cat hoge.json
{
    "AwsAccountId": "123456789012",
    "SessionLifetimeInMinutes": 60,
    "Namespace": "default",
    "AuthorizedResourceArns": [
        "arn:aws:quicksight:ap-northeast-1:123456789012:dashboard/e9323178-beb7-488f-b47b-702029e3b543"
    ],
    "ExperienceConfiguration": {
        "Dashboard": {
            "InitialDashboardId": "e9323178-beb7-488f-b47b-702029e3b543"
        }
    }
}
% aws quicksight generate-embed-url-for-anonymous-user --cli-input-json file://hoge.json --profile hogeadmin
{
    "Status": 200,
    "EmbedUrl": "https://ap-northeast-1.quicksight.aws.amazon.com/embed/e385 ... authcode=true",
    "RequestId": "26b50773-ee17-4bc8-bc14-95e3a9ba35ad",
    "AnonymousUserArn": "arn:aws:quicksight:ap-northeast-1:123456789012:anonymousUser/default/2af2107619bf48b8ad58e9244b451d5c"
}