
Accelerating Data Insights with Amazon Q in QuickSight: Self-Service Analytics for Everyone
Business intelligence is only as valuable as it is accessible. Traditionally, data teams have built dashboards and reports while business users relied on them for insights. Amazon Q in QuickSight changes this dynamic by bringing natural language querying directly into dashboards, empowering users to ask questions and get instant visual responses — all without writing SQL or waiting on analysts.In this guide, we’ll explore what Amazon Q in QuickSight is, how it works, how to enable it, and how it improves
What Is Amazon Q in QuickSight?
How Amazon Q in QuickSight Solves This
End-to-End Implementation Steps
What Happens Behind the Curtain With Glue:
Step 3: Steps to Use Athena Table in QuickSight
Step 4: Enable Amazon Q in QuickSight
Step 5: Use Magic of GEN-AI in Quicksight
Build visuals with Generative BI:
Creating executive summaries with Amazon Q in QuickSight:
Converting to the Generative Q&A experience
Working with scenarios in Amazon QuickSight
Detailed Features of Amazon Q in QuickSight
3. Scenario Analysis (What-If Analysis)
- “What were our top-selling products last month?”
- “What does this error message mean?”
- “Summarize our Q1 sales performance.”
- Interactive dashboard
- Paginated reports
- Visual analytics
- Ask questions in plain English
- Build visuals and dashboards without coding
- Generate summaries and narratives from data
- Perform “what-if” analysis
- Get contextual insights from multiple datasets
- Massive Log Volumes: VPC Flow Logs generate millions of records per day — troubleshooting spikes or anomalies requires complex SQL queries and long Athena scans.
- Slow Iteration: Each ad-hoc query can take minutes to complete, slowing incident response and root-cause analysis.
- Toolchain Friction: You must bounce between S3, Athena, CloudWatch, and custom scripts to extract, transform, and visualize.
- Skill Gaps: Not every on-call engineer is comfortable writing Athena SQL or building QuickSight dashboards from scratch.
- “Ask” Instead of “Query”: Simply type “Which subnets saw the highest reject rate this morning?” and get an immediate visual — no SQL required.
- Context-Aware Insights: Q respects your dashboard filters (time range, VPC ID, subnet) and the underlying SPICE or live Athena table schema.
- Rapid Triage: From incident to insight in seconds, you can drill down on anomalies without waiting for analysts or hand-crafting queries.
- Self-Service Analytics: On-call teams and even application owners can explore traffic patterns on their own.

- Prepare an S3 bucket
logs.<region>.amazonaws.com
) to PutObject
- Open the VPC console
- Select your VPC
- Create the flow log
All
(or Reject
/ Accept
as needed).arn:aws:s3:::my-flow-logs-bucket/prefix/
).- Enable VPC Flow Logs and configure delivery to an S3 bucket.
- Note the S3 path where logs are stored, e.g.
s3://my-vpc-logs/AWSLogs/<account-id>/vpcflowlogs/<region>/
- Open Athena Console: https://console.aws.amazon.com/athena/
- Set Athena query result location (e.g.
s3://my-athena-results/
) under Settings. - Create a Database in Athena
- Create an external table for VPC Flow Logs with this schema:


- Athena uses AWS Glue as its Data Catalog service.
CREATE EXTERNAL TABLE
statement in Athena:- A Glue table is created under the specified database.
- The table stores metadata such as:
- Column names and data types
- Partition keys
- File format and delimiter
- S3 location of the data
- Queried by Athena
- Go to AWS Glue Console
- Navigate to Data Catalog → Databases → Select your database → See your table.
- Ensure QuickSight has permission to access Athena & S3
- In the QuickSight console, go to Manage QuickSight > Security & Permissions
- Enable access to Amazon Athena
- Amazon S3 buckets (your VPC flow log bucket and Athena query result bucket)
- If needed, add the IAM role used by QuickSight to access the correct S3 paths.
- Run a test query in the Athena Console to confirm data is being read.
- Go to Datasets > New Dataset
- Choose Athena as the data source
- If prompted, create a new data source (e.g., name it
vpc_flow_logs_source
) - Choose your Athena database (e.g.,
vpc_logs
) and table (e.g.,vpc_flow_logs
)

Choose either:
- Direct Query: Fetches data live from Athena (good for large data sets)
- SPICE: Ingests and caches data in QuickSight for faster performance
- Open the QuickSight console.
- Choose the user icon at the top right, and then choose Manage QuickSight.
- Choose Manage users to open the Manage Users page.
- To change the role of an existing user, locate that user on the Manage Users table and choose the role that you want to grant them from the Role dropdown. The image below shows the Manage users table with the Role dropdown opened.





“What’s the source and dest ADDR for the last 6 months by region?”
- Build visuals automatically based on your question
- Generate executive summaries highlighting key metrics
- Explain charts by summarizing trends and anomalies in simple language
- Create data stories that narrate insights in paragraph form, useful for presentations and reports
“What happens to the vpc that reject addr has been increased”