Quicksight standard account subscription via console

Question

Hi,
I noticed that the 'standard' account subscription is not available from QS UI anymore, only enterprise subscriptions are created. I have a controlled AWS environment (Labs) where users could create and use STANDARD account subscription. I do not want them to have access to features which are available to  'ENTEPRISE' subscription. I also do not want to create STANDARD account beforehand using API. Is there a way where I can lower the privileges available to these accounts after they are created so that it mimics 'standard'?

Answer

Try SCP (Service Control Policy)
https://docs.aws.amazon.com/quicksight/latest/user/security-scp.html

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Deny",
            "Action": [
                "quicksight:Subscribe"
            ],
            "Resource": [
                "*"
            ],
            "Condition": {
                "StringEquals": {
                    "quicksight:Edition": "enterprise"
                }
            }
        }
    ]
}
```

Quicksight standard account subscription via console

Relevant content