When embedding Amazon QuickSight Graphs via Embed link in your Hubspot Dashboard, be sure to allowlist both the Hubspot app domain AND the Dashboard Editor domain, or else your Dashboard will not trigger the security authentication call on AWS for you to login. Enable all subdomains, so you won't experience any issues.
So, in QuickSight, allowlist: - app.hubspot.com (this is where the Dashboard appears - preview.hubspoteditor.com (this is the Dashboard Editor domain that actually calls th Security Auth for AWS. Without it, no security auth gets called, and your Dashboard will only show a broken AWS link.).
You can always double check to see if the security auth pop-up is failing to get called using the Inspect > Console tool, and seeing what is failing to load.
