AWS Clean Rooms ML Diagnostics
When to use
Any AWS Clean Rooms ML investigation — training model failures, configured model errors, audience generation issues, lookalike models, collaboration ML configuration, privacy budgets, seed audiences, output configuration, S3 data access, IAM permissions, or differential privacy.
Investigation workflow
Step 1 — Collect and triage
aws cleanroomsml list-training-datasets --query 'trainingDatasets[*].{Name:name,Arn:trainingDatasetArn,Status:status,CreateTime:createTime}'
aws cleanroomsml list-configured-model-algorithms --query 'configuredModelAlgorithms[*].{Name:name,Arn:configuredModelAlgorithmArn,CreateTime:createTime}'
aws cleanroomsml list-audience-models --query 'audienceModels[*].{Name:name,Arn:audienceModelArn,Status:status}'
Step 2 — Domain deep dive
aws cleanroomsml get-training-dataset --training-dataset-arn <arn>
aws cleanroomsml get-audience-model --audience-model-arn <arn>
aws cleanroomsml get-configured-audience-model --configured-audience-model-arn <arn>
Step 3 — Detailed investigation
aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventSource,AttributeValue=cleanroomsml.amazonaws.com --max-results 20
aws cleanroomsml list-audience-generation-jobs --query 'audienceGenerationJobs[*].{Name:name,Arn:audienceGenerationJobArn,Status:status}'
aws cleanrooms list-collaborations --query 'collaborationList[*].{Name:name,Id:id,Status:status}'
Read references/guardrails.md before concluding on any Clean Rooms ML issue.
Tool quick reference
| Tool / API |
When to use |
cleanroomsml list-training-datasets |
List training datasets |
cleanroomsml get-training-dataset |
Get training dataset details |
cleanroomsml list-audience-models |
List audience models |
cleanroomsml get-audience-model |
Get audience model details |
cleanroomsml get-configured-audience-model |
Get configured audience model |
cleanroomsml list-audience-generation-jobs |
List audience generation jobs |
cleanrooms list-collaborations |
List Clean Rooms collaborations |
Gotchas: AWS Clean Rooms ML
- Clean Rooms ML operates WITHIN a Clean Rooms collaboration. You must have an active collaboration before using ML features.
- Training datasets must conform to specific schema requirements. Column types and formats are strictly validated during training.
- Lookalike models require a seed audience of sufficient size (minimum varies by region). Too-small seed audiences produce poor results or fail.
- Privacy budgets are consumed per audience generation job. Once exhausted, no more audience generation jobs can run until the budget refreshes or is increased.
- Configured audience models must be associated with a collaboration before audience generation. The association defines output constraints.
- Differential privacy adds noise to outputs. Higher epsilon values reduce noise but weaken privacy guarantees. This is a fundamental tradeoff.
- S3 data must be in the same region as the Clean Rooms collaboration. Cross-region data access is not supported.
Anti-hallucination rules
- Always cite specific ARNs, job IDs, or API responses as evidence.
- Clean Rooms ML and Clean Rooms are separate services. Never conflate their APIs.
- Privacy budgets are finite resources. Never suggest they are unlimited or auto-replenishing.
- Differential privacy epsilon values have specific mathematical meaning. Never invent epsilon recommendations.
- Spend no more than 2 minutes on any single hypothesis. Pivot if inconclusive.
12 runbooks
| Category |
IDs |
Covers |
| A — Training |
A1–A2 |
Training model failures, configured model errors |
| B — Audience |
B1–B2 |
Audience generation issues, lookalike model errors |
| C — Collaboration |
C1–C2 |
Collaboration ML config, privacy budget issues |
| D — Seed & Output |
D1–D2 |
Seed audience errors, output configuration |
| E — Access |
E1–E2 |
S3 data access, IAM permissions |
| F — Privacy |
F1 |
Differential privacy |
| Z — Catch-All |
Z1 |
General troubleshooting |
1---2name: cleanrooms-ml-diagnostics3description: Use this skill to investigate and troubleshoot AWS Clean Rooms ML problems by analyzing training model failures, configured model errors, audience generation issues, lookalike models, collaboration ML config, privacy budgets, seed audiences, output configuration, S3 data access, IAM permissions, differential privacy, and following structured runbooks. Activate when: training model failures, configured model errors, audience generation issues, lookalike model problems, collaboration ML configuration errors, privacy budget exhaustion, seed audience errors, output configuration failures, S3 data access issues, IAM permission errors, differential privacy problems, or the user says something is wrong with Clean Rooms ML.4---56# AWS Clean Rooms ML Diagnostics78## When to use910Any AWS Clean Rooms ML investigation — training model failures, configured model errors, audience generation issues, lookalike models, collaboration ML configuration, privacy budgets, seed audiences, output configuration, S3 data access, IAM permissions, or differential privacy.1112## Investigation workflow1314### Step 1 — Collect and triage1516```17aws cleanroomsml list-training-datasets --query 'trainingDatasets[*].{Name:name,Arn:trainingDatasetArn,Status:status,CreateTime:createTime}'18aws cleanroomsml list-configured-model-algorithms --query 'configuredModelAlgorithms[*].{Name:name,Arn:configuredModelAlgorithmArn,CreateTime:createTime}'19aws cleanroomsml list-audience-models --query 'audienceModels[*].{Name:name,Arn:audienceModelArn,Status:status}'20```2122### Step 2 — Domain deep dive2324```25aws cleanroomsml get-training-dataset --training-dataset-arn <arn>26aws cleanroomsml get-audience-model --audience-model-arn <arn>27aws cleanroomsml get-configured-audience-model --configured-audience-model-arn <arn>28```2930### Step 3 — Detailed investigation3132```33aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventSource,AttributeValue=cleanroomsml.amazonaws.com --max-results 2034aws cleanroomsml list-audience-generation-jobs --query 'audienceGenerationJobs[*].{Name:name,Arn:audienceGenerationJobArn,Status:status}'35aws cleanrooms list-collaborations --query 'collaborationList[*].{Name:name,Id:id,Status:status}'36```3738Read `references/guardrails.md` before concluding on any Clean Rooms ML issue.3940## Tool quick reference4142| Tool / API | When to use |43|------------|-------------|44| `cleanroomsml list-training-datasets` | List training datasets |45| `cleanroomsml get-training-dataset` | Get training dataset details |46| `cleanroomsml list-audience-models` | List audience models |47| `cleanroomsml get-audience-model` | Get audience model details |48| `cleanroomsml get-configured-audience-model` | Get configured audience model |49| `cleanroomsml list-audience-generation-jobs` | List audience generation jobs |50| `cleanrooms list-collaborations` | List Clean Rooms collaborations |5152## Gotchas: AWS Clean Rooms ML5354- Clean Rooms ML operates WITHIN a Clean Rooms collaboration. You must have an active collaboration before using ML features.55- Training datasets must conform to specific schema requirements. Column types and formats are strictly validated during training.56- Lookalike models require a seed audience of sufficient size (minimum varies by region). Too-small seed audiences produce poor results or fail.57- Privacy budgets are consumed per audience generation job. Once exhausted, no more audience generation jobs can run until the budget refreshes or is increased.58- Configured audience models must be associated with a collaboration before audience generation. The association defines output constraints.59- Differential privacy adds noise to outputs. Higher epsilon values reduce noise but weaken privacy guarantees. This is a fundamental tradeoff.60- S3 data must be in the same region as the Clean Rooms collaboration. Cross-region data access is not supported.6162## Anti-hallucination rules63641. Always cite specific ARNs, job IDs, or API responses as evidence.652. Clean Rooms ML and Clean Rooms are separate services. Never conflate their APIs.663. Privacy budgets are finite resources. Never suggest they are unlimited or auto-replenishing.674. Differential privacy epsilon values have specific mathematical meaning. Never invent epsilon recommendations.685. Spend no more than 2 minutes on any single hypothesis. Pivot if inconclusive.6970## 12 runbooks7172| Category | IDs | Covers |73|----------|-----|--------|74| A — Training | A1–A2 | Training model failures, configured model errors |75| B — Audience | B1–B2 | Audience generation issues, lookalike model errors |76| C — Collaboration | C1–C2 | Collaboration ML config, privacy budget issues |77| D — Seed & Output | D1–D2 | Seed audience errors, output configuration |78| E — Access | E1–E2 | S3 data access, IAM permissions |79| F — Privacy | F1 | Differential privacy |80| Z — Catch-All | Z1 | General troubleshooting |
aws-samples