AWS clean-rooms documentation change
Summary
Updated documentation for contributing training data in AWS Clean Rooms ML with revised workflow steps, added analysis controls configuration, and improved terminology
Security assessment
The changes introduce new analysis controls (step 12-14,16) including output column restrictions and differential privacy settings, which are security features. However, there is no evidence this addresses a specific vulnerability - rather it documents existing security controls. The 'Specify analysis results controls' and differential privacy options help prevent data leakage but are part of normal feature documentation.
Diff
diff --git a/clean-rooms/latest/userguide/custom-model-training-data.md b/clean-rooms/latest/userguide/custom-model-training-data.md index 420e8eef8..38189b2bf 100644 --- a//clean-rooms/latest/userguide/custom-model-training-data.md +++ b//clean-rooms/latest/userguide/custom-model-training-data.md @@ -5 +5 @@ -# Contributing training data +# Contributing training data in AWS Clean Rooms ML @@ -7 +7,5 @@ -After the collaboration creator has created the collaboration and invited members have joined, you are ready to contribute training data to the collaboration. Any member can contribute training data, and they must follow these steps to do so: +After the collaboration creator has created the collaboration and invited members have joined, you are ready to contribute training data to the collaboration. Any member can contribute training data. + +The following image shows creating the container training image as the first step before you configure a model algorithm and then associate it with the collaboration. + + @@ -14 +18 @@ Console - 1. Sign in to the AWS Management Console and open the [AWS Clean Rooms console](https://console.aws.amazon.com/cleanrooms/home) with your AWS account (if you haven't yet done so). + 1. Sign in to the AWS Management Console and open the AWS Clean Rooms console at [https://console.aws.amazon.com/cleanrooms](https://console.aws.amazon.com/cleanrooms/home). @@ -38 +42 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 12. For **Differential privacy** , choose **Turn off**. + 12. For **Specify analysis controls** , choose between **Review each new analysis** and **Allow any analysis by specific collaborators**. @@ -40 +44 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 13. Choose **Next**. + 13. (Optional) For **Specify analysis results controls** , for **Columns not allowed in output** specify whether you want to exclude any columns from the output. If you choose **None** , no columns are excluded from the output. If you choose **Custom list** , you can specify certain columns that will be removed from the output. @@ -42 +46 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 14. For **Analyses for direct querying** , choose between **Review each new analysis before it is allowed to be run on this table** and **Allow any queries created by specific collaborators to run without review on this table**. + 14. For **Additional analyses applied to output** specify whether you want to allow, deny, or require an additional analysis before results are generated. @@ -46,3 +50 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 16. For **Columns not allowed in output** specify whether you want to exclude any columns from the output. If you choose **None** , no columns are excluded from the output. If you choose **Custom list** , you can specify certain columns that will be removed from the output. - - 17. For **Additional analyses applied to output** specify whether you want to allow, deny, or require an additional analysis before results are generated. + 16. (Optional) For **Set differential privacy** , choose **Turn off**. @@ -50 +52 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 18. Choose **Next**. + 17. Choose **Next**. @@ -52 +54 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 19. Review the information on the **Review and configure** page, then choose **Configure analysis rule**. + 18. Review the information on the **Review and configure** page, then choose **Configure analysis rule**. @@ -54 +56 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 20. From the table details page, choose **Associate to collaboration**. + 19. From the table details page, choose **Associate to collaboration**. @@ -56 +58 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 21. In the **Associate table** window, select the collaboration that you want to associate this table to and choose **Choose collaboration**. + 20. In the **Associate table** dialog box, select the collaboration that you want to associate this table to and choose **Choose collaboration**. @@ -58 +60 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 22. On the **Associate table** page, review the information in **Table association details** , **Service access** , and **Tags**. When it's correct, choose **Associate table**. + 21. On the **Associate table** page, review and verify the information in **Table association details** , **Service access** , and **Tags**. Choose **Associate table**. @@ -60 +62 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 23. In the **Tables associated by you** table, select the radio button next to the table that you just associated. From the **Actions** menu, choose **Configure** in the **Collaboration analysis rule** group. + 22. In the **Tables associated by you** table, select the radio button next to the table that you just associated. From the **Actions** menu, choose **Configure** in the **Collaboration analysis rule** group. @@ -62 +64 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t - 24. For **Allowed additional analyses** , choose whether any collaboration members or specific collaboration members can perform additional analyses. + 23. On the **Configure collaboration analysis rule** page, for **Allowed additional analyses** , choose whether any collaboration members or specific collaboration members can perform additional analyses. @@ -64 +66 @@ For **Amazon S3** , choose a **Database** from the dropdown list. Next, select t -For **Results delivery** , choose which members are allowed to recieve results from query outputs. +For **Results delivery** , choose which members are allowed to receive results from query outputs. @@ -66 +68 @@ For **Results delivery** , choose which members are allowed to recieve results f - 25. Choose **Configure analysis rule**. + 24. Choose **Configure analysis rule**. @@ -157 +159 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Creating the collaboration +Creating and joining the collaboration