AWS clean-rooms documentation change
Summary
Added documentation for detailed monitoring feature enabling CloudWatch metrics publication for operational monitoring. Renumbered subsequent steps accordingly.
Security assessment
The change introduces optional detailed monitoring for operational insights (query performance/resource utilization) but contains no evidence of addressing security vulnerabilities. Monitoring enhancements don't directly mitigate security risks without explicit security context.
Diff
diff --git a/clean-rooms/latest/userguide/create-collab-ml-modeling.md b/clean-rooms/latest/userguide/create-collab-ml-modeling.md index f5761bc78..33f198507 100644 --- a//clean-rooms/latest/userguide/create-collab-ml-modeling.md +++ b//clean-rooms/latest/userguide/create-collab-ml-modeling.md @@ -79 +79,7 @@ You must inform the collaboration member that their **Member AWS account ID** an - 4. Under **Allowed query results regions** , select one or more AWS Regions where you want to send query results. + 4. If you want to enable **Detailed monitoring** , select the **Enable detailed monitoring** checkbox. + +The analysis runner and configured payor can choose to enable detailed metrics when they create their membership. When enabled, detailed monitoring metrics will be published to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. These metrics will be available to the analysis runner and configured payor in their respective AWS accounts. + +For more information about CloudWatch pricing, see [CloudWatch Pricing](https://aws.amazon.com/cloudwatch/pricing/). + + 5. Under **Allowed query results regions** , select one or more AWS Regions where you want to send query results. @@ -89 +95 @@ For more information about Regions, see [Regions and Endpoints](https://docs.aws - 5. (Optional) Manage access to your data with **Automatic change request approval** by configuring which settings can be changed automatically without manual approvals for a change request. By default, some settings can only be changed by submitting a change request which must be approved by all members before it can take effect. + 6. (Optional) Manage access to your data with **Automatic change request approval** by configuring which settings can be changed automatically without manual approvals for a change request. By default, some settings can only be changed by submitting a change request which must be approved by all members before it can take effect. @@ -111 +117 @@ If you choose this option, you can track all collaboration configuration modific - 6. (Optional) If you want to enable the **Cryptographic computing** capability, select the **Enable cryptographic computing** checkbox. + 7. (Optional) If you want to enable the **Cryptographic computing** capability, select the **Enable cryptographic computing** checkbox. @@ -151 +157 @@ Verify these configurations carefully before completing the next step. After you - 7. If you want to enable **Tags** for the collaboration resource, choose **Add new tag** and then enter the **Key** and **Value** pair. + 8. If you want to enable **Tags** for the collaboration resource, choose **Add new tag** and then enter the **Key** and **Value** pair. @@ -153 +159 @@ Verify these configurations carefully before completing the next step. After you - 8. Choose **Next**. + 9. Choose **Next**.