AWS clean-rooms documentation change
Summary
Added parameter handling instructions and security guidance for job execution
Security assessment
Added explicit security documentation about safely handling parameter values (validation requirements and character limits) and linked to secure parameter handling resources. This improves security documentation but doesn't fix a specific vulnerability.
Diff
diff --git a/clean-rooms/latest/userguide/run-jobs-with-analysis-template.md b/clean-rooms/latest/userguide/run-jobs-with-analysis-template.md index a58232320..3164c22c0 100644 --- a//clean-rooms/latest/userguide/run-jobs-with-analysis-template.md +++ b//clean-rooms/latest/userguide/run-jobs-with-analysis-template.md @@ -33 +33,17 @@ The parameters from the PySpark analysis template will automatically populate in - 6. Specify the supported **Worker type** and the **Number of workers**. + 6. If the analysis template has parameters defined, under **Parameters** , provide values for the parameters: + + 1. For each parameter, view the **Parameter name** and **Default value** (if configured). + + 2. Enter a **Value** for each parameter you want to override. + +###### Note + +If you don't provide a value but a default value exists, the default value will be used. + +###### Important + +Parameter values can be up to 1,000 characters and support UTF-8 encoding. All parameter values are treated as strings and passed to your user script through the context object. + +Ensure that your user script validates and handles parameter values safely. For more information about secure parameter handling, see [Working with parameters in PySpark analysis templates](./pyspark-parameter-handling.html). + + 7. Specify the supported **Worker type** and the **Number of workers**. @@ -48 +64 @@ Different worker types and number of workers have associated costs. To learn mor - 7. Choose **Run**. + 8. Choose **Run**. @@ -54 +70 @@ You can't run the job if the member who can receive results hasn’t configured - 8. Continue to adjust parameters and run your job again, or choose the **+** button to start a new job in a new tab. + 9. Continue to adjust parameters and run your job again, or choose the **+** button to start a new job in a new tab.