AWS Security ChangesHomeSearch

AWS clean-rooms documentation change

Service: clean-rooms · 2026-04-19 · Documentation low

File: clean-rooms/latest/userguide/run-jobs-with-analysis-template.md

Summary

Added comprehensive documentation for Spark properties configuration in AWS Clean Rooms analysis jobs, including property definitions, default values, and usage guidelines.

Security assessment

This change adds extensive configuration options for Spark properties in Clean Rooms jobs, but there is no evidence in the diff that it addresses a specific security vulnerability, weakness, or incident. The properties mentioned are general Spark configuration parameters for performance, reliability, and resource management (e.g., retry limits, timeouts, memory settings). While some properties like network timeouts and retry settings could indirectly affect system resilience, the documentation does not highlight security fixes or vulnerabilities. This appears to be a routine documentation update to provide users with more configuration options.

Diff

diff --git a/clean-rooms/latest/userguide/run-jobs-with-analysis-template.md b/clean-rooms/latest/userguide/run-jobs-with-analysis-template.md
index 34b3290df..ed25ddc0a 100644
--- a//clean-rooms/latest/userguide/run-jobs-with-analysis-template.md
+++ b//clean-rooms/latest/userguide/run-jobs-with-analysis-template.md
@@ -66 +66,152 @@ Different worker types and number of workers have associated costs. To learn mor
-  8. Choose **Run**.
+  8. Specify the supported **Spark properties**.
+
+    1. Select **Add Spark properties**.
+
+    2. On the **Spark properties** dialog box, choose a **Property name** from the dropdown list and enter a **Value**.
+
+The following tables provide a definition for each property.
+
+For more information about Spark properties, see [Spark Properties](https://spark.apache.org/docs/latest/configuration.html#spark-properties) in the Apache Spark documentation. 
+
+###### Note
+
+You can configure a maximum of 50 Spark properties. Each property value can be up to 500 characters.
+
+Property Name | Description | Default Value  
+---|---|---  
+spark.task.maxFailures |  Controls how many consecutive times a task can fail before the job fails. Requires a value greater than or equal to 1. The number of allowed retries equals this value minus 1. The failure count resets if any attempt succeeds. Failures across different tasks don't accumulate toward this limit. |  4  
+spark.sql.files.maxPartitionBytes |  Sets the maximum number of bytes to pack into a single partition when reading from file-based sources such as Parquet, JSON, and ORC. |  128MB  
+spark.hadoop.fs.s3.maxRetries |  Sets the maximum number of retry attempts for Amazon S3 file operations. |  (none)  
+spark.network.timeout |  Sets the default timeout for all network interactions. Overrides the following timeout settings if they aren't configured:
+     * spark.storage.blockManagerHeartbeatTimeoutMs
+     * spark.shuffle.io.connectionTimeout
+     * spark.rpc.askTimeout
+     * spark.rpc.lookupTimeout
+|  120s  
+spark.rdd.compress |  Specifies whether to compress serialized RDD partitions using spark.io.compression.codec. Applies to StorageLevel.MEMORY_ONLY_SER in Java and Scala, or StorageLevel.MEMORY_ONLY in Python. Reduces storage space but requires additional CPU processing time. |  false  
+spark.shuffle.spill.compress |  Specifies whether to compress shuffle spill data using spark.io.compression.codec. |  true  
+spark.shuffle.compress |  Specifies whether to compress map output files. Compression uses spark.io.compression.codec. |  true  
+spark.shuffle.service.index.cache.size |  Sets the cache size limit, in bytes unless otherwise specified. |  100m  
+spark.shuffle.io.maxRetries |  Sets the maximum number of retries for fetches that fail due to IO-related exceptions. |  3  
+spark.shuffle.io.retryWait |  Sets the wait time between retries of fetches. The maximum delay caused by retrying is 15 seconds by default, calculated as maxRetries * retryWait. |  5s  
+spark.shuffle.io.connectionTimeout |  Sets the timeout for established connections between shuffle servers and clients to be marked as idle and closed if there are still outstanding fetch requests but no traffic on the channel. |  (value of spark.network.timeout)  
+spark.driver.maxResultSize |  Sets the total size limit of serialized results of all partitions for each Spark action, in bytes. Should be at least 1M, or 0 for unlimited. |  1g  
+spark.memory.fraction |  Sets the fraction of (heap space - 300MB) used for execution and storage. The lower this value, the more frequently spills and cached data eviction occur. Leaving this at the default value is recommended. |  0.6  
+spark.scheduler.mode |  Sets the scheduling mode between jobs submitted to the same SparkContext. Can be set to FAIR to use fair sharing instead of queueing jobs one after another. Supported values: FAIR, FIFO. |  FIFO  
+spark.sql.adaptive.advisoryPartitionSizeInBytes |  Sets the target size in bytes for shuffle partitions during adaptive optimization when spark.sql.adaptive.enabled is true. Controls partition size when coalescing small partitions or splitting skewed partitions. |  (value of spark.sql.adaptive.shuffle.targetPostShuffleInputSize)  
+spark.sql.adaptive.autoBroadcastJoinThreshold |  Sets the maximum table size in bytes for broadcasting to worker nodes during joins. Applies only in adaptive framework. Uses the same default value as spark.sql.autoBroadcastJoinThreshold. Set to -1 to disable broadcasting. |  (none)  
+spark.sql.adaptive.coalescePartitions.enabled |  Specifies whether to coalesce contiguous shuffle partitions based on spark.sql.adaptive.advisoryPartitionSizeInBytes to optimize task size. Requires spark.sql.adaptive.enabled to be true. |  true  
+spark.sql.adaptive.coalescePartitions.initialPartitionNum |  Defines the initial number of shuffle partitions before coalescing. Requires both spark.sql.adaptive.enabled and spark.sql.adaptive.coalescePartitions.enabled to be true. Defaults to the value of spark.sql.shuffle.partitions. |  (none)  
+spark.sql.adaptive.coalescePartitions.minPartitionSize |  Sets the minimum size for coalesced shuffle partitions to prevent partitions from becoming too small during adaptive optimization. |  1 MB  
+spark.sql.adaptive.coalescePartitions.parallelismFirst |  Specifies whether to calculate partition sizes based on cluster parallelism instead of spark.sql.adaptive.advisoryPartitionSizeInBytes during partition coalescing. Generates smaller partition sizes than the configured target size to maximize parallelism. We recommend setting this to false on busy clusters to improve resource utilization by preventing excessive small tasks. |  true  
+spark.sql.adaptive.enabled |  Specifies whether to enable adaptive query execution to re-optimize query plans during query execution, based on accurate runtime statistics. |  true  
+spark.sql.adaptive.forceOptimizeSkewedJoin |  Specifies whether to force enable OptimizeSkewedJoin even if it introduces extra shuffle. |  false  
+spark.sql.adaptive.localShuffleReader.enabled |  Specifies whether to use local shuffle readers when shuffle partitioning isn't required, such as after converting from sort-merge joins to broadcast-hash joins. Requires spark.sql.adaptive.enabled to be true. |  true  
+spark.sql.adaptive.maxShuffledHashJoinLocalMapThreshold |  Sets the maximum partition size in bytes for building local hash maps. Prioritizes shuffled hash joins over sort-merge joins when:
+     * This value equals or exceeds spark.sql.adaptive.advisoryPartitionSizeInBytes
+     * All partition sizes are within this limit
+Overrides spark.sql.join.preferSortMergeJoin setting. |  0 bytes  
+spark.sql.adaptive.optimizeSkewsInRebalancePartitions.enabled |  Specifies whether to optimize skewed shuffle partitions by splitting them into smaller partitions based on spark.sql.adaptive.advisoryPartitionSizeInBytes. Requires spark.sql.adaptive.enabled to be true. |  true  
+spark.sql.adaptive.rebalancePartitionsSmallPartitionFactor |  Defines the size threshold factor for merging partitions during splitting. Partitions smaller than this factor multiplied by spark.sql.adaptive.advisoryPartitionSizeInBytes are merged. |  0.2  
+spark.sql.adaptive.skewJoin.enabled |  Specifies whether to handle data skew in shuffled joins by splitting and optionally replicating skewed partitions. Applies to sort-merge and shuffled hash joins. Requires spark.sql.adaptive.enabled to be true. |  true  
+spark.sql.adaptive.skewJoin.skewedPartitionFactor |  Determines the size factor that determines partition skew. A partition is skewed when its size exceeds both:
+     * This factor multiplied by the median partition size
+     * The value of spark.sql.adaptive.skewJoin.skewedPartitionThresholdInBytes
+|  5  
+spark.sql.adaptive.skewJoin.skewedPartitionThresholdInBytes |  Sets the size threshold in bytes for identifying skewed partitions. A partition is skewed when its size exceeds both:
+     * This threshold
+     * The median partition size multiplied by spark.sql.adaptive.skewJoin.skewedPartitionFactor
+We recommend setting this value larger than spark.sql.adaptive.advisoryPartitionSizeInBytes. |  256MB  
+spark.sql.broadcastTimeout |  Controls the timeout period in seconds for the broadcast operations during broadcast joins. |  300 seconds  
+spark.sql.cbo.enabled |  Specifies whether to enable cost-based optimization (CBO) for plan statistics estimation. |  false  
+spark.sql.cbo.joinReorder.dp.star.filter |  Specifies whether to apply star-join filter heuristics during cost-based join enumeration. |  false  
+spark.sql.cbo.joinReorder.dp.threshold |  Sets the maximum number of joined nodes allowed in the dynamic programming algorithm. |  12  
+spark.sql.cbo.joinReorder.enabled |  Specifies whether to enable join reordering in cost-based optimization (CBO). |  false  
+spark.sql.cbo.planStats.enabled |  Specifies whether to fetch row counts and column statistics from the catalog during logical plan generation. |  false  
+spark.sql.cbo.starSchemaDetection |  Specifies whether to enable join reordering based on star schema detection. |  false  
+spark.sql.files.maxPartitionNum |  Sets the target maximum number of split file partitions for file-based sources (Parquet, JSON, and ORC). Rescales partitions when the initial count exceeds this value. This is a suggested target, not a guaranteed limit. |  (none)  
+spark.sql.files.maxRecordsPerFile |  Sets the maximum number of records to write to a single file. No limit applies when set to zero or a negative value. |  0  
+spark.sql.files.minPartitionNum |  Sets the target minimum number of split file partitions for file-based sources (Parquet, JSON, and ORC). Defaults to spark.sql.leafNodeDefaultParallelism. This is a suggested target, not a guaranteed limit. |  (none)  
+spark.sql.inMemoryColumnarStorage.batchSize |  Controls the batch size for columnar caching. Increasing the size improves memory utilization and compression but increases the risk of out-of-memory errors. |  10000  
+spark.sql.inMemoryColumnarStorage.compressed |  Specifies whether to automatically select compression codecs for columns based on data statistics. |  true  
+spark.sql.inMemoryColumnarStorage.enableVectorizedReader |  Specifies whether to enable vectorized reading for columnar caching. |  true  
+spark.sql.legacy.allowHashOnMapType |  Specifies whether to allow hash operations on map type data structures. This legacy setting maintains compatibility with older Spark versions' map type handling. |  (none)  
+spark.sql.legacy.allowNegativeScaleOfDecimal |  Specifies whether to allow negative scale values in decimal type definitions. This legacy setting maintains compatibility with older Spark versions that supported negative decimal scales. |  (none)  
+spark.sql.legacy.castComplexTypesToString.enabled |  Specifies whether to enable legacy behavior for casting complex types to strings. Maintains compatibility with older Spark versions' type conversion rules. |  (none)  
+spark.sql.legacy.charVarcharAsString |  Specifies whether to treat CHAR and VARCHAR types as STRING types. This legacy setting provides compatibility with older Spark versions' string type handling. |  (none)  
+spark.sql.legacy.createEmptyCollectionUsingStringType |  Specifies whether to create empty collections using string type elements. This legacy setting maintains compatibility with older Spark versions' collection initialization behavior. |  (none)  
+spark.sql.legacy.exponentLiteralAsDecimal.enabled |  Specifies whether to interpret exponential literals as decimal types. This legacy setting maintains compatibility with older Spark versions' numeric literal handling. |  (none)  
+spark.sql.legacy.json.allowEmptyString.enabled |  Specifies whether to allow empty strings in JSON processing. This legacy setting maintains compatibility with older Spark versions' JSON parsing behavior. |  (none)  
+spark.sql.legacy.parquet.int96RebaseModelRead |  Specifies whether to use legacy INT96 timestamp rebase mode when reading Parquet files. This legacy setting maintains compatibility with older Spark versions' timestamp handling. |  (none)  
+spark.sql.legacy.timeParserPolicy |  Controls the time parsing behavior for backwards compatibility. This legacy setting determines how timestamps and dates are parsed from strings. |  (none)  
+spark.sql.legacy.typeCoercion.datetimeToString.enabled |  Specifies whether to enable legacy type coercion behavior when converting datetime values to strings. Maintains compatibility with older Spark versions' datetime conversion rules. |  (none)  
+spark.sql.maxSinglePartitionBytes |  Sets the maximum partition size in bytes. The planner introduces shuffle operations for larger partitions to improve parallelism. |  128m  
+spark.sql.metadataCacheTTLSeconds |  Controls the time-to-live (TTL) for metadata caches. Applies to partition file metadata and session catalog caches. Requires:
+     * A positive value greater than zero
+     * spark.sql.catalogImplementation set to hive
+     * spark.sql.hive.filesourcePartitionFileCacheSize greater than zero
+     * spark.sql.hive.manageFilesourcePartitions set to true
+|  -1000ms  
+spark.sql.optimizer.collapseProjectAlwaysInline |  Specifies whether to collapse adjacent projections and inline expressions, even when it causes duplication. |  false  
+spark.sql.optimizer.dynamicPartitionPruning.enabled |  Specifies whether to generate predicates for partition columns used as join keys. |  true  
+spark.sql.optimizer.enableCsvExpressionOptimization |  Specifies whether to optimize CSV expressions in SQL optimizer by pruning unnecessary columns from from_csv operations. |  true  
+spark.sql.optimizer.enableJsonExpressionOptimization |  Specifies whether to optimize JSON expressions in SQL optimizer by:
+     * Pruning unnecessary columns from from_json operations
+     * Simplifying from_json and to_json combinations
+     * Optimizing named_struct operations
+|  true  
+spark.sql.optimizer.excludedRules |  Defines optimizer rules to disable, identified by comma-separated rule names. Some rules cannot be disabled as they are required for correctness. The optimizer logs which rules are successfully disabled. |  (none)  
+spark.sql.optimizer.runtime.bloomFilter.applicationSideScanSizeThreshold |  Sets the minimum aggregated scan size in bytes required to inject a Bloom filter on the application side. |  10GB  
+spark.sql.optimizer.runtime.bloomFilter.creationSideThreshold |  Defines the maximum size threshold for injecting a Bloom filter on the creation side. |  10MB  
+spark.sql.optimizer.runtime.bloomFilter.enabled |  Specifies whether to insert a Bloom filter to reduce shuffle data when one side of a shuffle join has a selective predicate. |  true  
+spark.sql.optimizer.runtime.bloomFilter.expectedNumItems |  Defines the default number of expected items in the runtime Bloom filter. |  1000000  
+spark.sql.optimizer.runtime.bloomFilter.maxNumBits |  Sets the maximum number of bits allowed in the runtime Bloom filter. |  67108864  
+spark.sql.optimizer.runtime.bloomFilter.maxNumItems |  Sets the maximum number of expected items allowed in the runtime Bloom filter. |  4000000  
+spark.sql.optimizer.runtime.bloomFilter.numBits |  Defines the default number of bits used in the runtime Bloom filter. |  8388608  
+spark.sql.optimizer.runtime.rowlevelOperationGroupFilter.enabled |  Specifies whether to enable runtime group filtering for row-level operations. Allows data sources to:
+     * Prune entire groups of data (such as files or partitions) using data source filters
+     * Execute runtime queries to identify matching records
+     * Discard unnecessary groups to avoid expensive rewrites
+Limitations:
+     * Not all expressions can convert to data source filters
+     * Some expressions require Spark evaluation (such as subqueries)
+|  true  
+spark.sql.optimizer.runtimeFilter.number.threshold |  Sets the total number of injected runtime filters (non-DPP). This is to prevent driver OOMs with too many Bloom filters. |  10  
+spark.sql.optimizer.runtimeFilter.semiJoinReduction.enabled |  Specifies whether to insert a semi-join to reduce shuffle data when one side of a shuffle join has a selective predicate. |  false  
+spark.sql.parquet.aggregatePushdown |  Specifies whether to push down aggregates to Parquet for optimization. Supports:
+     * MIN and MAX for boolean, integer, float, and date types
+     * COUNT for all data types
+Throws an exception if statistics are missing from any Parquet file footer. |  false  
+spark.sql.parquet.columnarReaderBatchSize |  Controls the number of rows in each Parquet vectorized reader batch. Choose a value that balances performance overhead and memory usage to prevent out-of-memory errors. |  4096  
+spark.sql.parquet.enableVectorizedReader |  Specifies whether to enable vectorized Parquet decoding. |  true  
+spark.sql.shuffle.partitions |  Sets the default number of partitions for data shuffling during joins or aggregations. Cannot be modified between structured streaming query restarts from the same checkpoint location. |  200  
+spark.sql.shuffledHashJoinFactor |  Defines the multiplication factor used to determine shuffle hash join eligibility. A shuffle hash join is selected when the small-side data size multiplied by this factor is less than the large-side data size. |  3  
+spark.sql.sources.parallelPartitionDiscovery.threshold |  Sets the maximum number of paths for driver-side file listing with file-based sources (Parquet, JSON, and ORC). When exceeded during partition discovery, files are listed using a separate Spark distributed job. |  32  
+spark.sql.statistics.histogram.enabled |  Specifies whether to generate equi-height histograms during column statistics computation to improve estimation accuracy. Requires an additional table scan beyond the one needed for basic column statistics. |  false  
+spark.dynamicAllocation.executorIdleTimeout |  Sets the duration an executor must be idle before it is removed when dynamic allocation is enabled. |  60s  
+spark.dynamicAllocation.schedulerBacklogTimeout |  Sets the duration that pending tasks must be backlogged before new executors are requested when dynamic allocation is enabled. |  1s  
+spark.dynamicAllocation.sustainedSchedulerBacklogTimeout |  Same as spark.dynamicAllocation.schedulerBacklogTimeout, but used only for subsequent executor requests. |  (value of spark.dynamicAllocation.schedulerBacklogTimeout)  
+spark.scheduler.minRegisteredResourcesRatio |  Sets the minimum ratio of registered resources (registered resources / total expected resources) to wait for before scheduling begins. Specified as a double between 0.0 and 1.0. Regardless of whether the minimum ratio of resources has been reached, the maximum amount of time it will wait before scheduling begins is controlled by spark.scheduler.maxRegisteredResourcesWaitingTime. |  0.8  
+spark.scheduler.maxRegisteredResourcesWaitingTime |  Sets the maximum amount of time to wait for resources to register before scheduling begins. |  30s  
+spark.sql.hive.metastorePartitionPruningFallbackOnException |  Specifies whether to fall back to getting all partitions from Hive metastore and perform partition pruning on the Spark client side when encountering MetaException from the metastore. |  false  
+  
+Property Name | Description | Default Value  
+---|---|---  
+spark.sql.autoBroadcastJoinThreshold |  Sets the maximum table size in bytes for broadcasting to worker nodes during joins. Set to -1 to disable broadcasting. |  10MB  
+spark.io.compression.codec |  Sets the codec used to compress internal data such as RDD partitions, event log, broadcast variables, and shuffle outputs. Supported values: lz4, snappy, zstd, gzip. |  lz4  
+spark.sql.session.timeZone |  Defines the session time zone for handling timestamps in string literals and Java object conversion. Accepts:
+     * Region-based IDs in area/city format (such as America/Los_Angeles)
+     * Zone offsets in (+/-)HH, (+/-)HH:mm, or (+/-)HH:mm:ss format (such as -08 or +01:00)
+     * UTC or Z as aliases for +00:00
+|  (value of local timezone)  
+spark.cleanrooms.executor.memoryOverheadFactor |  Sets the fraction of total executor memory used to determine the split between spark.executor.memory and spark.executor.memoryOverhead. Specified as a double between 0.0 and less than 1.0. |  0.1  
+spark.cleanrooms.driver.memoryOverheadFactor |  Sets the fraction of total driver memory used to determine the split between spark.driver.memory and spark.driver.memoryOverhead. Specified as a double between 0.0 and less than 1.0. |  0.1  
+spark.memory.storageFraction |  Sets the amount of storage memory immune to eviction, expressed as a fraction of the size of the region set aside by spark.memory.fraction. The higher this is, the less working memory may be available to execution and tasks may spill to disk more often. Leaving this at the default value is recommended. |  0.5  
+spark.rpc.askTimeout |  Sets the duration for an RPC ask operation to wait before timing out. |  (value of spark.network.timeout)  
+spark.executor.heartbeatInterval |  Sets the interval between each executor's heartbeats to the driver. Heartbeats let the driver know that the executor is still alive and update it with metrics for in-progress tasks. spark.executor.heartbeatInterval should be significantly less than spark.network.timeout. |  10s  
+spark.stage.maxConsecutiveAttempts |  Sets the number of consecutive stage attempts allowed before a stage is aborted. |  4  
+spark.task.cpus |  Sets the number of cores to allocate for each task. |  1  
+spark.shuffle.file.buffer |  Sets the size of the in-memory buffer for each shuffle file output stream, in KiB unless otherwise specified. These buffers reduce the number of disk seeks and system calls made in creating intermediate shuffle files. |  32k  
+spark.reducer.maxSizeInFlight |  Sets the maximum size of map outputs to fetch simultaneously from each reduce task, in MiB unless otherwise specified. Since each output requires a buffer to receive it, this represents a fixed memory overhead per reduce task, so keep it small unless you have a large amount of memory. |  48m  
+  
+  9. Choose **Run**.
@@ -72 +223 @@ You can't run the job if the member who can receive results hasn’t configured
-  9. Continue to adjust parameters and run your job again, or choose the **+** button to start a new job in a new tab.
+  10. Continue to adjust parameters and run your job again, or choose the **+** button to start a new job in a new tab.