AutoGineer
Generated banner for AWS Cleanrooms
Generated logo for AWS Cleanrooms

AWS Cleanrooms

AWSOfficialPublished by AWS

  • Skill
  • Workflow
  • Cloud and DevOps
  • Apache-2.0
  • No issues found
Download ZIP

From the author

Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and CloudWatch logging for custom ML model training and inference jobs. Use when a customer reports permission failures, access errors, or log publishing issues in Clean Rooms.
— the description by AWS

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides a systematic diagnostic framework for resolving common operational issues within AWS Clean Rooms. It guides users through identifying and debugging permission failures, access errors, and CloudWatch logging issues related to custom ML model training and inference jobs. The skill covers the inspection of IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and Clean Rooms ML configurations to pinpoint root causes.

What it does

  • Diagnoses permission and access errors for Clean Rooms collaborations.
  • Troubleshoots CloudWatch log publishing failures for ML training and inference jobs.
  • Validates IAM role trust policies and attached permissions.
  • Inspects S3 bucket and KMS key policies for data access issues.
  • Verifies Lake Formation permissions for Glue-backed tables.
  • Checks ML configuration and privacy settings for custom model associations.

When to use it

  • When a user encounters 'Access Denied' or permission errors in Clean Rooms.
  • When custom ML model jobs fail to publish logs to CloudWatch.
  • When troubleshooting cross-account data access or result writing failures.
  • When verifying if an IAM role has the necessary permissions for Clean Rooms operations.

Advantages

  • Provides a structured, step-by-step approach to complex AWS permission debugging.
  • Reduces manual effort in identifying misconfigured ML logging associations.
  • Ensures all relevant policy types (IAM, S3, KMS, Lake Formation) are checked.
  • Helps resolve cross-service configuration issues efficiently.

Usage examples

“I am getting an access denied error when running a protected query in my Clean Rooms membership.”
The agent will initiate the permission debugging workflow, asking for the membership ID and error message to trace the failure back to the specific IAM role or bucket policy.
“My custom ML model training job in Clean Rooms is not showing any logs in CloudWatch.”
The agent will trigger the logging diagnostic procedure, checking the ML configuration, privacy policies, and the IAM role permissions for CloudWatch log group access.

Install

  1. Download the skill as a ZIP:

    https://mp-staging.autogineer.com/agent-skills/aws/aws-cleanrooms/download

  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip aws-cleanrooms.zip -d .agents/skills

Documentation by AWS

AWS Clean Rooms

Overview

Domain expertise for troubleshooting AWS Clean Rooms collaborations and custom ML modeling. Covers permission debugging, data access issues, and CloudWatch logging configuration.

Common tasks

Debugging Clean Rooms errors

Determine the failure type:

Access denied or permission error? → See permission debugging procedure. Covers IAM role policies (inline + attached managed), S3 bucket policies, KMS key policies, Lake Formation permissions, and cross-account trust.

Missing CloudWatch logs for custom model jobs? → See custom model logging debugging procedure. Covers Configured Model Algorithm Association privacy configuration, ML Configuration role permissions, and log group verification.

Additional resources

Files

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
AWS
Publisher
AWS (Official)
Source
aws/agent-toolkit-for-aws · skills/specialized-skills/analytics-skills/aws-cleanrooms · commit 0a218f8
Licence
Apache License 2.0 (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • NOTICE (added by AutoGineer from NOTICE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by AWS.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download aws-cleanrooms.zip