AWS Clean Rooms (cleanrooms)

2023-08-02

8 new actions, 1 new resource | 34 updated actions, 4 updated resources

Additions

    Actions
  • BatchGetCollaborationAnalysisTemplate
    • Description:  Grants permission to view details of analysisTemplates associated to the collaboration
    • Access:  Read
    • Resources: 

      Name: analysistemplate

      Required: Yes

      Name: collaboration

      Required: Yes

    • Dependents: 

      cleanrooms:GetCollaborationAnalysisTemplate
  • CreateAnalysisTemplate
    • Description:  Grants permission to create a new analysis template
    • Access:  Write
    • Resources: 

      Name: analysistemplate

      Required: Yes

      Name: membership

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys
  • DeleteAnalysisTemplate
    • Description:  Grants permission to delete an existing analysis template
    • Access:  Write
    • Resources: 

      Name: analysistemplate

      Required: Yes

  • GetAnalysisTemplate
    • Description:  Grants permission to view details for an analysis template
    • Access:  Read
    • Resources: 

      Name: analysistemplate

      Required: Yes

  • GetCollaborationAnalysisTemplate
    • Description:  Grants permission to view details for an analysis template within a collaboration
    • Access:  Read
    • Resources: 

      Name: analysistemplate

      Required: Yes

      Name: collaboration

      Required: Yes

  • ListAnalysisTemplates
    • Description:  Grants permission to list available analysis templates
    • Access:  List
    • Resources: 

      Name: membership

      Required: Yes

  • ListCollaborationAnalysisTemplates
    • Description:  Grants permission to list available analysis templates within a collaboration
    • Access:  List
    • Resources: 

      Name: collaboration

      Required: Yes

  • UpdateAnalysisTemplate
    • Description:  Grants permission to update details of the analysis template
    • Access:  Write
    • Resources: 

      Name: analysistemplate

      Required: Yes

    Resources
  • membership
    • Arn:  arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates

    Actions
  • StartProtectedQuery
      Dependents
    • ＋ cleanrooms:GetCollaborationAnalysisTemplate
      Resources
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • TagResource
      Resources
    • ＋ {'name': 'collaboration', 'is_required': False}
    • ＋ {'name': 'configuredtableassociation', 'is_required': False}
    • ＋ {'name': 'membership', 'is_required': False}
    • ＋ {'name': 'configuredtable', 'is_required': False}
    • － {'name': 'Collaboration', 'is_required': False}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': False}
    • － {'name': 'Membership', 'is_required': False}
    • － {'name': 'ConfiguredTable', 'is_required': False}
  • DeleteMembership
      Resources
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • ListProtectedQueries
      Resources
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • GetProtectedQuery
      Resources
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • CreateConfiguredTableAssociation
      Resources
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • ＋ {'name': 'membership', 'is_required': True}
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • CreateCollaboration
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • ListTagsForResource
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': False}
    • ＋ {'name': 'configuredtableassociation', 'is_required': False}
    • ＋ {'name': 'membership', 'is_required': False}
    • ＋ {'name': 'collaboration', 'is_required': False}
    • － {'name': 'ConfiguredTable', 'is_required': False}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': False}
    • － {'name': 'Membership', 'is_required': False}
    • － {'name': 'Collaboration', 'is_required': False}
  • GetSchemaAnalysisRule
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': True}
  • GetConfiguredTableAssociation
      Resources
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': True}
  • UpdateProtectedQuery
      Resources
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • DeleteCollaboration
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • DeleteMember
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • UpdateConfiguredTableAnalysisRule
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • UpdateConfiguredTableAssociation
      Resources
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': True}
  • DeleteConfiguredTableAssociation
      Resources
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': True}
  • CreateMembership
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • UntagResource
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': False}
    • ＋ {'name': 'configuredtableassociation', 'is_required': False}
    • ＋ {'name': 'membership', 'is_required': False}
    • ＋ {'name': 'collaboration', 'is_required': False}
    • － {'name': 'ConfiguredTable', 'is_required': False}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': False}
    • － {'name': 'Membership', 'is_required': False}
    • － {'name': 'Collaboration', 'is_required': False}
  • DeleteConfiguredTableAnalysisRule
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • GetCollaboration
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • ListSchemas
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • GetSchema
      Resources
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • ListConfiguredTableAssociations
      Resources
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • ListMembers
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • UpdateCollaboration
      Resources
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • BatchGetSchema
      Resources
    • ＋ {'name': 'configuredtableassociation', 'is_required': True}
    • ＋ {'name': 'collaboration', 'is_required': True}
    • － {'name': 'ConfiguredTableAssociation', 'is_required': True}
    • － {'name': 'Collaboration', 'is_required': True}
  • CreateConfiguredTable
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • CreateConfiguredTableAnalysisRule
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • GetConfiguredTableAnalysisRule
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • DeleteConfiguredTable
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • GetMembership
      Resources
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
  • GetConfiguredTable
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • UpdateConfiguredTable
      Resources
    • ＋ {'name': 'configuredtable', 'is_required': True}
    • － {'name': 'ConfiguredTable', 'is_required': True}
  • UpdateMembership
      Resources
    • ＋ {'name': 'membership', 'is_required': True}
    • － {'name': 'Membership', 'is_required': True}
    Resources
  • configuredtableassociation
      Arn
    • Old: arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}
      New: arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/configuredtableassociation/${ConfiguredTableAssociationId}
  • collaboration
      Arn
    • Old: arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/${ConfiguredTableId}
      New: arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/${CollaborationId}
  • analysistemplate
      Arn
    • Old: arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/${CollaborationId}
      New: arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/analysistemplate/${AnalysisTemplateId}
  • configuredtable
      Arn
    • Old: arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/configuredtableassociation/${ConfiguredTableAssociationId}
      New: arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/${ConfiguredTableId}