One-click install
npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill aws-cleanrooms
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-cleanrooms
Source: https://github.com/mreferre/aws-agent-toolkit-skills/tree/main/.kiro/skills/aws-cleanrooms
Command: npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill aws-cleanrooms

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps troubleshoot AWS Clean Rooms collaboration failures and missing CloudWatch logs for Clean Rooms ML custom model training and inference jobs, especially when IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, or logging configuration are misaligned.

Core Features & Use Cases

  • Debug permission and access errors across IAM role policies, S3 bucket policies, KMS key policies, Lake Formation grants, and cross-account trust for Clean Rooms activities.
  • Diagnose missing CloudWatch logs for custom model jobs by validating logs publishing privacy configuration, ML configuration, ML configuration role permissions, and log group/stream availability.
  • Use cases: A customer reports “AccessDenied” while working with a collaboration or configured data, or a customer reports that Clean Rooms ML jobs complete but no logs are published to CloudWatch.

Quick Start

Ask the AI: “My Clean Rooms custom model inference jobs are failing to publish logs—can you diagnose the likely root cause and tell me exactly what IAM, privacy config, or CloudWatch permissions to fix?”

Frequently Asked Questions about aws-cleanrooms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why are my AWS Clean Rooms ML custom model jobs completing but not publishing logs to CloudWatch?

Missing CloudWatch logs for Clean Rooms ML jobs usually stem from misconfigured log publishing privacy settings, ML configuration role permissions, or log group availability. Diagnosing these areas identifies the exact configuration blocking log delivery.

How do I fix AccessDenied errors in AWS Clean Rooms collaborations?

Resolve AccessDenied errors by auditing IAM role policies, S3 bucket policies, KMS key policies, and Lake Formation grants for cross-account trust. A structured diagnostic sequence isolates the least-privilege fix for your specific membership.

What IAM and S3 permissions are required to run AWS Clean Rooms ML training and inference jobs?

Clean Rooms ML jobs require aligned IAM role policies, S3 bucket policies, KMS key policies, and Lake Formation grants. Verifying these configurations ensures the ML configuration role has least-privilege access for training and inference.

Can I diagnose Lake Formation and KMS policy misalignment for a specific Clean Rooms membership?

Yes, you can diagnose Lake Formation and KMS policy misalignment by using required identifiers like membership_id and region. Running a structured diagnostic sequence validates cross-account trust and produces targeted least-privilege fixes.

What is the best way to troubleshoot missing CloudWatch logs for Clean Rooms ML jobs without exposing underlying data?

The best way to troubleshoot missing logs is validating the log publishing privacy configuration alongside IAM and CloudWatch permissions. This ensures logging works correctly while maintaining Clean Rooms collaboration privacy guarantees.