Aws Cleanrooms

This is specialized debugging expertise for AWS Clean Rooms permission and logging issues. It walks you through diagnosing IAM role policies, S3 bucket permissions, KMS keys, Lake Formation setup, and CloudWatch log publishing for custom ML model jobs. Reach for this when you're staring at access denied errors in a Clean Rooms collaboration or wondering why your model training logs aren't appearing. The skill covers both the standard permission debugging flow and the more obscure custom model logging configuration, which involves privacy settings on the Configured Model Algorithm Association. Most useful when you're doing cross-account collaborations or working with the ML features, where the permission chains get complicated fast.

skills.sh installs: 6.1K
GitHub stars: 3.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aws/agent-toolkit-for-aws --skill aws-cleanrooms --agent claude-code

Installs into .claude/skills of the current project.

Files

AWS Clean Rooms

Overview

Domain expertise for troubleshooting AWS Clean Rooms collaborations and custom ML modeling. Covers permission debugging, data access issues, and CloudWatch logging configuration.

Common tasks

Debugging Clean Rooms errors

Determine the failure type:

Access denied or permission error? → See permission debugging procedure. Covers IAM role policies (inline + attached managed), S3 bucket policies, KMS key policies, Lake Formation permissions, and cross-account trust.

Missing CloudWatch logs for custom model jobs? → See custom model logging debugging procedure. Covers Configured Model Algorithm Association privacy configuration, ML Configuration role permissions, and log group verification.