Associating a configured table to a collaboration

To associate a configured table

1. Sign in to the AWS Management Console and open the AWS Clean Rooms console at https://console.aws.amazon.com/cleanrooms.

2. Choose the method to associate your table:

   1. From the configured table detail page:

      1. In the left navigation pane, choose Tables.

      2. Choose the configured table.

      3. On the configured table detail page, choose Associate to collaboration.

      4. For the Associate table to collaboration dialog box, choose the Collaboration from the dropdown list.

   2. From the collaboration detail page:

      1. In the left navigation pane, choose Collaborations.

      2. Choose the collaboration.

      3. On the Tables tab, choose Associate table.

3. On the Associate table page, do one of the following:

   • Choose an existing configured table – Choose the Configured table name that you want to associate with the collaboration from the dropdown list.

   • Configure a new table – Choose Configure new table and follow the prompts on the Configure new table page.

   • View the schema and analysis rule for the configured table – Turn on View schema and analysis rule.

4. For Table association details,

   1. Enter a Name for the associated table.

      You can use the default name or rename this table.

   2. (Optional) Enter a Description of the table.

      The description helps with writing queries.

5. Specify the Service access permissions by selecting either Create and use a new service role or Use an existing service role.

   Note

   If you are associating a configured table backed by Amazon Athena, choose an Existing service role name from the dropdown list. Ensure the service role has IAM and, if needed, Lake Formation permissions to the dataset.

   If you choose...	Then ...
   Create and use a new service role	AWS Clean Rooms creates a service role with the required policy for this table. The default Service role name is cleanrooms-<timestamp> You must have permissions to create roles and attach policies. If your input data is encrypted, you can select This data is encrypted with a KMS key and then enter an AWS KMS key that will be used to decrypt your data input.
   Use an existing service role	Choose an Existing service role name from the dropdown list. The list of roles are displayed if you have permissions to list roles. If you don't have permissions to list roles, you can enter the Amazon Resource Name (ARN) of the role that you want to use. View the service role by choosing the View in IAM external link. If there are no existing service roles, the option to Use an existing service role is unavailable. By default, AWS Clean Rooms doesn't attempt to update the existing role policy to add necessary permissions. (Optional) Select the Add a pre-configured policy with necessary permissions to this role check box to add attach necessary permissions to the role. You must have permissions to modify roles and create policies.

   Note

   • AWS Clean Rooms requires permissions to query according to the analysis rules. For more information about permissions for AWS Clean Rooms, see AWS managed policies for AWS Clean Rooms.

   • If the role doesn’t have sufficient permissions for AWS Clean Rooms, you receive an error message stating that the role doesn't have sufficient permissions for AWS Clean Rooms. The role policy must be added before proceeding.

   • If you can’t modify the role policy, you receive an error message stating that AWS Clean Rooms couldn't find the policy for the service role.

6. If you want to enable Configured table association tags for the configured table association resource, choose Add new tag and then enter the Key and Value pair.

7. Choose Next.

8. On the Configure collaboration analysis rule page, choose one of the following:

   • Yes, create a collaboration analysis rule now – Associates your table with this collaboration and creates a collaboration analysis rule

   • No, I will create a collaboration analysis rule later – Associates your table with this collaboration only. You can create a collaboration analysis rule later.

9. If you choose Yes, create a collaboration analysis rule now, for Results delivery, choose the Members allowed to receive results for query output from the dropdown list.

10. Choose Next.

11. On the Add data access budget page, for Data access budget configuration, choose one of the following:

    • Yes, add a data access budget now – Associates your table with this collaboration and adds a data access budget. You can select either a period budget, a lifetime budget, or both.

    • No, I will add a data access budget later – Associates your table with this collaboration only. You can add a data access budget later.

      If you select No, I will add a data access budget later, skip to step 15.

12. If you choose Yes, add a data access budget now, choose one of the following budget configurations:

    Per period budget only	Lifetime budget only	Both per period and lifetime budgets
    Leave Add per period budget selected. Enter a Per period budget amount between 1 and 1,000,000. For Period, choose Daily, Weekly, or Monthly. (Optional) Leave Automatically refresh budget weekly selected to renew the allocation. Clear Add lifetime budget.	Clear Add per period budget. Select Add lifetime budget. Enter a Lifetime budget amount between 1 and 1,000,000.	Leave Add per period budget selected. Enter a Per period budget amount between 1 and 1,000,000. For Period, choose Daily, Weekly, or Monthly. Leave Automatically refresh budget weekly selected. Select Add lifetime budget. Enter a Lifetime budget amount between 1 and 1,000,000.

13. Review your selections under Data access budget summary.

    Example

    For example, if you've chosen a Per period budget amount of 1,000, set the Period to Weekly, left the Automatically refresh budget weekly checkbox selected, and set the Lifetime budget to 1,000,000, then the Access budget summary will display the following message: Every week, this table can be used up to 1,000 times for running queries or jobs. This budget is set to automatically refresh every Sunday at 00:00 UTC, and will continue to refresh until this table has reached its lifetime budget of 1,000,000 uses.

14. (Optional) If you want to enable Data access budget tags for the access budget resource, choose Add new tag and enter a Key and Value pair.

15. Choose Next.

16. Review the information on the Review and create page.

    1. If you need to edit any sections, choose Edit.

    2. Edit your configurations, and then choose Next.

17. Choose Associate table.