ADVSEC04-BP01 Implement secure data collaboration with least privileged access and privacy controls

Implementation guidance

Raw data that is used in collaboration with SSPs, DSPs, and third-party systems need to be carefully shared to verify consumer privacy and data protection. Consider using AWS Clean Rooms, which enables more secure data collaboration without potentially exposing raw data and allows different parties to review and analyze data while maintaining strict privacy controls. With AWS Clean Rooms, you can create a more secure data clean room in minutes and collaborate with other companies to generate unique insights about advertising campaigns, investment decisions, and research and development. AWS Clean Rooms automatically encrypts service metadata at rest without requiring additional configurations. AWS Clean Rooms allows for you to have granular control on the type of information you may want to share.

Use IAM to provide least privileged access to approved parties with AWS Clean Rooms. Use IAM policies to define which users and roles can access which data, analyses, and collaborations. This allows for the precise control of how data is created, modified, and queried within AWS Clean Rooms.

Key AWS services

Resources