# Cleanrooms Ml Diagnostics

> >

- **Type:** Skill
- **Install:** `agentstack add skill-aws-samples-sample-ai-agent-skills-cleanrooms-ml-troubleshooting`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [aws-samples](https://agentstack.voostack.com/s/aws-samples)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT-0
- **Upstream author:** [aws-samples](https://github.com/aws-samples)
- **Source:** https://github.com/aws-samples/sample-ai-agent-skills/tree/main/cleanrooms-ml-troubleshooting

## Install

```sh
agentstack add skill-aws-samples-sample-ai-agent-skills-cleanrooms-ml-troubleshooting
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# AWS Clean Rooms ML Diagnostics

## When to use

Any AWS Clean Rooms ML investigation — training model failures, configured model errors, audience generation issues, lookalike models, collaboration ML configuration, privacy budgets, seed audiences, output configuration, S3 data access, IAM permissions, or differential privacy.

## Investigation workflow

### Step 1 — Collect and triage

```
aws cleanroomsml list-training-datasets --query 'trainingDatasets[*].{Name:name,Arn:trainingDatasetArn,Status:status,CreateTime:createTime}'
aws cleanroomsml list-configured-model-algorithms --query 'configuredModelAlgorithms[*].{Name:name,Arn:configuredModelAlgorithmArn,CreateTime:createTime}'
aws cleanroomsml list-audience-models --query 'audienceModels[*].{Name:name,Arn:audienceModelArn,Status:status}'
```

### Step 2 — Domain deep dive

```
aws cleanroomsml get-training-dataset --training-dataset-arn 
aws cleanroomsml get-audience-model --audience-model-arn 
aws cleanroomsml get-configured-audience-model --configured-audience-model-arn 
```

### Step 3 — Detailed investigation

```
aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventSource,AttributeValue=cleanroomsml.amazonaws.com --max-results 20
aws cleanroomsml list-audience-generation-jobs --query 'audienceGenerationJobs[*].{Name:name,Arn:audienceGenerationJobArn,Status:status}'
aws cleanrooms list-collaborations --query 'collaborationList[*].{Name:name,Id:id,Status:status}'
```

Read `references/guardrails.md` before concluding on any Clean Rooms ML issue.

## Tool quick reference

| Tool / API | When to use |
|------------|-------------|
| `cleanroomsml list-training-datasets` | List training datasets |
| `cleanroomsml get-training-dataset` | Get training dataset details |
| `cleanroomsml list-audience-models` | List audience models |
| `cleanroomsml get-audience-model` | Get audience model details |
| `cleanroomsml get-configured-audience-model` | Get configured audience model |
| `cleanroomsml list-audience-generation-jobs` | List audience generation jobs |
| `cleanrooms list-collaborations` | List Clean Rooms collaborations |

## Gotchas: AWS Clean Rooms ML

- Clean Rooms ML operates WITHIN a Clean Rooms collaboration. You must have an active collaboration before using ML features.
- Training datasets must conform to specific schema requirements. Column types and formats are strictly validated during training.
- Lookalike models require a seed audience of sufficient size (minimum varies by region). Too-small seed audiences produce poor results or fail.
- Privacy budgets are consumed per audience generation job. Once exhausted, no more audience generation jobs can run until the budget refreshes or is increased.
- Configured audience models must be associated with a collaboration before audience generation. The association defines output constraints.
- Differential privacy adds noise to outputs. Higher epsilon values reduce noise but weaken privacy guarantees. This is a fundamental tradeoff.
- S3 data must be in the same region as the Clean Rooms collaboration. Cross-region data access is not supported.

## Anti-hallucination rules

1. Always cite specific ARNs, job IDs, or API responses as evidence.
2. Clean Rooms ML and Clean Rooms are separate services. Never conflate their APIs.
3. Privacy budgets are finite resources. Never suggest they are unlimited or auto-replenishing.
4. Differential privacy epsilon values have specific mathematical meaning. Never invent epsilon recommendations.
5. Spend no more than 2 minutes on any single hypothesis. Pivot if inconclusive.

## 12 runbooks

| Category | IDs | Covers |
|----------|-----|--------|
| A — Training | A1–A2 | Training model failures, configured model errors |
| B — Audience | B1–B2 | Audience generation issues, lookalike model errors |
| C — Collaboration | C1–C2 | Collaboration ML config, privacy budget issues |
| D — Seed & Output | D1–D2 | Seed audience errors, output configuration |
| E — Access | E1–E2 | S3 data access, IAM permissions |
| F — Privacy | F1 | Differential privacy |
| Z — Catch-All | Z1 | General troubleshooting |

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [aws-samples](https://github.com/aws-samples)
- **Source:** [aws-samples/sample-ai-agent-skills](https://github.com/aws-samples/sample-ai-agent-skills)
- **License:** MIT-0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-aws-samples-sample-ai-agent-skills-cleanrooms-ml-troubleshooting
- Seller: https://agentstack.voostack.com/s/aws-samples
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.