Data exchange in the clean room: AWS Clean Rooms for joint analysis
Profit from the customer data of the partner companies without getting access to the raw data: This is what AWS Clean Rooms, which is now generally available, promises. The cloud service makes it possible to work with partner companies by granting them restrictive access to your own customer data. The latter can remain encrypted in different ways.
As an example area of application, AWS cites marketing, where companies, agencies and others work together on customer data records that are located in different storage locations. In data clean rooms – AWS did not invent the concept itself – they can evaluate their “collective data in a private environment”. However, this requires control of access rights, tools to protect data and adapted analysis tools. AWS Clean Rooms now offers an out-of-the-box solution for this.
Access control and encrypted data
AWS Clean Rooms customers should have some control features to improve privacy. In this way, they can individually determine which Clean Rooms participants are allowed to run which queries and what is displayed to them. A query log also records who evaluated which data and how. If desired, the stored data should also remain encrypted – even while queries are being run.
For the release, five collaborators can gather in an AWS Clean Room. You have two different types of analysis at your disposal: In the case of aggregation analysis, the information on the individuals remains hidden; COUNT, SUM and AVG functions are then possible. In the list analysis, individual data queries are also possible. In any case, data owners can insist on a reconciliation between their data sets and those of the collaborator. Then AWS Clean Rooms limits the results to the overlap of the contributor’s records.
The tool is now available in eleven AWS regions, including Frankfurt. Access via API for integration into your own applications is possible. Clean Rooms are billed based on the computing capacity of the queries performed in CRPU hours (Clean Room Processing Units) per second. A free tier grants new customers nine CRPU hours per month for the first 12 months. The AWS blog post explains the concept and installation in more detail.