Creating and associating a new ID namespace
Each member of the collaboration must create and associate either an ID namespace Source or an ID namespace Target before creating an ID mapping table to query identity data.
If you have already created an ID namespace in AWS Entity Resolution, skip to Associating an existing ID namespace.
To create and associate a new ID namespace
-
Sign in to the AWS Management Console and open the AWS Clean Rooms console
with your AWS account (if you haven't yet done so). -
In the left navigation pane, choose Collaborations.
-
Choose the collaboration.
-
On the Entity resolution tab, choose Associate ID namespace.
-
On the Associate ID namespace page, for Entity resolution data, choose Create ID namespace.
The AWS Entity Resolution console appears in a new tab.
-
Follow the prompts on the Create ID namespace page in the AWS Entity Resolution console.
-
For Details, enter the ID namespace name, Description, and select the ID namespace type (either Source or Target).
-
For the ID namespace method, choose either the Rule-based method for rule-based matching or Provider services for third-party transcoding.
-
Specify the Data input type, depending on the ID namespace method you've chosen.
-
Choose Create ID namespace.
-
-
Go back to the AWS Clean Rooms console.
-
On the Associate ID namespace page, for Entity resolution data, choose the AWS Entity Resolution ID namespace source or target that you want to associate with the collaboration from the dropdown list.
-
For Association details, take the following steps.
-
Enter a Name for the associated ID namespace.
You can use the default name or rename this ID namespace.
-
(Optional) Enter a Description of the ID namespace.
The description helps with writing queries.
-
-
Specify the AWS Clean Rooms access permissions by selecting an option and then taking the recommended action.
Option Recommended action Allow AWS Clean Rooms to add and manage permission policy AWS Clean Rooms creates a service role with the required policy for this association. Add and manage permissions manually Do one of the following: -
Review the Resource policy and add necessary permissions to the policy.
-
Use an existing policy by choosing Add policy statement.
You must have permissions to modify roles and create policies.
Note
If you can’t modify the role policy, you receive an error message stating that AWS Clean Rooms couldn't find the policy for the service role.
-
-
(Optional) For Advanced ID mapping table configurations, modify the default protections for the column that comes from the ID namepsace.
The ID mapping table is configured by default to only allow an
INNER JOIN
on both thesourceID
column and thetargetID
column. You can modify this configuration so that the column that comes from this ID namespace (eithersourceID
ortargetID
) can be allowed anywhere in the query.Your goal Recommended option Categorize the column as a "join column" and only allow it in an INNER JOIN
clauseYes Categorize the column as a "dimension column" and allow it anywhere in the query, including a JOIN
clause,SELECT
,WHERE
andGROUP BY
statements of the query.No, allow anywhere in the query -
(Optional) If you want to enable Tags for the ID namepsace resource, choose Add new tag and then enter the Key and Value pair.
-
Choose Associate.
-
On the Entity resolution tab, under the Associated ID namespaces table, view the associated ID namespace and verify that the ID namespace type is correct (Source or Target).
After all members in the collaboration have associated their ID namespaces, you can create an ID mapping table and query the data.