# AWS Clean Rooms Collaboration Checklist (July 2026)

Default quota: **Members invited per collaboration = 5** (adjustable). FAQ: up to five participants — verify current quotas.

## Privacy controls

- [ ] Configured tables + analysis rules (aggregation / list / custom templates)
- [ ] Aggregation minimums prevent row-level leakage
- [ ] Query runner vs contributor roles explicit
- [ ] Optional: **C3R** (Cryptographic Computing) client-side encrypt for JOIN/SELECT columns — GA capability; limited SQL subset

## Evidence

- [ ] CloudTrail protected-query history retained
- [ ] Export collaboration + analysis-rule config for joint-controller / SOC packs
- [ ] Confirm HIPAA eligibility on AWS BAA list before PHI — do not assume

## Counter-case

Not Athena Federated Query (raw access) and not Redshift live sharing (row-level select).