---
title: "POST /memberships/{membershipIdentifier}/intermediateTables/{intermediateTableIdentifier}/analysisRule"
method: POST
path: "/memberships/{membershipIdentifier}/intermediateTables/{intermediateTableIdentifier}/analysisRule"
---

# POST /memberships/{membershipIdentifier}/intermediateTables/{intermediateTableIdentifier}/analysisRule

`POST /memberships/{membershipIdentifier}/intermediateTables/{intermediateTableIdentifier}/analysisRule`

Creates an analysis rule for an intermediate table. Only the CUSTOM analysis rule type is supported. The service automatically determines whether the rule is first-party or multi-party restricted based on the intermediate table's inherited constraints. Only the intermediate table owner can call this operation.

## Path parameters

- `membershipIdentifier` string, required
- `intermediateTableIdentifier` string, required

## Request body

- object
  - `analysisRuleType` 'CUSTOM', required — The type of analysis rule to create. Currently, only <code>CUSTOM</code> is supported.
  - `analysisRulePolicy` object, required — Contains the policy for an intermediate table analysis rule.
    - `v1` object — The version 1 policy for the analysis rule.
      - `custom` object — The custom analysis rule policy.
        - `allowedAnalyses` AnalysisTemplateArnOrQueryWildcard[] — The list of allowed analyses that can be performed on the intermediate table.
        - `additionalAnalyses` 'ALLOWED' | 'REQUIRED' | 'NOT_ALLOWED' — The setting that controls whether additional analyses are allowed on the intermediate table.
        - `allowedAdditionalAnalyses` AdditionalAnalysesResourceArn[] — The list of allowed additional analyses for the intermediate table.
        - `allowedAnalysisProviders` AccountId[] — The list of Amazon Web Services account IDs for the allowed analysis providers.
        - `allowedResultReceivers` AccountId[] — The list of Amazon Web Services account IDs that are allowed to receive results from queries run on the intermediate table.
        - `differentialPrivacy` DifferentialPrivacyConfiguration — Specifies the unique identifier for your users.
          - `columns` DifferentialPrivacyColumn[], required — The name of the column (such as user_id) that contains the unique identifier of your users whose privacy you want to protect. If you want to turn on differential privacy for two or more tables in a collaboration, you must configure the same column as the user identifier column in both analysis rules.
            - `name` string, required — The name of the column, such as user_id, that contains the unique identifier of your users, whose privacy you want to protect. If you want to turn on differential privacy for two or more tables in a collaboration, you must configure the same column as the user identifier column in both analysis rules.
        - `disallowedOutputColumns` AnalysisRuleColumnName[] — The list of columns that are not allowed in the query output.

## Response `200`

Success

- CreateIntermediateTableAnalysisRuleOutput
  - `analysisRule` object, required — The analysis rule that was created for the intermediate table.
    - `intermediateTableIdentifier` string, required — The unique identifier of the intermediate table associated with this analysis rule.
    - `intermediateTableArn` string, required — The Amazon Resource Name (ARN) of the intermediate table associated with this analysis rule.
    - `analysisRulePolicy` object, required — The policy of the analysis rule.
      - `v1` object — The version 1 policy for the analysis rule.
        - `custom` object — The custom analysis rule policy.
          - `allowedAnalyses` AnalysisTemplateArnOrQueryWildcard[] — The list of allowed analyses that can be performed on the intermediate table.
          - `additionalAnalyses` 'ALLOWED' | 'REQUIRED' | 'NOT_ALLOWED' — The setting that controls whether additional analyses are allowed on the intermediate table.
          - `allowedAdditionalAnalyses` AdditionalAnalysesResourceArn[] — The list of allowed additional analyses for the intermediate table.
          - `allowedAnalysisProviders` AccountId[] — The list of Amazon Web Services account IDs for the allowed analysis providers.
          - `allowedResultReceivers` AccountId[] — The list of Amazon Web Services account IDs that are allowed to receive results from queries run on the intermediate table.
          - `differentialPrivacy` DifferentialPrivacyConfiguration — Specifies the unique identifier for your users.
            - `columns` DifferentialPrivacyColumn[], required — The name of the column (such as user_id) that contains the unique identifier of your users whose privacy you want to protect. If you want to turn on differential privacy for two or more tables in a collaboration, you must configure the same column as the user identifier column in both analysis rules.
              - …
          - `disallowedOutputColumns` AnalysisRuleColumnName[] — The list of columns that are not allowed in the query output.
    - `analysisRuleType` 'CUSTOM', required — The type of the analysis rule.
    - `createTime` string, date-time, required — The time the analysis rule was created.
    - `updateTime` string, date-time, required — The time the analysis rule was last updated.

## Other responses

- `480` — ConflictException
- `481` — ServiceQuotaExceededException
- `482` — ResourceNotFoundException
- `483` — InternalServerException
- `484` — ValidationException
- `485` — ThrottlingException
- `486` — AccessDeniedException

---

[API](https://skmtc.net/aws/apis/cleanrooms.md) · [All operations](https://skmtc.net/aws/apis/cleanrooms/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/cleanrooms/versions/17ce59ba806e/schema)