PrivacyGo Ad Measurement

Step 0: Subscribe to the PrivacyGo Ad Measurement Product via AWS Marketplace.

Step 1: Upload the Pre-processed Data into Your Own AWS S3 Bucket. An S3 bucket was created with a name following the #{your-stack-name}-mpcfilesbucket-#{random-postfix} format. Place your file in the inputs folder of this bucket so that the URI of your file resembles the following:s3://#{bucket_name}/inputs/#{input_file_name}.csv. Save this URI for later use.

Step 2: Obtain Invoke URL from Amazon API Gateway Web Console. You can retrieve the API endpoint from the AWS console by navigating to Amazon API Gateway -> APIs -> PrivacyGoAdMeasurementInterface -> Stages -> Prod. On the right side of the page, you will find a line indicating the Invoke URL. This is the endpoint to send the requests. The format of Invoke URL is https://{api_id}.execute-api.{region}.amazonaws.com/prod/. There are five endpoints:

• /measure/listMPCResources --- lists all currently running MPC executions and tasks.
• /measure/triggerMPCExecution --- Initiates an MPC execution (requires the counter-party to trigger their execution as well).
• /measure/describeMPCExecution --- returns the detailed information about a specific MPC execution.
• /measure/stopMPCExecution --- stops a given MPC execution.
• /measure/cleanUpMPCResources --- clean up all running executions and tasks.

Step 3: Setting up User Permission to Run Service. The deployment automatically creates a policy named InvokePrivacyGoAdMeasurementInterfacePolicy-{api_id}. Attach the permission policy to your user to enable them to invoke the PrivacyGo Ad Measurement service. Sign in to the AWS Console with an admin or IAM permissions manager account. Go to IAM -> Users -> [Your User] -> Add permissions -> Attach policies directly, select InvokePrivacyGoAdMeasurementInterfacePolicy-{api_id}, and click Add permissions.

Step 3.1 (use this if you do not have awscurl) Enable programmatic access for your user by creating an Access Key ID and Secret Access Key: go to IAM -> Users -> [Your User] -> Security credentials -> Create access key, then store the generated keys securely. Next, configure Postman to send signed web requests using your AWS credentials: Create a new collection, open the Authorization tab, select AWS Signature, and enter the Access Key ID and Secret Access Key created above.

Step 3.2: Test the setup. Use the /measure/listMPCResources endpoint to verify the configuration by posting a web request with an empty body to https://{api_id}.execute-api.{region}.amazonaws.com/prod/measure/listMPCResources. A successful response should return empty lists.

(Optional) Step 3.3: Enable SNS notifications. You can subscribe to the PrivacyGoAdMeasurementResultNotificationTopic in Amazon SNS to receive alerts when an MPC execution is completed or fails.

Step 4: Invoke the PrivacyGo Ad Measurement Service via Web Request. Use Postman or awscurl to send a POST request to trigger the execution: https://{api_id}.execute-api.{region}.amazonaws.com/prod/measure/triggerMPCExecution with the following JSON body: configFilePath (string, e.g., core/receiver.json), targetAccountId (int, 12-digit AWS account ID of the counter-party), inputFilePath (string, S3 path of the input file), and idsNum (int, number of IDs to match, >0). Optionally, include timeWindow (int) to define the campaign time window; if omitted or set to 0, only conversions with conversion_time > impression_time are computed. { "configFilePath":"core/xxx.json", "targetAccountId":"xxxx", "inputFilePath":"s3://privacygoadmeasurementservice-mpcfilesbucket-xxx/xxx.csv", "idsNum": "4", "timeWindow":"604800" }

Step 5: Obtain Final Results in Log. If subscribed to SNS, you will receive a status update upon completion. You can view the final measurement results in CloudWatch -> Log groups -> PrivacyGoAdMeasurementLogGroup. The logs include detailed metrics such as match rate by PII type, total conversions, and other key performance statistics.