QuestionQ57

Manage and administer Snowflake accounts, data security, and governance

What is needed for credential-free stages to restrict data exfiltration after a storage integration and its associated stages have been created?

Explanation

Set REQUIRE_STORAGE_INTEGRATION_FOR_STAGE_CREATION and REQUIRE_STORAGE_INTEGRATION_FOR_STAGE_OPERATION to TRUE so external-stage creation and data loading/unloading require a named stage that uses a storage integration. Set PREVENT_UNLOAD_TO_INLINE_URL to TRUE to block unloading directly to an inline cloud-storage URL, which could otherwise allow explicit cloud-provider credentials in a COPY statement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!