ARA-C01 Question #129: Real Exam Question with Answer & Explanation

Question

A Data Engineer is designing a near real-time ingestion pipeline for a retail company to ingest event logs into Snowflake to derive insights. A Snowflake Architect is asked to define security best practices to configure access control privileges for the data load for auto-ingest to Snowpipe. What are the MINIMUM object privileges required for the Snowpipe user to execute Snowpipe?

Options

• AOWNERSHIP on the named pipe, USAGE on the named stage, target database, and schema, and
• BOWNERSHIP on the named pipe, USAGE and READ on the named stage, USAGE on the target
• CCREATE on the named pipe, USAGE and READ on the named stage, USAGE on the target
• DUSAGE on the named pipe, named stage, target database, and schema, and INSERT and

Explanation

According to the SnowPro Advanced: Architect documents and learning resources, the minimum object privileges required for the Snowpipe user to execute Snowpipe are: OWNERSHIP on the named pipe. This privilege allows the Snowpipe user to create, modify, and drop the pipe object that defines the COPY statement for loading data from the stage to the table. USAGE and READ on the named stage. These privileges allow the Snowpipe user to access and read the data files from the stage that are loaded by Snowpipe. USAGE on the target database and schema. These privileges allow the Snowpipe user to access the database and schema that contain the target table. INSERT and SELECT on the target table. These privileges allow the Snowpipe user to insert data into the table and select data from the table.

No community discussion yet for this question.