A Data Engineer is designing a near real-time ingestion pipeline for a retail company to ingest event logs into Snowflake to derive insights. A Snowflake Architect is asked to define security best…

Question

Options

• AOWNERSHIP on the named pipe, USAGE on the named stage, target database, and schema, and
• BOWNERSHIP on the named pipe, USAGE and READ on the named stage, USAGE on the target
• CCREATE on the named pipe, USAGE and READ on the named stage, USAGE on the target
• DUSAGE on the named pipe, named stage, target database, and schema, and INSERT and

• A
  7% (1)
• B
  87% (13)
• D
  7% (1)

Explanation

For a Snowpipe user executing auto-ingest with least privilege, Snowflake requires: OWNERSHIP on the named pipe (to control execution of the pipe), USAGE and READ on the named stage (READ is required to access and list files on the stage - option A omits READ), USAGE on both the target database and schema (to navigate the namespace), and INSERT on the target table (to write data). Option A is missing READ on the stage. Option C incorrectly uses CREATE on the pipe instead of OWNERSHIP - the pipe must already exist and the user needs OWNERSHIP to operate it. Option D uses only USAGE on the pipe, which is insufficient; OWNERSHIP is required to execute a pipe.

No community discussion yet for this question.