COF-C02 · Question #313
When enabling access to unstructured data, which URL permits temporary access to a staged file without the need to grant privileges to the stage or to issue access tokens?
The correct answer is B. Scoped URL. Snowflake offers three URL types for accessing staged files: File URLs (permanent, require stage privileges), Pre-Signed URLs (temporary, generated via GET_PRESIGNED_URL, no auth needed but expire and bypass access control), and Scoped URLs. A Scoped URL is encoded and…
Question
When enabling access to unstructured data, which URL permits temporary access to a staged file without the need to grant privileges to the stage or to issue access tokens?
Options
- AFile URL
- BScoped URL
- CRelative URL
- DPre-Signed URL
How the community answered
(31 responses)- B90% (28)
- C6% (2)
- D3% (1)
Explanation
Snowflake offers three URL types for accessing staged files: File URLs (permanent, require stage privileges), Pre-Signed URLs (temporary, generated via GET_PRESIGNED_URL, no auth needed but expire and bypass access control), and Scoped URLs. A Scoped URL is encoded and time-limited, generated using the BUILD_SCOPED_FILE_URL function. It allows access to a specific staged file without granting the caller privileges on the stage and without requiring a separate access token - the permissions of the generating role are embedded in the URL itself. This makes it the correct choice for secure, temporary, privilege-free access delegation.
Topics
Community Discussion
No community discussion yet for this question.