nerdexam
Snowflake

SOL-C01 · Question #189

You have a requirement to grant a third-party vendor access to specific data files stored in an internal stage within your Snowflake environment. You want to use pre-signed URLs for secure and…

The correct answer is A. Create an internal stage, upload the files, and generate a pre-signed URL using the ` function, D. Generate the pre-signed URL using the `SYSTEM$GET PRESIGNED URL' function, ensuring that. Options A and D are correct. Pre-signed URLs are designed to grant access to files in a stage without granting direct Snowflake user privileges. Option A accurately describes the process for internal stages. Option D highlights the correct function and the necessary…

Snowflake Account and Security

Question

You have a requirement to grant a third-party vendor access to specific data files stored in an internal stage within your Snowflake environment. You want to use pre-signed URLs for secure and time-limited access. Which of the following steps are necessary to achieve this securely?

Options

  • ACreate an internal stage, upload the files, and generate a pre-signed URL using the ` function,
  • BCreate an external stage pointing to an external storage location (like AWS S3), upload the files,
  • CGrant the 'USAGE privilege on the internal stage to the vendor's Snowflake user.
  • DGenerate the pre-signed URL using the `SYSTEM$GET PRESIGNED URL' function, ensuring that
  • EGrant the privilege directly on the files within the internal stage to the vendor's Snowflake user.

How the community answered

(30 responses)
  • A
    70% (21)
  • B
    17% (5)
  • C
    10% (3)
  • E
    3% (1)

Explanation

Options A and D are correct. Pre-signed URLs are designed to grant access to files in a stage without granting direct Snowflake user privileges. Option A accurately describes the process for internal stages. Option D highlights the correct function and the necessary permissions. Option B is incorrect because pre-signed URLs are primarily used with Minternal stages to avoid needing access to the underlying cloud storage account. Option C is partially correct, but it grants broader access than intended. Option E defeats the purpose of using pre-signed URLs for time-limited, specific file access.

Topics

#Internal Stages#Pre-signed URLs#Secure Access#Data Sharing

Community Discussion

No community discussion yet for this question.

Full SOL-C01 Practice