SOL-C01 · Question #260
You are developing a Snowpark Python application that needs to read data from an external stage. You have already created the stage named which points to an AWS S3 bucket containing Parquet files…
The correct answer is A. Grant the 'USAGE privilege on the stage to the role that executes the Snowpark application. C. Ensure that the storage integration associated with has the appropriate AWS IAM role configured. To access an external stage from a Snowpark application, two things must be in place. Option A is required: the executing role needs the USAGE privilege on the stage object itself to reference and read from it. Option C is required: the external stage uses a storage integration…
Question
You are developing a Snowpark Python application that needs to read data from an external stage. You have already created the stage named which points to an AWS S3 bucket containing Parquet files. However, when attempting to read the data using , you encounter an error indicating insufficient privileges. Which of the following actions are necessary to grant the Snowpark application the required permissions to access the data in the external stage? Choose all that apply:
Options
- AGrant the 'USAGE privilege on the stage to the role that executes the Snowpark application.
- BGrant the 'READ privilege on the stage to the role that executes the Snowpark application. (Note:
- CEnsure that the storage integration associated with has the appropriate AWS IAM role configured
- DGrant the 'SELECT privilege on the underlying S3 bucket to the role that executes the Snowpark
- EGrant the 'EXECUTE TASK' privilege on the stage to the role that executes the Snowpark
How the community answered
(51 responses)- A78% (40)
- B6% (3)
- D4% (2)
- E12% (6)
Explanation
To access an external stage from a Snowpark application, two things must be in place. Option A is required: the executing role needs the USAGE privilege on the stage object itself to reference and read from it. Option C is required: the external stage uses a storage integration to authenticate with AWS S3, and that storage integration must have the correct AWS IAM role and trust policy configured so Snowflake can actually access the S3 bucket. Without a properly configured IAM role, Snowflake cannot authenticate to S3 regardless of Snowflake-level privileges. Option B is incorrect because Snowflake does not have a 'READ' privilege for stages-USAGE is the relevant privilege. Option D is incorrect because AWS IAM permissions on the S3 bucket are managed through the storage integration, not granted directly to a Snowflake role. Option E (EXECUTE TASK) is entirely unrelated to stage access.
Topics
Community Discussion
No community discussion yet for this question.