You are tasked with creating an external stage pointing to an Azure Blob Storage container. You need to choose the MOST SECURE method for authentication. Which combination of the following options…

Question

Options

• AUsing a storage account access key directly in the stage definition.
• BUsing a Shared Access Signature (SAS) token with limited permissions and expiry.
• CUsing Azure Active Directory (Azure AD) to authenticate Snowflake.
• DGranting READ permissions to the PUBLIC' container in Azure Blob Storage.
• ECreating a Managed Identity for Snowflake to access Azure Blob Storage.

• A
  7% (2)
• B
  23% (7)
• C
  57% (17)
• D
  13% (4)

Explanation

Options C and E provide the most secure ways to access Azure Blob Storage. Using Azure AD authentication and Managed Identity eliminates the need to store credentials within Snowflake, leveraging Azure's security mechanisms for authentication and authorization. Option A is insecure as it involves storing a long-term secret directly in the stage definition. Option B, while better than Option A, still involves managing and rotating SAS tokens. Option D is extremely insecure, making the data publicly accessible.

No community discussion yet for this question.