You are working with a Snowflake Notebook to process data from an external stage (AWS S3). You need to access the S3 stage using a named stage object and a storage integration configured with IAM…

Question

Options

• A
  1. Create the storage integration with appropriate IAM roles. 2. Create the external stage
• B
  1. Create the external stage specifying the S3 bucket URL and credentials. 2. Create a file format
• C
  1. Create the storage integration with appropriate IAM roles. 2. Use the 'LIST @stage' command to
• D
  1. Create the storage integration with appropriate IAM roles. 2. Create the external stage
• E
  1. Create the external stage specifying the S3 bucket URL and credentials. 2. Create a file format

• A
  81% (39)
• B
  10% (5)
• C
  4% (2)
• E
  4% (2)

Explanation

Accessing an S3 external stage with IAM-based storage integration requires a specific sequence. The correct steps are: (1) Create the storage integration object in Snowflake (CREATE STORAGE INTEGRATION) specifying the IAM role ARN and S3 bucket paths - this generates a Snowflake IAM entity that AWS trusts; (2) Update the IAM role's trust policy in AWS to trust the Snowflake entity (obtained via DESC INTEGRATION); (3) Create the external stage (CREATE STAGE) referencing the storage integration rather than embedding access keys; (4) Use the stage to LIST, COPY INTO, or query files. Options A and D both represent this correct order with proper integration-based authentication. Options B and E are incorrect because they specify credentials directly in the stage definition - this approach bypasses storage integrations and is less secure. Option C is incomplete, stopping at LIST without completing the stage creation and data access steps.

No community discussion yet for this question.