In the current example, the snowflake_role_id value is 2. Snowflake_role_id is an ID assigned to the Snowflake role that owns a stage. Snowflake_account is the name assigned to your Snowflake account. In a later step, we will create an external stage that references one of these buckets and paths.Īdditional external stages that also use this integration can reference the allowed buckets and paths:ĭESC INTEGRATION s3_int + -+-+=+-+ | property | property_type | property_value | property_default | +-+-+=+-| | ENABLED | Boolean | true | false | | STORAGE_ALLOWED_LOCATIONS | List | s3://mybucket1/mypath1/,s3://mybucket2/mypath2/ | | | STORAGE_BLOCKED_LOCATIONS | List | s3://mybucket1/mypath1/sensitivedata/,s3://mybucket2/mypath2/sensitivedata/ | | | STORAGE_AWS_IAM_USER_ARN | String | arn:aws:iam::123456789001:user/abc1-b-self1234 | | | STORAGE_AWS_ROLE_ARN | String | arn:aws:iam::001234567890:role/myrole | | | STORAGE_AWS_EXTERNAL_ID | String | MYACCOUNT_SFCRole=2_a123456/s0aBCDEfGHIJklmNoPq= | | + -+-+=+-+ The following example creates an integration that explicitly limits external stages that use the integration to reference either of two buckets and paths. Path is an optional path that can be used to provide granular control over objects in the bucket. The required STORAGE_ALLOWED_LOCATIONS parameter and optional STORAGE_BLOCKED_LOCATIONS parameter restrict or block access to these buckets, respectively, when stages that reference this integration are created or modified.
Iam_role is the Amazon Resource Name (ARN) of the role you created in Step 2: Create the IAM Role in AWS (in this topic).īucket is the name of a S3 bucket that stores your data files (e.g. Integration_name is the name of the new integration. Loading Using the Web Interface (Limited)ĬREATE STORAGE INTEGRATION TYPE = EXTERNAL_STAGE STORAGE_PROVIDER = S3 ENABLED = TRUE STORAGE_AWS_ROLE_ARN = ' ' STORAGE_ALLOWED_LOCATIONS = (' s3 :// / /', ' s3 :// / /').Option 3: Configuring AWS IAM User Credentials to Access Amazon S3.Option 2: Configuring an AWS IAM Role to Access Amazon S3 - Deprecated.Option 1: Configuring a Snowflake Storage Integration to Access Amazon S3.
0 kommentar(er)
