page123
106
Regardless of the cloud provider, Snowflake manages all storage interactions for data
warehouse core operations transparently through SQL. There are four types of storage
available within Snowflake that are referred to as stages.
•
External
•
Hosted on any of the three supported CSPs
•
Hosted on any of the S3-compatible storage providers
•
Named or Internal: Hosted within the Snowflake VPC for the
account CSP
•
Table: Associated with a named table
•
User: For internal Snowflake use only
You can find more information on the data life cycle at
https://docs.snowflake.
com/en/sql-reference/sql/create-stage
.
Provisioning Snowflake on the CSP infrastructure ensures you always have enough
storage available and immediate access to more for scalability.
Direct Storage Access
Direct access to storage on supported CSP external devices is possible by configuring a
STAGE
to point at uncontrolled and unaudited storage thus presenting an opportunity for
data breaches and worse.
We strongly recommend
STAGE
definitions are checked to ensure direct storage
mappings do not exist within your environment.
Best practice is to restrict
STAGE
mapping to storage via a predefined
STORAGE
INTEGRATION
restricting data ingress and egress to known locations.
You set this control at the Snowflake account level:
USE ROLE accountadmin;
ALTER ACCOUNT SET require_storage_integration_for_stage_creation = TRUE;
ALTER ACCOUNT SET require_storage_integration_for_stage_operation = TRUE;
ChaPTer 4
MiCro-ParTiTionS