Unify and manage your data

Create a Snowflake IAM role with an external ID in AWS

Learn how to create an IAM role and add an external ID to the role.

After you create a policy, you’ll need to create an IAM role with that policy. You’ll need the external ID to grant access to your S3 bucket. For more information, see topic External ID.
To create a role:
  1. Log in to the AWS Management Console.
  2. In the Create role page, create an IAM Role with that policy by choosing Another AWS account.
    1. In the Account ID field, enter your own AWS account ID. Once you modify the trusted relationship and grant access to Snowflake, replace this value with the Snowflake account ID.
    2. Select the Require external ID checkbox and enter the external ID in the External ID field. An external ID is required to grant access from your S3 storage to Snowflake. Reltio recommends that you enter your Reltio tenant ID in the External ID field. This allows you to track your storage location. If you don’t know your Reltio tenant ID, use a dummy ID such as 0000 and replace the dummy ID with your Reltio tenant after you modify the trusted relationship.
  3. Click Create role.
  4. In the Summary page, make a note of the value in the Role ARN field. You’ll need it when you Integrate snowflake with AWS.