Accelerate the Value of Data

Establish Snowflake Access to Cloud Storage

Learn how to connect to the trust policy.

After you create a write role, establish a trust relationship with the role. For more information, see Using trust policies with IAM roles.
To update the trust policy:
  1. Log in to the AWS Management Console.
  2. In the search field, search for iam.
  3. In the drop-down list of items, hover over IAM and select Roles.
  4. In the Role page, search for and select the value in the Role ARN field from Create a Snowflake IAM role with an external ID in AWS.
  5. In the Summary page, select the Trust relationships tab.
  6. Select Edit trust policy.
  7. Modify the policy document using the output values from the DESC STORAGE INTEGRATION Snowflake command.
  8. Select Update Trust Policy.
The updates are now saved. The following code shows a sample policy document for the IAM role:
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::713795429718:user/akzj-s-ssca6264"
            },
            "Action": "sts:AssumeRole",
            "Condition": {
                "StringEquals": {
                    "sts:ExternalId": "name=2_h21bMLufO+Ax6CjPlCRGgCu0Pbw="
                }
            }
        }
    ]
}