Snowflake Security: Securing Your Snowflake Data Cloud

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2022

B. Herzberg, Y. CohenSnowflake Securityhttps://doi.org/10.1007/978-1-4842-7389-0_6

6. Authorization: Data Access Control

Ben Herzberg¹   and Yoav Cohen²

(1)

Modiin, Israel

(2)

Ness-Ziona, Israel

 

In ACME Candies’ offices, not everybody can go everywhere, even once you went through the receptionist. Only candy makers go into the kitchen, only finance teams can access the finance rooms, some of the rooms are only available during business hours, and so on. There’s a good reason for that – if we let everybody go everywhere, we induce risk.

The same can be said about the data you store in Snowflake. In most cases, allowing everybody to have access to everything is ...