How to Grant access to the S3 bucket for the Snowflake account (example)

To grant access to an S3 bucket for a Snowflake account, you will need to create an AWS Identity and Access Management (IAM) policy and attach it to an IAM role. Here is an example of how to do this:

1. Go to the AWS IAM console and create a new policy. You can use the “Create policy” button to create a new policy.
2. In the policy editor, select “S3” as the service and “GetObject” as the action. You can also add other actions as per your requirement.
3. In the “Resources” section, add the Amazon Resource Name (ARN) of the S3 bucket that you want to grant access to. The ARN for a bucket can be found in the S3 bucket’s properties in the AWS S3 console.
4. Give a suitable name and description to the policy, and then create the policy.
5. Next, create a new IAM role and attach the policy created in step 1 to it. You can use the “Create role” button to create a new role.
6. Select “Snowflake” as the service and “Snowflake” as the use case.
7. Attach the policy created in step 1 to the role.
8. Give a suitable name and description to the role, and then create the role.
9. Finally, in the Snowflake account, attach the IAM role created in step 5 to the Snowflake account. This can be done using the following SQL command:

ALTER ROLE <role-name> SET iam_role='arn:aws:iam::<account-id>:role/<role-name>';

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject"
            ],
            "Resource": [
                "arn:aws:s3:::my-bucket/*"
            ]
        }
    ]
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::my-bucket/*"
            ]
        }
    ]
}