Share security and governance in Snowflake - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a 'share' in Snowflake?

A share in Snowflake is a way to securely share data between different Snowflake accounts without copying the data. It allows controlled access to specific database objects.

beginner

How does Snowflake ensure security when sharing data?

Snowflake uses access controls and encryption. Only authorized accounts can access shared data, and data is encrypted in transit and at rest.

intermediate

What role does governance play in Snowflake data sharing?

Governance ensures that data sharing complies with policies by controlling who can create shares, what data is shared, and auditing access and usage.

beginner

Which Snowflake object controls what data is shared?

The share object controls what database objects (tables, views) are shared and with whom.

intermediate

How can you revoke access to shared data in Snowflake?

You can revoke access by removing the consumer account from the share or dropping the share itself.

What does a Snowflake share NOT do?

A Copy data to the consumer account

B Allow controlled access to data

C Enable secure data sharing

D Use encryption for data security

Snowflake shares do not copy data; they provide direct access to data without duplication.

Who can create a share in Snowflake?

A Any user with the ACCOUNTADMIN role

B Any user with read access

C Only users with the SHAREADMIN role or higher

D Only external users

Users with the SHAREADMIN role or higher can create shares to ensure governance.

How is data protected when shared in Snowflake?

A Data is not encrypted

B Data is encrypted only in transit

C Data is encrypted only at rest

D Data is encrypted both at rest and in transit

Snowflake encrypts data both at rest and in transit to protect shared data.

What happens if you drop a share in Snowflake?

A Consumer accounts lose access to the shared data

B The data is copied to the consumer account

C The shared data is deleted

D Nothing changes

Dropping a share removes access for consumer accounts but does not delete the data.

Which object defines what data is shared in Snowflake?

A Schema

B Share

C Database

D Warehouse

The share object defines which tables or views are shared and with which accounts.

Explain how Snowflake manages security when sharing data between accounts.

Think about who can see the data and how it is protected.

Describe the governance practices you should follow when creating and managing shares in Snowflake.

Consider policies and controls to keep data safe.