Kategorien:

Systemfunktionen (Systeminformationen)

SYSTEM$VERIFY_CMK_INFO_POSTGRES

Verifiziert die Konfiguration Ihres kundenverwalteten Schlüssels (Customer Managed Key, CMK) für Snowflake Postgres Tri-Secret Secure und gibt eine Meldung zum registrierten CMK zurück.

Syntax

SYSTEM$VERIFY_CMK_INFO_POSTGRES()
Copy

Rückgabewerte

Gibt eine erfolgreiche Statusmeldung oder Informationen zur fehlgeschlagene Verifizierung zurück:

  • AWS:

    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
    |                                                                                                                                                                                               SYSTEM$VERIFY_CMK_INFO_POSTGRES()                                                                                                                                                                                               |
    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
    | Verification failed due to an exception with message: Access is denied to the customer managed key (CMK) for this account. This could be because: 1) the CMK access permissions granted to Snowflake have been revoked OR 2) the CMK is disabled OR 3) the CMK is scheduled for deletion OR 4) the CMK specified is wrong. CMK ARN used: arn:aws:kms:us-west-2:736112632311:key/ceab36e4-f0e5-4b46-9a78-86e8f17a0f59 |
    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
    
  • Azure::

    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
    |                                                                                                                                                     SYSTEM$VERIFY_CMK_INFO_POSTGRES()                                                                                                                                                     |
    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
    | Verification failed due to an exception with message: Error received from the customer managed key (CMK) provider caused by user: 'Your request cannot be completed because of the failure of an external dependency. Please try again later.'. CMK KEY URI used: https://trisecretsite.vault.azure.net/keys/TriSecretAZKeyWrong |
    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
    

Anforderungen an die Zugriffssteuerung

Nur Kontoadministratoren (d. h. Benutzende mit der Rolle ACCOUNTADMIN) oder eine Rolle, die für das Konto über die Berechtigung MONITOR SECURITY verfügt, können diese Funktion aufrufen.

Beispiele

Abrufen des Status des CMK für Ihr Snowflake-Konto:

SELECT SYSTEM$VERIFY_CMK_INFO_POSTGRES();
Copy