Catégories :

Fonctions système (Informations système)

SYSTEM$VERIFY_CMK_INFO

Vérifie la configuration de votre clé gérée par le client (CMK) et renvoie un message concernant la clé CMK enregistrée.

Voir aussi :

Compréhension de l’auto-enregistrement CMK avec activation de la prise en charge de Tri-Secret Secure

Syntaxe

SYSTEM$VERIFY_CMK_INFO( [ '<ssa_account_name>' ] )

Arguments

Obligatoire :

Aucun.

Facultatif :

ssa_account_name

Une chaîne qui spécifie le nom d’utilisateur SSA pour lequel vous voulez vérifier la configuration CMK.

Renvoie

Renvoie un message de statut de positif ou, comme le montre l’exemple suivant, des informations sur l’échec de la vérification :

  • AWS :

    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|                                                                                                                                                                                               SYSTEM$VERIFY_CMK_INFO()                                                                                                                                                                                               |
+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Verification failed due to an exception with message: Access is denied to the customer managed key (CMK) for this account. This could be because: 1) the CMK access permissions granted to Snowflake have been revoked OR 2) the CMK is disabled OR 3) the CMK is scheduled for deletion OR 4) the CMK specified is wrong. CMK ARN used: arn:aws:kms:us-west-2:736112632311:key/ceab36e4-f0e5-4b46-9a78-86e8f17a0f59 |
+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

  • Azure :

    +----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|                                                                                                                                                     SYSTEM$VERIFY_CMK_INFO()                                                                                                                                                     |
+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Verification failed due to an exception with message: Error received from the customer managed key (CMK) provider caused by user: 'Your request cannot be completed because of the failure of an external dependency. Please try again later.'. CMK KEY URI used: https://trisecretsite.vault.azure.net/keys/TriSecretAZKeyWrong |
+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

  • Google Cloud :

    +---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|                                                                                                                                                                                                                   SYSTEM$VERIFY_CMK_INFO()                                                                                                                                                                                                                    |
+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Verification failed due to an exception with message: Access is denied to the customer managed key (CMK) for this account. This could be because: 1) the CMK access permissions granted to Snowflake have been revoked OR 2) the CMK is disabled OR 3) the CMK is scheduled for deletion OR 4) the CMK specified is wrong. CMK resource ID used: projects/my-env/locations/us-west2/keyRings/TriSecretTest/cryptoKeys/TriSecretGCPKey                         |
+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

Exigences en matière de contrôle d’accès

  • Seuls les utilisateurs dotés du rôle ACCOUNTADMIN ou d’un rôle qui s’est vu attribuer le privilège MONITOR SECURITY peuvent appeler cette fonction.

  • Seuls les utilisateurs dotés du rôle GLOBALORGADMIN ou du rôle ORGADMIN peuvent spécifier un nom d’utilisateur SSA.

Exemples

Vérifiez le statut de la CMK de votre compte Snowflake :

SELECT SYSTEM$VERIFY_CMK_INFO();

Vérifier le statut de la CMK d’un compte SSA spécifique :

SELECT SYSTEM$VERIFY_CMK_INFO('AUTO_FULFILLMENT_AREA$PUBLIC_AZURE_EASTUS2');