카테고리:

시스템 함수 (시스템 제어)

SYSTEM$REGISTER_CMK_INFO

Registers your customer-managed key (CMK) for use with Tri-Secret Secure.

참고 항목:

Understanding CMK self-registration with support activation of Tri-Secret Secure

구문

AWS:

SYSTEM$REGISTER_CMK_INFO( '<cmk_arn>' [ , '<privatelink_enabled>' ] )
Copy

Azure:

SYSTEM$REGISTER_CMK_INFO( '<vault_uri>' , '<key_name>' [ , '<privatelink_enabled>' ] )
Copy

Google Cloud:

SYSTEM$REGISTER_CMK_INFO( '<project_id>' , '<location>', '<key_ring>' , '<key_name>' [ , '<privatelink_enabled>' ] )
Copy

인자

Required:

AWS

cmk_arn

Tri-Secret Secure 와 함께 사용할 고객 관리 키(CMK)를 지정하는 Amazon Web Services 리소스 번호(ARN)를 지정합니다.

Azure

vault_uri

Azure Key Vault에 대한 Microsoft Azure 고유 엔드포인트 식별자를 지정합니다.

key_name

CMK의 이름을 Microsoft Azure 에 지정합니다.

Google Cloud

project_id

Specifies the unique identifier for your project in Google Cloud.

location

Specifies the Google Cloud region that hosts your Snowflake account.

key_ring

Specifies the key ring for your CMK in Google Cloud.

key_name

Specifies the name for your CMK in Google Cloud.

Optional:

privatelink_enabled

Specify whether or not to use your private connectivity endpoint for Tri-Secret Secure by passing in one of the following values:

중요

If you omit this argument or pass in an empty string, Snowflake doesn’t use a private connectivity endpoint for Tri-Secret Secure.

'TRUE'

Specifies that Snowflake uses the provisioned private connectivity endpoint for Tri-Secret Secure.

'FALSE' (기본값)

Specifies that Snowflake doesn’t use a private connectivity endpoint for Tri-Secret Secure.

''

빈 문자열입니다. ``’FALSE’``와 동일한 동작입니다.

반환

Returns a status message stating that the registration is complete.

액세스 제어 요구 사항

계정 관리자(ACCOUNTADMIN 역할이 있는 사용자)만 이 함수를 호출할 수 있습니다.

Amazon Web Services 에서 Snowflake 계정에 CMK를 등록합니다.

SELECT SYSTEM$REGISTER_CMK_INFO('arn:aws:kms:us-west-2:736112632310:key/ceab36e4-f0e5-4b46-9a78-86e8f17a0f59');
Copy

Microsoft Azure 에서 Snowflake 계정에 CMK를 등록합니다.

SELECT SYSTEM$REGISTER_CMK_INFO('https://trisecretsite.vault.azure.net/', 'trisecretazkey');
Copy

Register your CMK for your Snowflake account on Google Cloud:

SELECT SYSTEM$REGISTER_CMK_INFO('my-env', 'us-west1', 'trisecrettest', 'trisecretgcpkey');
Copy

Register your CMK with a privatelink endpoint for your Snowflake account on Amazon Web Services:

SELECT SYSTEM$REGISTER_CMK_INFO('arn:aws:kms:us-west-2:736112632310:key/ceab36e4-f0e5-4b46-9a78-86e8f17a0f59', 'true');
Copy

Register your CMK with a privatelink endpoint for your Snowflake account on Microsoft Azure:

SELECT SYSTEM$REGISTER_CMK_INFO('https://trisecretsite.vault.azure.net/', 'trisecretazkey', 'true');
Copy

Register your CMK with a privatelink endpoint for your Snowflake account on Google Cloud:

SELECT SYSTEM$REGISTER_CMK_INFO('my-env', 'us-west1', 'trisecrettest', 'trisecretgcpkey', 'true');
Copy