Database system integrations with external storage locations
AssigneeSnowflake Inc.
InventorsPolita Paulus, Peter Povinec, Saurin Shah, Srinidhi Karthik Bisthavalli Srinivasa
Life of this patent
Estimating the term…
Abstract
A command to load or unload data at a storage location is received. In response to the command, a storage integration object associated with the storage location is identified. The storage integration object identifies a cloud identity object that corresponds to a cloud identity that is associated with a proxy identity object corresponding to a proxy identity granted permission to access the storage location. The data is loaded or unloaded at the storage location by assuming the proxy identity.
Claims30
A system comprising:
- at least one hardware processor;
- and
- at least one memory storing instructions that cause the at least one hardware processor to perform operations comprising:
- receiving, from a computing device, a command to load data at a storage location in a storage platform of a cloud storage provider system;
- and
- based on receiving the command, loading the data at the storage location in the storage platform by causing a cloud identity to assume a proxy identity at the storage platform using first security credentials obtained from the cloud storage provider system via a request transmitted to the cloud storage provider system that includes second security credentials associated with the cloud identity, the proxy identity being granted permission to access the storage location.
A method comprising:
- receiving, from a computing device, a command to load data at a storage location in a storage platform of a cloud storage provider method;
- and
- based on receiving the command, loading the data at the storage location in the storage platform by causing a cloud identity to assume a proxy identity at the storage platform using first security credentials obtained from the cloud storage provider method via a request transmitted to the cloud storage provider method that includes second security credentials associated with the cloud identity, the proxy identity being granted permission to access the storage location.
A system comprising:
- at least one hardware processor;
- and
- at least one memory storing instructions that cause the at least one hardware processor to perform operations comprising:
- receiving, from a computing device, a command to unload data at a storage location in a storage platform of a cloud storage provider system;
- and
- based on receiving the command, unloading the data at the storage location in the storage platform by causing a cloud identity to assume a proxy identity at the storage platform using first security credentials obtained from the cloud storage provider system via a request transmitted to the cloud storage provider system that includes second security credentials associated with the cloud identity, the proxy identity being granted permission to access the storage location.
A method comprising:
- receiving, from a computing device, a command to unload data at a storage location in a storage platform of a cloud storage provider method;
- and
- based on receiving the command, unloading the data at the storage location in the storage platform by causing a cloud identity to assume a proxy identity at the storage platform using first security credentials obtained from the cloud storage provider method via a request transmitted to the cloud storage provider method that includes second security credentials associated with the cloud identity, the proxy identity being granted permission to access the storage location.
The method of claim 30, further comprising verifying that a user associated with the command has permission to use the storage integration object.
Dependencies are inferred from the claim text.