PinnedEugene Choi·Jul 22Agent Identity — how to safely use Agents with your production data nowSnowflake customers want, no, NEED to use AI with their production data.
Eugene Choi·Aug 1Old Man RBAC says: “Back in my day, we had SoD! And we liked it!”TLDR: One should separate snowflake “system privileges” from access to data by creating a separate role hierarchy.
Eugene Choi·Jul 29I love RBAC, said No One Ever.“RBAC is the worst form of access control except all the other ones suck more.”
Eugene Choi·Jul 30, 2025Reducing Attack Surface with Snowflake Authentication PoliciesTLDR; Snowflake Authentication Policies can help reduce your attack surface by constraining how users can authenticate and which clients…
Eugene Choi·Jul 29, 2025Preventing Snowflake account takeover with “Multi-System Authentication”No one likes to think about bad things happening , but bear with us — what if a bad actor gains access as ACCOUNTADMIN in your Snowflake…
Eugene Choi·Apr 14, 2025Password EradicationTLDR: if you need a utility to help you remove passwords and set User Types, we provide instructions for using a Streamlit app that will…A response icon1A response icon1