14 karma · joined January 9, 2022
This can be quite a useful phenomenon practically. Anyone who has learned to scuba dive will know that if you take a deep breath in from your air tank you increase your volume without changing your weight and will be able to slightly change your bouyancy and float upwards or downwards without moving your limbs. Submarines also use the same phenomenon.
I guess the million (thousand?) dollar questios now become where do you draw the boundary across accounts? Presumably there are many bad ways to slice accounts up. And what happens when accounts do need to communicate?
I can imagine three major scenarios for cross account permissions:
* Cross account iam policies (painful in my experience) * Adding trust policies to enable cross account assuming roles (better but limited) * Limiting cross account policies to specific easy to configure services. E.g. S3 (best option, I've seen but maybe too limited)
Would love to hear the author's view.
https://docs.snowflake.com/en/sql-reference/operators-query....