問題文
A regulated bank must allow only two approved models for generation in its account, with per-role control so that the research team can use a wider set than the customer-facing team. Which mechanism does Snowflake recommend?
選択肢
- A masking policy on the model name column, with a role that lacks the unmasked view seeing a placeholder in place of the model it asked for.
- A network policy restricting which regions the account can reach, which keeps traffic away from the regions where the newer models happen to be served and leaves the approved ones reachable.
- The account-level allowlist parameter, which is the recommended mechanism because it applies uniformly to the whole account and can be narrowed for individual roles when needed.
- Role-based access control over the model objects in the SNOWFLAKE.MODELS schema, which gives per-role control and is the go-forward mechanism.