You are developing a Snowflake Native Application. You need to grant specific privileges on a warehouse named 'APP WH' to the application role 'app_public' to allow application users to execute queries within that warehouse. Which of the following SQL statements is the MOST secure and appropriate way to achieve this, adhering to the principle of least privilege?

• A.
  
• B.
  
• C.
  
• D.
  
• E.
  

You are packaging a Snowflake Native App that includes a Streamlit application. You need to define specific permissions for the application to access data in the consumer's account. Specifically, the application needs to read from a table named in the schema within the consumer's database 'consumer_db'. Which of the following steps are required to correctly grant these privileges during the application installation process?

• A. The consumer must manually grant the 'SELECT privilege on 'consumer_db.consumer_schema.consumer_data' to the application's install-time role after the application is installed. No action is needed within the application package.
• B. In your manifest file ('manifest.yml'), declare a 'privileges' section specifying 'SELECT' privilege on 'consumer_db.consumer_schema.consumer_data' for the app_role' .
• C. Create a secure view in the consumer's account that selects from and grant 'SELECT on the secure view to the application role. This requires coordination with the consumer.
• D. Use the 'snowflake.permissionss module within your Streamlit application to dynamically request the 'SELECT privilege on 'consumer_db.consumer_schema.consumer_data' when the application starts. Display an error message if the privilege is not granted.
• E. In your setup script ('setup.sql'), execute 'GRANT SELECT ON TABLE consumer_db.consumer_schema.consumer_data TO APPLICATION ROLE app_role;' where 'app_role' is the application role defined in your application package.

Consider the following Snowflake Native App setup script snippet. The intention is to create an application role and grant it the necessary privileges to execute a stored procedure named 'MY PROCEDURE' within the application's data container. However, the script is not working as expected, and the stored procedure is failing with permission errors. Identify ALL of the issues in the following code.

• A. The application role must be granted the 'USAGE privilege on the database that contains the schema.
• B. The 'USAGE privilege on the schema containing the stored procedure is missing.
• C. The 'EXECUTE' privilege on the stored procedure should be granted to the 'application' role, not 'app_public' .
• D. The application role 'app_public' cannot be created inside the setup script.
• E. The setup script does not require any additional privileges to assign 'EXECUTE on PROCEDURE

You are developing a Snowflake Native Application that provides data enrichment services. You want to monetize your application through the Snowflake Marketplace using a custom, usage-based pricing model. You need to track the number of API calls made by each consumer account and bill them accordingly. Which of the following steps are necessary to implement this in your application and listing configurations?

• A. Implement custom code to track API calls in a table within the application package and use a scheduled task to generate billing reports manually. This report is then shared outside of Snowflake Marketplace.
• B. Implement a metering function within your Native Application using 'snowflake.snowpark.functions.metering'. Configure your application listing with a CONSUMPTION listing type and define metering events based on API calls made. Set the cost per metering event.
• C. Use Snowflake's data sharing capabilities to share a billing table with consumer accounts, tracking API calls externally and managing billing outside of the Snowflake Marketplace.
• D. Implement a metering function within your Native Application using 'snowflake.snowpark.functions.metering'. Configure your application listing with a STANDARD listing type and set a base price.
• E. Implement a metering function using stored procedures, record API usage in a dedicated table within your application's container and use 'CREATE NOTIFICATION INTEGRATION' to send billing data to an external system for invoice generation.