aws-config-iam-policies

Create and validate AWS IAM policies for Snowflake data lake access.

1|Updated Apr 30, 2026
One-click install
npx skills add https://github.com/subhamay-bhattacharyya/aws-csv-data-pipeline --skill aws-config-iam-policies
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-config-iam-policies
Source: https://github.com/subhamay-bhattacharyya/aws-csv-data-pipeline/tree/main/.claude/skills/aws-config-iam-policies
Command: npx skills add https://github.com/subhamay-bhattacharyya/aws-csv-data-pipeline --skill aws-config-iam-policies

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill simplifies the creation, editing, and validation of AWS IAM roles and policies tailored for Snowflake data lake projects, ensuring secure and compliant cloud permissions management.

Core Features & Use Cases

  • Policy Configuration: Write and validate IAM policies for S3, KMS, and SQS required in Snowflake data pipelines.
  • Error Debugging: Troubleshoot permission issues with detailed policy explanations and best practices.
  • Use Case: When deploying a Snowflake external stage on AWS, generate the necessary IAM role policies to grant appropriate access to buckets, keys, and SQS queues.

Quick Start

Use this skill to generate IAM policies for your Snowflake pipeline based on your AWS resources.

Frequently Asked Questions about aws-config-iam-policies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create AWS IAM policies for a Snowflake data lake implementation?

Creating AWS IAM policies for Snowflake involves configuring least-privilege permissions for S3 access, KMS encryption, and SQS. This process ensures secure integration by validating project-specific resource ARNs aligned with AWS best practices.

What IAM permissions does Snowflake need to access an S3 data lake?

Snowflake requires specific IAM permissions to access an S3 data lake, including read/write access to S3 buckets, KMS key decryption rights, and SQS queue permissions. Configuring these correctly ensures secure and compliant data pipelines.

Why does my Snowflake external stage on AWS fail with an S3 access denied error?

S3 access denied errors in Snowflake external stages often stem from misconfigured IAM roles or missing KMS encryption permissions. Troubleshooting requires validating the IAM policy structure against the specific S3 bucket and KMS key ARNs.

Can I validate IAM roles for Snowflake pipelines to ensure least-privilege access?

Yes, you can validate IAM roles for Snowflake pipelines to ensure least-privilege access by checking the policy configuration against project-specific resource ARNs. This prevents over-permissioned roles and maintains secure S3 and KMS integration.

Do I need SQS permissions in my AWS IAM policy for Snowflake data pipelines?

Yes, SQS permissions are required in AWS IAM policies for Snowflake data pipelines to handle automated event notifications. Configuring these permissions alongside S3 and KMS access ensures complete and secure data lake integration.