aws-config-trust

Write and validate AWS IAM roles and policies for Snowflake data pipelines.

1|Updated Apr 30, 2026
One-click install
npx skills add https://github.com/subhamay-bhattacharyya/aws-csv-data-pipeline --skill aws-config-trust
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-config-trust
Source: https://github.com/subhamay-bhattacharyya/aws-csv-data-pipeline/tree/main/.claude/skills/aws-config-trust
Command: npx skills add https://github.com/subhamay-bhattacharyya/aws-csv-data-pipeline --skill aws-config-trust

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of writing, editing, and validating AWS IAM roles and policies for Snowflake data pipelines, reducing manual errors and configuration time.

Core Features & Use Cases

  • Policy Validation: Ensures correct structure and parameters for IAM policies used in Snowflake setups.
  • Configuration Assistance: Guides users on how to set permissions for S3, KMS, and SQS to support Snowpipe auto-ingest and data access workflows.
  • Use Case: A cloud engineer wants to create least-privilege IAM roles for secure Snowflake data access, and uses this Skill to generate the correct policy JSON.

Quick Start

Use the aws-config-trust skill to generate a policy for a new S3 bucket requiring Snowflake access.

Frequently Asked Questions about aws-config-trust

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an IAM policy for Snowflake to access an S3 bucket?

To configure Snowflake S3 access, this Skill generates least-privilege IAM policies with correct S3 bucket and KMS key resource ARNs. It validates the policy JSON structure to prevent permission errors during data pipeline execution.

What IAM permissions are needed for Snowpipe auto-ingest with SQS?

Snowpipe auto-ingest requires IAM policies granting specific SQS and S3 permissions. This Skill guides configuration of storage and message queuing permissions to support automated data ingestion workflows without manual policy editing.

Why does my Snowflake IAM role get access denied errors?

Access denied errors in Snowflake IAM roles often stem from incorrect resource ARNs or improper policy structure. This Skill validates IAM policy parameters and ensures correct least-privilege configuration, preventing common permission errors in Snowflake data pipelines.

How do I set up least-privilege IAM roles for Snowflake cloud data pipelines?

Setting up least-privilege IAM roles for Snowflake involves writing policies that restrict access to only necessary S3, KMS, and SQS resources. This Skill facilitates writing and validating these tailored IAM roles to maintain security and compliance.

Can I validate my AWS IAM policy structure before deploying it to Snowflake?

You can validate AWS IAM policy structure for Snowflake setups before deployment. This Skill checks policy parameters and structure to ensure correct configuration of storage, encryption, and message queuing permissions across cloud environments.