You are developing a Snowflake Native Application that requires robust role-based access control. The application provides data transformation services to consumer accounts. You want to define distinct roles for different levels of access: 'TRANSFORMER_ADMIW (full control), 'TRANSFORMER USER (execute transformations), and 'TRANSFORMER OBSERVER (read-only access to metadata). In the setup script, which SQL statements are the MOST secure and efficient way to achieve this while adhering to Snowflake's recommended practices for application roles?

• A.
  
• B.
  
• C.
  
• D.
  
• E.
  

You are developing a Snowflake Native Application that uses Streamlit for its user interface. The application needs to access a custom Python module named 'my_module' which resides within your application package. You have correctly packaged the module. However, when running the Streamlit application, you encounter an 'ImportError: No module named What is the most likely reason for this error and how can you resolve it?

• A. The correct handler is not specified in the 'manifest.ymr file.
• B. Streamlit does not support custom Python modules within Snowflake Native Applications. You must use only built-in Python modules or those available through Anaconda.
• C. The 'my_module' is not included in the file for your application package. Add it to the 'packages' list in 'setup.py'.
• D. The 'my_module' is not located in the correct directory structure within the application package. Ensure it's placed in the 'src' directory (or the directory specified in 'package-name' in 'setup.py') and the directory structure mirrors the package structure required for import.
• E. The Streamlit application is not aware of the application package's Python environment. You need to set the environment variable within the Streamlit application to point to the directory containing 'my_module'.

You are managing the release of a new version (v2.0) of your Snowflake Native Application that introduces significant schema changes to shared tables accessed by consumer accounts. To minimize disruption during the upgrade, you want to implement a phased rollout while ensuring backward compatibility for consumers who haven't yet upgraded. Which of the following strategies would allow you to achieve this goal effectively? (Select TWO)

• A. Implement API versioning within your application code and provide compatibility layers to handle requests from consumers running older versions.
• B. Publish v2.0 without any schema changes and rely on consumers to manually migrate their data to new tables after upgrading.
• C. Create separate versions of the shared tables for vl .0 and v2.0, using views to present a unified interface. Grant consumer 'USAGE on view after upgrading.
• D. Create views on top of the new schema in v2.0 that emulate the old schema from vl .0. Grant consumers 'USAGE' on these views until they upgrade.
• E. Use dynamic SQL within stored procedures to conditionally access either the old or new schema based on the consumer's account ID, identified through a custom configuration table.

You are tasked with configuring a Snowflake Native Application that leverages Snowpark Container Services for a data transformation pipeline. The pipeline requires access to a public API to enrich dat a. However, the consumer's environment has strict network egress policies. The API endpoint is 'https://api.example.com/vl/data'. Which combination of Snowflake objects and configurations would best enable the container service to access this external API while adhering to the security policies ?

• A. Configure an API integration in Snowflake and then use it within the Snowpark Container Service to authenticate and access the API.
• B. Create a Snowflake external function that calls the API. Then, call the external function from within the Snowpark Container Service.
• C. Use the role to bypass network policies and directly access the API from the container service.
• D. Configure a Snowflake network rule specifying 'https://api.example.com/vl/data' as the allowed egress endpoint. Associate this rule with a network policy and assign the network policy to the container service.
• E. Create a Snowflake stage with external access integration pointing to 'https://api.example.com/vl/data'. Mount this stage in the container service.