A team is developing a data pipeline to load data from various sources into Snowflake. They are using external stages pointing to AWS S3 buckets and want to ensure maximum security and isolation between different pipelines accessing these stages. Which of the following security measures should they implement? (Choose TWO)
Correct Answer: B,D
Using separate IAM roles (B) for each pipeline enforces the principle of least privilege, granting each pipeline only the necessary access to its designated S3 bucket. Creating separate external stages (D) for each pipeline, linked to its specific S3 bucket and IAM role, provides isolation and prevents unauthorized access to other pipelines' data. Granting 'ACCOUNTADMIN' (A) provides excessive privileges. Storing all data in a single bucket (C) with a single IAM role increases the risk of data breaches. Disabling network policies (E) compromises overall security.