Snowflake

-- Create a stage pointing to S3
CREATE OR REPLACE STAGE my_s3_stage
  URL='s3://my-bucket/data/'
  CREDENTIALS=(AWS_KEY_ID='...' AWS_SECRET_KEY='...');

-- Copy data into a table
COPY INTO fct_orders
FROM @my_s3_stage/orders/
FILE_FORMAT = (TYPE = 'CSV' SKIP_HEADER = 1 FIELD_OPTIONALLY_ENCLOSED_BY = '"')
ON_ERROR = 'CONTINUE';

from snowflake.snowpark import Session

session = Session.builder.configs({
    "account": os.environ["SNOWFLAKE_ACCOUNT"],
    "user": os.environ["SNOWFLAKE_USER"],
    "password": os.environ["SNOWFLAKE_PASSWORD"],
    "warehouse": "COMPUTE_WH",
    "database": "ANALYTICS",
    "schema": "MARTS",
}).create()

df = session.table("fct_orders")
result = df.filter(df["status"] == "completed")            .group_by("customer_id")            .agg({"amount": "sum"})            .sort("SUM(AMOUNT)", ascending=False)            .limit(10)
result.show()

-- Create masking policy
CREATE OR REPLACE MASKING POLICY email_mask AS (val VARCHAR)
RETURNS VARCHAR ->
  CASE
    WHEN CURRENT_ROLE() IN ('ANALYST') THEN val
    ELSE '***MASKED***'
  END;

-- Apply to column
ALTER TABLE customers MODIFY COLUMN email
  SET MASKING POLICY email_mask;