A network-based data warehouse system comprising: at least one hardware processor; and a memory storing instructions that cause the at least one hardware processor to perform operations comprising: creating, in a database, a storage integration object identifying a cloud identity object and a storage location in a storage platform of a cloud storage provider system, the cloud identity object corresponding to a cloud identity that is associated, at the storage platform of the cloud storage provider system, with a proxy identity object corresponding to a proxy identity granted permission to access the storage location; creating, in the database, an external stage object based on the storage integration object, the external stage object enabling an integration between the network-based data warehouse system and the storage location in the storage platform, the external stage object identifying the storage location and including an association with the storage integration object; receiving, from a computing device, a command to load or unload data at the storage location; and in response to the command, loading or unloading, via the proxy identity object, the data at the storage location in the storage platform using the external stage object, the loading or unloading of the data comprising: identifying the storage integration object based on the external stage object; and accessing the storage location by causing the cloud identity to assume the proxy identity using security credentials obtained from the cloud storage provider system based on information included in the storage integration object. at least one hardware processor; and a memory storing instructions that cause the at least one hardware processor to perform operations comprising: creating, in a database, a storage integration object identifying a cloud identity object and a storage location in a storage platform of a cloud storage provider system, the cloud identity object corresponding to a cloud identity that is associated, at the storage platform of the cloud storage provider system, with a proxy identity object corresponding to a proxy identity granted permission to access the storage location; creating, in the database, an external stage object based on the storage integration object, the external stage object enabling an integration between the network-based data warehouse system and the storage location in the storage platform, the external stage object identifying the storage location and including an association with the storage integration object; receiving, from a computing device, a command to load or unload data at the storage location; and in response to the command, loading or unloading, via the proxy identity object, the data at the storage location in the storage platform using the external stage object, the loading or unloading of the data comprising: identifying the storage integration object based on the external stage object; and accessing the storage location by causing the cloud identity to assume the proxy identity using security credentials obtained from the cloud storage provider system based on information included in the storage integration object. creating, in a database, a storage integration object identifying a cloud identity object and a storage location in a storage platform of a cloud storage provider system, the cloud identity object corresponding to a cloud identity that is associated, at the storage platform of the cloud storage provider system, with a proxy identity object corresponding to a proxy identity granted permission to access the storage location; creating, in the database, an external stage object based on the storage integration object, the external stage object enabling an integration between the network-based data warehouse system and the storage location in the storage platform, the external stage object identifying the storage location and including an association with the storage integration object; receiving, from a computing device, a command to load or unload data at the storage location; and in response to the command, loading or unloading, via the proxy identity object, the data at the storage location in the storage platform using the external stage object, the loading or unloading of the data comprising: identifying the storage integration object based on the external stage object; and accessing the storage location by causing the cloud identity to assume the proxy identity using security credentials obtained from the cloud storage provider system based on information included in the storage integration object. identifying the storage integration object based on the external stage object; and accessing the storage location by causing the cloud identity to assume the proxy identity using security credentials obtained from the cloud storage provider system based on information included in the storage integration object.