Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Info

Snowflake is cloud-based data storage and analytics service.

logo rgb_sign dark (3).pngImage Added To see how Cloudaware seamlessly integrates with Snowflake in action, request a demo.

Table of Contents
minLevel1
maxLevel7

Prerequisites

1. Create the rolea custom role, e.g. READ_ONLY and assign it to a user (?).

2. Create a user, e.g. CLOUDAWARE, and assign the READ_ONLY role by default:CREATE USER CLOUDAWARE DEFAULT_ROLE.

Code Block
create user CLOUDAWARE default_role=READ_ONLY

3. Provide the role with access to Warehouse:

GRANT USAGE ON WAREHOUSE <warehouse_name> TO ROLE READ_ONLY

Snowflake Setup

Log in to your Cloudaware account → Admin.

Find Snowflake in the list of integrations, click +Add.

[screen]

Create or select KeyPair (in Snowflake?)

Copy publicKey and change the RSA_PUBLIC_KEY of the user:

Code Block
alter user <username> set rsa_public_key='MI...'

Fill out the following fields:

[screen]

Account ID -

Username -

Warehouse - select one of the available warehouse

Click Save.

The green light in 'Status' means that Snowflake integration has been successfully configured. If there is a red light, please contact support@cloudaware.com.

Once the integration is added, go to Cloudaware CMDB Navigator to view the Snowflake data collected under the tab 'Snowflake':

[screen]

Levels of Access

Basic*:

Code Block
grant usage on warehouse <warehouse_name> to role READ_ONLY

*Note that Cloudaware will only collect the metadata of objects that the access has been granted to. Assign the permissions below depending on the preferred level of access:

Basic Access

GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE READ_ONLY

Detailed Access

Snowflake Integration: GRANT USAGE ON INTEGRATION <integration_name> TO READ_ONLY

...

GRANT MONITOR ON PIPE <database_name>.<schema_name>.<pipe_name> TO READ_ONLY
GRANT MONITOR ON FUTURE PIPES IN DATABASE <database_name> TO READ_ONLY

...

Adding Snowflake Account

1. Log in to your Cloudaware account → Admin.

2. Find Snowflake in the list of integrations, click +Add.

...

3. To add Snowflake integration, fill out the form:

...

1) Account ID - Snowflake account ID (check on how to locate account Id here)

Username - name of the user created for this integration (e.g. CLOUDAWARE)

2) Click +Create New to add a new KeyPair in Certificate Name.

3) Click Copy query to the clipboard to copy the command. Run the command in Snowflake to change the user's rsa_public_key.

4) Click Get Warehouses. Select one of the available warehouses from the list in Warehouse.

Click Save.

4. The green light in 'Status' means that Snowflake integration has been successfully configured. If there is a red light, please contact support@cloudaware.com.

...

5. Once the integration is added, go to Cloudaware CMDB Navigator to view the Snowflake data collected under the tab 'SNOWFLAKE':

List of Snowflake Objects

Cloudaware supports the following Snowflake objects:

Snowflake Account
Snowflake Database
Snowflake Integration
Snowflake Integration Location
Snowflake Pipe
Snowflake Role
Snowflake Schema
Snowflake Stage
Snowflake Table
Snowflake User
Snowflake User Role Link
Snowflake View
Snowflake Warehouse