Snowflake is cloud-based data storage and analytics service.
Prerequisites
1. Create the role READ_ONLY.
2. Create a user CLOUDAWARE and assign the READ_ONLY role to them:
CREATE USER CLOUDAWARE DEFAULT_ROLE=READ_ONLY
3. Provide the role with access to Warehouse*:
GRANT USAGE ON WAREHOUSE <warehouse_name> TO ROLE READ_ONLY
Note that Cloudaware will collect only those objects that the access has been granted to. Assign the permissions below depending on preferable level of access:
Basic Access
GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE READ_ONLY
Detailed Access
Snowflake Integration: GRANT USAGE ON INTEGRATION <integration_name> TO READ_ONLY
Snowflake Database: GRANT USAGE ON DATABASE <database_name> TO READ_ONLY
Snowflake Schema:
GRANT USAGE ON ALL SCHEMAS IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE SCHEMAS IN DATABASE <database_name> TO READ_ONLY
Snowflake Stage:
GRANT USAGE ON ALL STAGES IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE STAGES IN DATABASE <database_name> TO READ_ONLY
Snowflake Table:
GRANT REFERENCES ON ALL EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY
GRANT REFERENCES ON FUTURE EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY
Snowflake Pipe:
GRANT MONITOR ON PIPE <database_name>.<schema_name>.<pipe_name> TO READ_ONLY
GRANT MONITOR ON FUTURE PIPES IN DATABASE <database_name> TO READ_ONLY
Adding Snowflake Warehouse
1. Log in to your Cloudaware account → Admin.
2. Find Snowflake in the list of integrations, click +Add.
[screen]
3. Select the certificate from the drop-down list or create a new one by clicking +Create New.
4. Copy publicKey and change the RSA_PUBLIC_KEY of the user:
alter user <username> set rsa_public_key='MI...'
5. Fill out the following fields:
[screen]
Account ID - Snowflake account ID
Username - name of the user created for this integration (e.g. Cloudaware)
Warehouse - select one of the available warehouses from the list
Click Save.
7. The green light in 'Status' means that Snowflake integration has been successfully configured. If there is a red light, please contact support@cloudaware.com.
8. Once the integration is added, go to Cloudaware CMDB Navigator to view the Snowflake data collected under the tab 'Snowflake':
[screen]
List of Supported Objects
Cloudaware supports the following Snowflake objects:
Snowflake Account |