Snowflake

Owned by Daria Lebedeva
Last updated: Dec 11, 2024
3 min read

Snowflake is cloud-based data storage and analytics service. This guide explains how to add Snowflake integration to Cloudaware.

Snowflake - CA_logo_black.png To see how Cloudaware seamlessly integrates with Snowflake in action, request a demo.

Prerequsites

 

  1. Create a custom role, e.g. READ_ONLY.

  2. Create a user, e.g. CLOUDAWARE, and assign the role READ_ONLY.

    create user CLOUDAWARE default_role=READ_ONLY

  3. Provide the role with access to Warehouse*:

    grant usage on warehouse <warehouse_name> to role READ_ONLY

*Note that Cloudaware will only collect the metadata of objects to which access has been granted. Assign the permissions below depending on the preferred level of access:

Basic Access

GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE READ_ONLY

Detailed Access

Snowflake Integration: GRANT USAGE ON INTEGRATION <integration_name> TO READ_ONLY

Snowflake Database: GRANT USAGE ON DATABASE <database_name> TO READ_ONLY

Snowflake Schema:

GRANT USAGE ON ALL SCHEMAS IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE SCHEMAS IN DATABASE <database_name> TO READ_ONLY

Snowflake Stage:

GRANT USAGE ON ALL STAGES IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE STAGES IN DATABASE <database_name> TO READ_ONLY

Snowflake Table:

GRANT REFERENCES ON ALL EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY
GRANT REFERENCES ON FUTURE EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY

Snowflake Pipe:

GRANT MONITOR ON PIPE <database_name>.<schema_name>.<pipe_name> TO READ_ONLY
GRANT MONITOR ON FUTURE PIPES IN DATABASE <database_name> TO READ_ONLY

 

Add Snowflake account

 

  1. Log in to Cloudaware account → Admin.

    Snowflake - admin.png

  2. Find Snowflake in the list of cloud integrations. Click +Add.

    Snowflake - admin - add Snowflake integration.png

  3. Fill out the form:

    WHERE
    1 Account ID - Snowflake account ID (check how to find account ID here)
    Username - name of the user created for this integration, e.g. CLOUDAWARE
    2 In 'Select Certificate': click +CREATE NEW. Enter a meaningful name and click +GENERATE to add a new Key Pair.
    3 In 'Next Step': copy the command. Run the command in Snowflake to change the user's rsa_public_key.
    4 In 'Warehouse': click GET WAREHOUSES. Select a warehouse from the list.

    Click Save.

  4. The green light in 'Status' means that Snowflake integration has been successfully configured. If there is a red light, please contact support@cloudaware.com.

  5. To view Snowflake-related data, go to Cloudaware CMDB Navigator. Select SNOWFLAKE in the menu on the left:

     

List of Snowflake objects

 

Cloudaware supports the following Snowflake objects:

Snowflake Account
Snowflake Database
Snowflake Integration
Snowflake Integration Location
Snowflake Pipe
Snowflake Role
Snowflake Schema
Snowflake Stage
Snowflake Table
Snowflake User
Snowflake User Role Link
Snowflake View
Snowflake Warehouse