Skip to main content

Snowflake

Integrate Snowflake with Cloudaware to inventory accounts, databases, schemas, roles, users, warehouses, and related metadata for data platform governance.

info
  • Audience: Cloudaware administrators, data platform teams, and governance teams
  • Outcome: Snowflake metadata is available in CMDB for inventory review, access visibility, relationship mapping, and reporting

Capabilities​

The integration supports:

  • Read-only discovery of Snowflake metadata for accounts, databases, schemas, tables, views, stages, pipes, roles, users, and role assignments
  • CMDB visibility into Snowflake resources for data platform inventory and governance reporting
  • Relationship mapping between Snowflake users, roles, and data platform resources
  • Search and reporting for Snowflake objects using CMDB Navigator, CMDB list views, and reports

Prerequisites​

Before you begin, make sure you have:

  • Access to a Cloudaware account.
  • A user with access to the Admin Console and permissions to manage cloud accounts, organizations, and integrations (Cloudaware Administrator).
  • Snowflake account identifier.
  • Snowflake username for Cloudaware discovery.
  • Read-only Snowflake role, for example, READ_ONLY, granted the required USAGE, MONITOR, and REFERENCES permissions for the desired scope.
  • RSA key pair for key-based authentication.
  • Target Snowflake warehouse for metadata queries.

Add a Snowflake Account to Cloudaware​

  1. In Cloudaware, go to Admin.
  2. Find Snowflake, then click + ADD.
  3. Enter the following values:
    • Account ID: The Snowflake account identifier.
    • Username: The Snowflake username used by Cloudaware for read-only discovery.
    • Certificate: The certificate created or selected for Snowflake key-based authentication.
    • Warehouse: The Snowflake warehouse used to run metadata discovery queries.
  4. Click Save.
  5. Confirm that the integration status indicator is green.
tip

Allow the initial discovery cycle to complete after enabling the integration.

View Snowflake Data in CMDB​

  1. In Cloudaware, open CMDB Navigator.
  2. In the left pane, select SNOWFLAKE.
  3. Open an object list, e.g., Snowflake Databases, to view discovered records.

Supported Objects​

Cloudaware ingests the following Snowflake objects:

Snowflake ObjectCMDB Object API Name
Snowflake AccountCA10SN2__CaSnowflakeAccount__c
Snowflake DatabaseCA10SN2__CaSnowflakeDatabase__c
Snowflake IdentityCA10SN2__CaSnowflakeIdentity__c
Snowflake PipeCA10SN2__CaSnowflakePipe__c
Snowflake RoleCA10SN2__CaSnowflakeRole__c
Snowflake SchemaCA10SN2__CaSnowflakeSchema__c
Snowflake StageCA10SN2__CaSnowflakeStage__c
Snowflake TableCA10SN2__CaSnowflakeTable__c
Snowflake UserCA10SN2__CaSnowflakeUser__c
Snowflake User Role LinkCA10SN2__CaSnowflakeUserRoleLink__c
Snowflake ViewCA10SN2__CaSnowflakeView__c

Troubleshooting​

note

Initial data collection may take time to complete.

Authentication Fails or Integration Shows Red Status​

  • Verify that the Snowflake account identifier, username, certificate, and warehouse are correct.
  • Confirm that the Snowflake user is configured for key-based authentication with the matching public key.
  • Check whether the selected warehouse is available and can be used by the discovery user.

No Snowflake Data Appears in CMDB​

  • Allow the initial discovery cycle to complete.
  • Confirm that the Snowflake role assigned to the discovery user has the required read-only permissions for the target scope.
  • Verify that the discovery user can access the databases, schemas, and objects expected to appear in Cloudaware.
  • In CMDB Navigator, verify that you are viewing the SNOWFLAKE section and related resources.

Some Snowflake Objects Are Missing​

  • Check whether the missing objects are in a scope where the discovery role has USAGE, MONITOR, or REFERENCES permissions as required.
  • Confirm that the warehouse used for discovery can run metadata queries across the desired Snowflake scope.
  • Review recent Snowflake changes after the next discovery cycle completes.

Still stuck? Contact Cloudaware Support at support@cloudaware.com with the integration name, Snowflake account identifier, and a brief description of the issue.

Reconfigure or Remove the Integration​

warning

To rotate keys, change the warehouse, or adjust account settings, edit the existing integration instead of deleting and re-creating it.

Update the Integration Details​

  1. Go to Admin.
  2. Select Snowflake.
  3. Under the tab Identities or Certificates, select the specific integration.
  4. Open the three-dot menu (⋮), then click Edit.
  5. Update the required fields.
  6. Click Save.

Remove the Integration from Cloudaware​

  1. Go to Admin.
  2. Select Snowflake.
  3. Under the tab Identities or Certificates, select the specific integration.
  4. Open the three-dot menu (⋮), then click Delete.
  5. Confirm the deletion if prompted.

Security Notes​

  • Use a dedicated Snowflake user for Cloudaware discovery.
  • Assign a read-only Snowflake role with only the permissions required for metadata discovery.
  • Do not use Snowflake administrator credentials for the integration.
  • Protect the private key used for Snowflake key-based authentication and rotate keys according to your organization's credential management policy.
  • Review Snowflake metadata visibility with your data governance team, because object names, role assignments, user records, and data platform structure may reveal sensitive operational context.
  • Remove unused Snowflake discovery users, roles, and keys when the integration is retired.