Snowflake

Snowflake is cloud-based data storage and analytics service. This guide explains how to add Snowflake integration to Cloudaware.

To see how Cloudaware seamlessly integrates with Snowflake in action, request a demo.

Prerequsites

1. Create a custom role, e.g. READ_ONLY.

2. Create a user, e.g. CLOUDAWARE, and assign the role READ_ONLY.

   CODE

   create user CLOUDAWARE default_role=READ_ONLY

3. Grant the role access to a warehouse*:

   CODE

   grant usage on warehouse <warehouse_name> to role READ_ONLY

^*Cloudaware collects metadata only for objects that the role has access to. Assign the permissions below depending on the required access level.

Basic Access

GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE READ_ONLY

Detailed Access

Snowflake Integration: GRANT USAGE ON INTEGRATION <integration_name> TO READ_ONLY

Snowflake Database: GRANT USAGE ON DATABASE <database_name> TO READ_ONLY

Snowflake Schema:

GRANT USAGE ON ALL SCHEMAS IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE SCHEMAS IN DATABASE <database_name> TO READ_ONLY

Snowflake Stage:

GRANT USAGE ON ALL STAGES IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE STAGES IN DATABASE <database_name> TO READ_ONLY

Snowflake Table:

GRANT REFERENCES ON ALL EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY
GRANT REFERENCES ON FUTURE EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY

Snowflake Pipe:

GRANT MONITOR ON PIPE <database_name>.<schema_name>.<pipe_name> TO READ_ONLY
GRANT MONITOR ON FUTURE PIPES IN DATABASE <database_name> TO READ_ONLY

Add a Snowflake account

1. Log in to Cloudaware → Admin.
   

   

2. Find Snowflake in integrations. Click +ADD.
   

   

3. Fill out the form:
   

   

   WHERE
   ¹ Account ID – Snowflake account identifier. Use either Account Name in the format myorg-account123 or Account Locator in the format xy12345 or xy12345.cloud_region_id
   Username – the user created for this integration, e.g., CLOUDAWARE
   ² Select Certificate – click +CREATE NEW, enter a meaningful name, then click +GENERATE to add a new key pair
   ³ Next Step – copy the command, run it in Snowflake to update the user’s rsa_public_key
   ⁴ Warehouse – click GET WAREHOUSES and select a warehouse-down list
   
   Click SAVE.
   

4. A green light in the ‘Status’ column indicates successful configuration. If the light is red, contact support@cloudaware.com.
   

   

5. To view Snowflake-related data, go to Cloudaware CMDB Navigator. Select SNOWFLAKE in the left-hand menu.
   

   

List of Snowflake objects

Cloudaware supports the following Snowflake objects:

Snowflake Account
Snowflake Database
Snowflake Integration
Snowflake Integration Location
Snowflake Pipe
Snowflake Role
Snowflake Schema
Snowflake Stage
Snowflake Table
Snowflake User
Snowflake User Role Link
Snowflake View
Snowflake Warehouse