Snowflake

Snowflake is cloud-based data storage and analytics service. This guide explains how to add Snowflake integration to Cloudaware.

To see how Cloudaware seamlessly integrates with Snowflake in action, request a demo.

Prerequsites

1. Create a custom role, e.g. READ_ONLY.

2. Create a user, e.g. CLOUDAWARE, and assign the role READ_ONLY.

   CODE

   create user CLOUDAWARE default_role=READ_ONLY

3. Provide the role with access to Warehouse*:

   CODE

   grant usage on warehouse <warehouse_name> to role READ_ONLY

*Note that Cloudaware will only collect the metadata of objects to which access has been granted. Assign the permissions below depending on the preferred level of access:

Basic Access

GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE READ_ONLY

Detailed Access

Snowflake Integration: GRANT USAGE ON INTEGRATION <integration_name> TO READ_ONLY

Snowflake Database: GRANT USAGE ON DATABASE <database_name> TO READ_ONLY

Snowflake Schema:

GRANT USAGE ON ALL SCHEMAS IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE SCHEMAS IN DATABASE <database_name> TO READ_ONLY

Snowflake Stage:

GRANT USAGE ON ALL STAGES IN DATABASE <database_name> TO READ_ONLY
GRANT USAGE ON FUTURE STAGES IN DATABASE <database_name> TO READ_ONLY

Snowflake Table:

GRANT REFERENCES ON ALL EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY
GRANT REFERENCES ON FUTURE EXTERNAL TABLES IN DATABASE <database_name> TO READ_ONLY

Snowflake Pipe:

GRANT MONITOR ON PIPE <database_name>.<schema_name>.<pipe_name> TO READ_ONLY
GRANT MONITOR ON FUTURE PIPES IN DATABASE <database_name> TO READ_ONLY

Add Snowflake account

1. Log in to Cloudaware account → Admin.
   

   

2. Find Snowflake in the list of cloud integrations. Click +Add.
   

   

3. Fill out the form:
   

   

   WHERE
   ¹ Account ID - Snowflake account ID (check how to find account ID here)
   Username - name of the user created for this integration, e.g. CLOUDAWARE
   ² In 'Select Certificate': click +CREATE NEW. Enter a meaningful name and click +GENERATE to add a new Key Pair.
   ³ In 'Next Step': copy the command. Run the command in Snowflake to change the user's rsa_public_key.
   ⁴ In 'Warehouse': click GET WAREHOUSES. Select a warehouse from the list.
   
   Click Save.
   

4. The green light in 'Status' means that Snowflake integration has been successfully configured. If there is a red light, please contact support@cloudaware.com.
   

   

5. To view Snowflake-related data, go to Cloudaware CMDB Navigator. Select SNOWFLAKE in the menu on the left:
   

   

List of Snowflake objects

Cloudaware supports the following Snowflake objects:

Snowflake Account
Snowflake Database
Snowflake Integration
Snowflake Integration Location
Snowflake Pipe
Snowflake Role
Snowflake Schema
Snowflake Stage
Snowflake Table
Snowflake User
Snowflake User Role Link
Snowflake View
Snowflake Warehouse