Snowflake Data Warehouse

Snowflake is a data warehouse built on top of the Amazon Web Services or Microsoft Azure cloud infrastructure, and allows storage and compute to scale independently.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users
• Roles
• Application Settings
• Domains & URLs
• Databases

Parameters

• Account Identifier (required) - The Snowflake account within your organization. The preferred structure is: <organization_name>-<account_name>

  For more information, see Account Identifiers.

• Warehouse (required, default: COMPUTE_WH) - Enter the relevant data warehouse. Note that the value is case-sensitive.

• Username (required) - The credentials for a user account that has required permissions to fetch assets.

• RSA Private Key (required) - Upload the RSA Private Key associated with a user account that has permissions to fetch assets.

• Devices View Name (required) - Enter the View/Table that you want to extract data from. Note that the value is case-sensitive. In each Snowflake account the name of the View/Table is user-defined. such as ACCOUNT_USAGE.DATABASES

• Key Passphrase (optional) - Enter the passphrase for an encrypted key.

• Fetch users - Toggle this option on to fetch users. When you select this option, the Users view name field is displayed. Enter a Users view name, this is the View/Table that you want to extract user data from. Note that the value is case-sensitive. The name of the default users view in Snowflake is ACCOUNT_USAGE.USERS. It should contain at least the fields: USER_ID, LOGIN_NAME, NAME, EMAIL.
  

• Fetch API URLs - Select this option to fetch API URLs.

• API URLs view name (optional) - Enter an API URLs view name, this is the View/Table that you want to extract API URL data from.

• Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

• HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

• HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

• HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

• Fetch databases as asset - Toggle on to fetch databases as an asset.
  • When Fetch databases as asset is selected, the Databases View Name option appears. If databases are not specified, then only "SHOW DATABASES" is queried, which fetches only the first level of databases.
  • When Fetch databases as asset is selected, the Exclude databases that contain the following strings option appears. You can enter a list of databases that contain certain strings to exclude from the fetch.
• Fetch Snowflake Instance Admins - Select this option to fetch users with the capability to manage the Snowflake instance.
• Organization Region - The parameter in the account URL that represents the region where the organization’s account is located.

APIs

Axonius uses the Snowflake SQL API.

Required Permissions

The value supplied in Username must have Read permissions for the Table/View specified in the connection details.

Version Matrix

This adapter was only tested with the versions marked as supported, but may work with other versions. Contact Axonius Support if you have a version that is not listed, which is not functioning as expected.

Supported From Version

Supported from Axonius version 4.5