Book Image

Snowflake Cookbook

By : Hamid Mahmood Qureshi, Hammad Sharif
5 (1)
Book Image

Snowflake Cookbook

5 (1)
By: Hamid Mahmood Qureshi, Hammad Sharif

Overview of this book

Snowflake is a unique cloud-based data warehousing platform built from scratch to perform data management on the cloud. This book introduces you to Snowflake's unique architecture, which places it at the forefront of cloud data warehouses. You'll explore the compute model available with Snowflake, and find out how Snowflake allows extensive scaling through the virtual warehouses. You will then learn how to configure a virtual warehouse for optimizing cost and performance. Moving on, you'll get to grips with the data ecosystem and discover how Snowflake integrates with other technologies for staging and loading data. As you progress through the chapters, you will leverage Snowflake's capabilities to process a series of SQL statements using tasks to build data pipelines and find out how you can create modern data solutions and pipelines designed to provide high performance and scalability. You will also get to grips with creating role hierarchies, adding custom roles, and setting default roles for users before covering advanced topics such as data sharing, cloning, and performance optimization. By the end of this Snowflake book, you will be well-versed in Snowflake's architecture for building modern analytical solutions and understand best practices for solving commonly faced problems using practical recipes.
Table of Contents (12 chapters)

Safeguarding the ACCOUNTADMIN role and users in the ACCOUNTADMIN role

This recipe will walk you through techniques to safeguard the ACCOUNTADMIN role from unauthorized access and introduce redundancy in the role membership. The recipe will then walk you through the process of securing users in the ACCOUNTADMIN role through multi-factor authentication (MFA).

Getting ready

Before proceeding with this recipe, please ensure that you have access to the ACCOUNTADMIN user. Note that the steps in this recipe should be run through the Snowflake web UI.

How to do it…

To introduce redundancy in the ACCOUNTADMIN role, we will create a new user and grant that user the ACCOUNTADMIN role. Next, we will enable MFA for the newly created user:

  1. Create a new user that we will give the ACCOUTNADMIN role using the syntax that follows. Make sure that you provide a valid email address for the user. The email address will be used in the next steps to set up MFA:
    USE ROLE SECURITYADMIN...