Setting up product analytics in Snowflake

-- Setting up the warehouse, database, schema, roles, user and such.
-- the events table schema we expect
begin;
-- Enter project environment key
set project_env_key = 'EXAMPLE_PROJECT_ENV_KEY';
-- ===== System Setup Variables (Do not modify) =====
set warehouse_name = 'LD_PRODUCT_ANALYTICS_WH'; -- Uppercase required
set database_name = 'LD_PRODUCT_ANALYTICS';     -- Uppercase required
set role_name = 'LD_PRODUCT_ANALYTICS_ROLE';    -- Uppercase required
set schema_name = 'PRODUCT_ANALYTICS_'|| $project_env_key;
set user_name = 'LD_PRODUCT_ANALYTICS_USER_'|| $project_env_key;
-- ===== Warehouse Setup =====
use role sysadmin;
create warehouse if not exists identifier($warehouse_name)
    warehouse_size = medium
    warehouse_type = standard
    auto_suspend = 60
    auto_resume = true
    initially_suspended = true;
-- ===== Database Setup =====
create database if not exists identifier($database_name);
-- ===== Role Setup =====
use role securityadmin;
create role if not exists identifier($role_name);
grant role identifier($role_name) to role SYSADMIN;
-- ===== Permissions: Warehouse & Database =====
use role sysadmin;
grant usage, operate
    on warehouse identifier($warehouse_name)
    to role identifier($role_name);
grant monitor, usage
    on database identifier($database_name)
    to role identifier($role_name);
grant create schema
    on database identifier($database_name)
    to role identifier($role_name);
grant usage
    on all schemas in database identifier($database_name)
    to role identifier($role_name);
grant usage
    on future schemas in database identifier($database_name)
    to role identifier($role_name);
grant create table
    on all schemas in database identifier($database_name)
    to role identifier($role_name);
grant create table
    on future schemas in database identifier($database_name)
    to role identifier($role_name);
grant select
    on all tables in database identifier($database_name)
    to role identifier($role_name);
grant select
    on future tables in database identifier($database_name)
    to role identifier($role_name);
grant select
    on all views in database identifier($database_name)
    to role identifier($role_name);
grant select
    on future views in database identifier($database_name)
    to role identifier($role_name);
-- ===== Schema Setup =====
use database identifier($database_name);
create schema if not exists identifier($schema_name);
grant usage, create table, create view
    on schema identifier($schema_name)
    to role identifier($role_name);
grant create procedure, create task, create stream, create function
    on schema identifier($schema_name)
    to role identifier($role_name);
grant operate
    on future tasks in schema identifier($schema_name)
    to role identifier($role_name);
grant execute task on account
    to role identifier($role_name);
-- ===== User Setup =====
use role securityadmin;
create user if not exists identifier($user_name);
alter user identifier($user_name)
    set default_role = $role_name,
        default_warehouse = $warehouse_name,
        QUOTED_IDENTIFIERS_IGNORE_CASE = false;
grant role identifier($role_name)
    to user identifier($user_name);
-- ===== Set Public Key =====
alter user identifier($user_name)
    set rsa_public_key=$$
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSIgCMLA5k5Cwifb0xkOlkrlOnd35+fYCOttX7O2l2VHocIFV964CjCYo9iRC9Vih11zzduOPGGb73RyD1g8/HnTbQK44PgTZc9YdPwxvrmlWL/lbAUj9+gr9KkhfYiY2y2GMMQgwc8nbckPAgLhgqiTqVTBIdhrKktNoCdsupkHB1awa1y6c2W/HvfZHTJWeNOArZM+d1WdQu0SuSewTTJR2deHxBYG74SRsJcAVZ1YMuxavQ0+gTeU6qz0u3FdKW73bAXMyvgbWUNcylAju/5IebmWuFCzGg7tCy/2rNcLaFnzm1XEQUpsYi/SggyyP4NYl2Nfzgdq25azsHSKYwIDAQAB
$$;
commit;
-- ==== Run this only after creating the ALLEVENTS table in the schema ==== --
-- ==== Change role to LD_PRODUCT_ANALYTICS_ROLE to run this ==== --
-- ===== Enable Change Tracking on Events Table ===== --
-- This assumes the ALLEVENTS table already exists --
use role identifier($role_name);
begin;
alter table ALLEVENTS set change_tracking = true;
commit;