Snowflake Data Export

1
CREATE NETWORK RULE LD_EXPORT.EXPORT_<ProjKey__EnvKey>.LD_DATA_EXPORT_NETWORK_RULE TYPE = IPV4 MODE = INGRESS VALUE_LIST = ('35.192.85.117');
2
3
CREATE NETWORK POLICY LD_DATA_EXPORT_NETWORK_POLICY
4
  ALLOWED_NETWORK_RULE_LIST=(LD_DATA_EXPORT_NETWORK_RULE);
5
6
ALTER USER LD_EXPORT_USER_<ProjKey__EnvKey> SET NETWORK_POLICY = LD_DATA_EXPORT_NETWORK_POLICY;

1
begin;
2
3
    -- These variables should not be changed
4
    set warehouse_name = 'LD_EXPORT_WH'; -- all letters must be uppercase
5
    set database_name = 'LD_EXPORT'; -- all letters must be uppercase
6
7
    use role sysadmin;
8
9
    -- Create a warehouse for data transfer service
10
    create warehouse if not exists identifier($warehouse_name)
11
    warehouse_size = xsmall
12
    warehouse_type = standard
13
    auto_suspend = 60
14
    auto_resume = true
15
    initially_suspended = true;
16
17
    -- Create database for data transfer service
18
    create database if not exists identifier($database_name);
19
20
commit;

1
begin;
2
3
    -- These variables should not be changed
4
    set role_name = 'LD_EXPORT_ROLE'; -- all letters must be uppercase
5
    set warehouse_name = 'LD_EXPORT_WH'; -- all letters must be uppercase
6
    set database_name = 'LD_EXPORT'; -- all letters must be uppercase
7
8
    -- Change role to securityadmin for role steps
9
    use role securityadmin;
10
11
    -- Create role for data transfer service
12
    create role if not exists identifier($role_name);
13
14
    -- Establish SYSADMIN as the parent of the new role. Note: this does not grant the access privileges of SYSADMIN to the new role.
15
    grant role identifier($role_name) to role SYSADMIN;
16
17
    -- Change role to sysadmin for warehouse / database steps
18
    use role sysadmin;
19
20
    -- Grant service role access to warehouse
21
    grant usage
22
    on warehouse identifier($warehouse_name)
23
    to role identifier($role_name);
24
25
    -- Grant service role access to database
26
    grant monitor, usage
27
    on database identifier($database_name)
28
    to role identifier($role_name);
29
30
commit;

1
begin;
2
3
    -- These variables should not be changed
4
    set ld_env_name = '<YOUR_LD_PROJ_ENV_KEY>'; -- key of your LaunchDarkly project and environment
5
    set schema_name = CONCAT('EXPORT_', $ld_env_name); -- this schema name will be provided to LaunchDarkly
6
    set user_name = CONCAT('LD_EXPORT_USER_', $ld_env_name); -- this user name will be provided to LaunchDarkly
7
8
    -- Ensure these match with the warehouse, database, and role names you created earlier
9
    set warehouse_name = 'LD_EXPORT_WH';
10
    set database_name = 'LD_EXPORT';
11
    set role_name = 'LD_EXPORT_ROLE';
12
13
    -- Change role to sysadmin for schema steps
14
    use role sysadmin;
15
16
    -- Create schema for the environment
17
    use database identifier($database_name);
18
    create schema if not exists identifier($schema_name);
19
20
    -- Grant service role access to the schema
21
    grant usage, create table
22
    on schema identifier($schema_name)
23
    to role identifier($role_name);
24
25
    -- Change role to securityadmin for user steps
26
    use role securityadmin;
27
28
    -- Create a user for data transfer service
29
    create user if not exists identifier($user_name);
30
31
    -- Set default role and warehouse to new user
32
    alter user identifier($user_name) set default_role = $role_name;
33
    alter user identifier($user_name) set default_warehouse = $warehouse_name;
34
    alter user identifier($user_name) set QUOTED_IDENTIFIERS_IGNORE_CASE = false;
35
36
    grant role identifier($role_name) to user identifier($user_name);
37
38
commit;

1
use role securityadmin;
2
alter user identifier($user_name) set rsa_public_key=$$
3
INSERT PUBLIC KEY HERE
4
$$;