4 ms·
Hey HN! I've been a fan of Snowflake since I started using it in my first job out of school. But, powerful as it is, it still comes with its fair share of chall
by ihales 4y ago
Hey HN! I've been a fan of Snowflake since I started using it in my first job out of school. But, powerful as it is, it still comes with its fair share of challenges/gotchas. I've been digging into Snowflake metadata and access controls over the last several months as part of my work on Jetty Core[1], and thought about writing some sort of white paper about best practices to share some of the things I've learned. It turns out there are a lot of those already, so instead I decided to build a living white paper instead.
Jetty Scorecard is an open-source python library/app that connects to a Snowflake account and provides insights and recommendations specific to your configuration. Today it runs 17 checks[2], providing info about things like which tables are the most popular, whether you have misconfigured masking policies, and whether your future grants are being ignored by the system[3].
[1] Multi-platform access management for the data stack. Docs: https://docs.get-jetty.com/ https://docs.get-jetty.com/ Demo: https://youtu.be/Xx0D6GCTNdc https://youtu.be/Xx0D6GCTNdc
[2] https://github.com/jettylabs/jetty_scorecard/blob/main/jetty_scorecard/checks/README.MD https://github.com/jettylabs/jetty_scorecard/blob/main/jetty...
[3] https://docs.snowflake.com/en/sql-reference/sql/grant-privilege.html#considerations https://docs.snowflake.com/en/sql-reference/sql/grant-privil...