Resmo Documentation
SupportStatuspageTwitterLinkedIn
  • Welcome!
  • Getting Started
    • Quick Start Guide for Admins
    • SaaS Security Guide for Employees
    • Glossary
    • FAQ
    • Support
    • Resources documentation (automated)
  • Guides
    • Query Your First Resources
    • Create Your First Rule
  • Resources
    • Resources
    • Resource Changes
  • Notebooks
    • Notebooks
  • Audit Logs
    • Audit Logs
  • API
    • Basics
    • Query API
  • Resource Tags
    • Tag Rules
    • Manual Tagging
  • Queries
    • Query Types
    • Standard SQL Queries
    • Change SQL Queries
  • SaaS Discovery
    • SaaS Discovery Methods
    • Browser Extension Admin Guide
    • AI Email Scanning
    • Resmo Agent (Beta)
    • Apps Page
    • Users Page
  • Rules
    • Rules
    • Suppression
    • AWS Config Rules vs Resmo Rules
  • Dashboards
    • Dashboards
  • Packs (Compliance and Security Best Practices)
    • Packs
    • Pack Exports
  • Alerts
    • Alerts
  • Variables
    • Variables
  • integrations
    • Integrations Guide
    • Custom Data Integration
    • AWS Integration
    • Azure Integration
    • GCP Integration
    • Google Drive Integration
    • Kubernetes Integration
    • Google Workspace Integration
    • GitHub Integration
    • Slack Integration
    • GitLab Integration
    • New Relic Integration
    • Jira Integration
    • PagerDuty Integration
    • Opsgenie Integration
    • MongoDB Atlas Integration
    • Azure Active Directory Integration
    • Cloudflare Integration
    • Confluence Integration
    • Bitbucket Integration
    • Okta Integration
    • Datadog Integration
    • Gandi Integration
    • Snyk Integration
    • Duo Integration
    • Jamf Integration
    • Snowflake Integration
    • Heroku Integration
    • Fastly Integration
    • Hubspot Integration
    • BambooHR Integration
    • Azure DevOps Integration
    • Kolide Integration
    • Flyio Integration
    • Upstash Integration
    • Qualys Integration
    • Sentry Integration
    • Brex Integration
    • JumpCloud Integration
    • Webflow Integration
    • Tenable Integration
    • SonarCloud Integration
    • Salesforce Integration
    • LastPass Integration
    • Microsoft Teams Integration
    • Zendesk Integration
    • Segment Integration
    • Terraform Cloud Integration
    • Tailscale Integration
    • Vercel Integration
    • GoDaddy Integration
    • Kandji Integration
    • LaunchDarkly Integration
    • PlanetScale Integration
    • Zoom Integration
    • Jotform Integration
    • Auth0 Integration
    • Wizer Integration
    • Linear Integration
    • Figma Integration
    • Trello Integration
    • Mixpanel Integration
    • Trivy Integration
    • CSV Integration
    • DocuSign Integration
    • Tinybird Integration
    • MonoSign Integration
    • DigitalOcean Integration
    • Sophos Integration
    • Firebase Integration
    • MySQL Integration
    • PostgreSQL Integration
    • MongoDB Integration
    • ClickHouse Integration
    • Help Scout Integration
    • Intercom Integration
    • Atlassian Integration
    • Drata Integration
    • Hetzner Cloud Integration
    • Vanta Integration
    • Microsoft Intune Integration
    • Microsoft Defender Integration
    • Microsoft 365 Integration
    • NPM Integration
    • CrowdStrike Integration
    • 1Password Integration
    • Lucid Integration
    • OneDrive Integration
    • JetBrains Integration
    • Google Analytics Integration
    • Hexnode Integration
    • SendGrid Integration
    • WordPress Integration
  • Notifications
    • Notification Channels
    • Email Notification Channel
    • Slack Notification Channel
    • Webhook Notification Channel
    • Opsgenie Notification Channel
    • PagerDuty Notification Channel
    • Amazon SNS Notification Channel
    • Parny Notification Channel
    • Linear Notification Channel
    • Jira Notification Channel
    • Microsoft Teams Notification Channel
  • Plugins
    • Raycast
  • Users and Permissions
    • User
    • User Roles
    • RBAC (Role-Based Access Control)
      • Custom Roles and Policies
    • SSO - Social Login
  • Settings
    • Accounts
    • Billing Policy
    • Pricing
      • Resource Count Calculation
Powered by GitBook
On this page
  • Resmo + Snowflake Integration Fundamentals
  • What does Resmo offer to Snowflake users?
  • How does the integration work?
  • Integration Walkthrough
  • How to Install
  • How to Uninstall

Was this helpful?

  1. integrations

Snowflake Integration

Guide for Resmo Snowflake integration.

PreviousJamf IntegrationNextHeroku Integration

Last updated 1 year ago

Was this helpful?

Resmo + Snowflake Integration Fundamentals

Resmo integrates with Snowflake to help you safeguard your cyber assets for security and compliance.

What does Resmo offer to Snowflake users?

  • Consolidate and monitor all your Snowflake resources in one place.

  • Query your Snowflake users, schemas, databases, and more.

  • Set up rules to continuously evaluate your resource conformance.

  • Add notification rules to get alerted on rule violations in near real-time.

How does the integration work?

Once you sign up for Resmo, you can easily integrate your account with Snowflake using an account with the required privileges. Resmo uses API to do the initial polling and collect existing resources. Then, we receive resource changes and updates in real-time by regular polling.

Available resources

Resmo aggregates Snowflake resources such as databases, users, keys, tables, and more

See the full list:

Integration Walkthrough

How to Install

  1. Login to your Resmo account and navigate to Integrations. Then, select Snowflake.

2. Click the Add Integration button at the bottom right corner of the opening modal.

3. On a new tab, go to your Snowflake Account and Create Security Integration with the following properties.

create security integration INTEGRATION_NAME
type = oauth
enabled = true
oauth_client = custom
oauth_client_type = 'CONFIDENTIAL'
oauth_redirect_uri = 'https://id.resmo.app:443/integration/snowflake/callback'
oauth_issue_refresh_tokens = true;
  • Check your security integration by executing desc security integration INTEGRATION_NAME;

  • Get credentials for your security integration by executing select SYSTEM$SHOW_OAUTH_CLIENT_SECRETS( 'INTEGRATION_NAME' );. Enter the Client Id and Client Secret in the integration configuration screen.

4. Create a new user/role with the required privileges.

  • Resmo uses SHOW commands to gather resources from the Snowflake system. The credentials provided to Resmo must be configured with the read permissions required to perform these commands.

  • Example: role with MANAGE GRANTS global privilege grant manage grants on account to ROLE_NAME;

    • The user must be granted this role.

5. Enter the role name in the integration configuration screen on Resmo.

6. Enter the account URL to the Account Url field in the integration configuration screen.

7. Hit the create button, and you'll be redirected to Snowflake. Accept permissions.

8. You are ready to run queries.

How to Uninstall

  1. Go to Integrations->Snowflake.

2. Navigate to the Connected Integrations tab on the modal and click the Snowflake integration you wish to remove.

3. You have two options. To temporarily pause the integration, click the Disable button; to permanently uninstall it, click the Delete button.

OAUTH_REFRESH_TOKEN_VALIDITY is 90 days for custom clients in . Resmo will check your refresh token validity and inform you if it expires soon.

To have it work properly in Resmo, please provide the region in the .

4. Optionally, you can remove your oAuth token after uninstalling the integration permanently. Follow the instructions .

Snowflake
URL
here
SnowflakeResource Directory
Logo