Snowflake for Workflows setup

Preview

Your Dynatrace environment can integrate with a Snowflake instance using Snowflake for Workflows Snowflake. With this integration, you can execute statements on your database and load results into Grail.

Prerequisites

  • To install Snowflake for Workflows, you need the app-engine:apps:install permission.

  • To improve traceability and auditability, use a dedicated Snowflake service user to access your Snowflake database.

  • To add connection settings, you need the following permissions:

    ALLOW settings:objects:read, settings:objects:write, settings:schemas:read WHERE settings:schemaId = "app:dynatrace.snowflake.connector:connection"

    For more information, see Permissions and access.

  • Connections are shared and can be used by all users with app-settings read permissions.

Steps

  1. Install Snowflake for Workflows.
  2. Set up the connection between Snowflake and Dynatrace.
  3. Authorize the connection to Snowflake.

Install Snowflake for Workflows

To integrate with a Snowflake database, you need to install Snowflake for Workflows from Dynatrace Hub.

  1. In Dynatrace Hub Hub, select Snowflake for Workflows.
  2. Select Install.

Setup the connection between Snowflake and Dynatrace

To set up the connection between Snowflake and your Dynatrace environment

  1. Open the Settings app and go to Preferences > Limit Outbound Connections.
  2. Select Add item and add the domain of your publicly accessible Snowflake, for example, *.snowflakecomputing.com.
  3. Select Save changes.

Authorize the connection to Snowflake

To authorize the connection to Snowflake

  1. Get the credentials for the Snowflake instance. The following authentication methods are supported:

    • Key-Pair JWT — This method uses a private key to generate a JWT token to authenticate into the Snowflake. For more information, see Using key-pair authentication.

    • External OAuth client_credentials flow — This method uses the preconfigured client and resource on the external OAuth server supported by Snowflake. For more information, see External OAuth overview.

  2. In Dynatrace, go to Settings > Dynatrace Apps > Snowflake Connections.

For more information on how to configure Azure to issue OAuth tokens on behalf of a client to access Snowflake, see How to configure Azure to issue OAuth tokens on behalf of a client to access Snowflake.

  1. Select Add item and provide a name for the connection, the URL of the Snowflake instance, and, depending on the credential method you choose, either the private key and account settings or the OAuth client_credentials flow parameters.

  2. optional Specify a list of email addresses of the users you want to allow to execute statements using the connection. By default, every user can use it.

  3. Select Save.