Share security and governance in Snowflake - Mini Project: Build & Apply

Share Security and Governance in Snowflake

📖 Scenario: You are working as a cloud data engineer. Your company uses Snowflake to share data securely with partners. You need to set up a secure data share with proper governance controls to ensure only authorized users can access the shared data.

🎯 Goal: Build a Snowflake data share with controlled access by creating a share, adding a database to it, and granting usage privileges to a specific role. This will demonstrate how to securely share data and manage governance in Snowflake.

📋 What You'll Learn

Create a Snowflake share named partner_share

Add the database sales_db to the share

Create a role named partner_role

Grant usage on the share partner_share to the role partner_role

💡 Why This Matters

🌍 Real World

Companies often share data securely with partners or customers using Snowflake shares. Proper governance ensures only authorized users can access shared data.

💼 Career

Cloud data engineers and administrators must know how to configure secure data sharing and manage access controls in Snowflake to meet compliance and security requirements.

1

Create a Snowflake share

Write a Snowflake SQL statement to create a share named partner_share.

Snowflake

-- Your code here to create the share partner_share

Need a hint?

Use the CREATE SHARE command followed by the share name.

2

Add database to the share

Write a Snowflake SQL statement to add the database sales_db to the share partner_share.

Snowflake

CREATE SHARE partner_share;
-- Your code here to add sales_db to partner_share

Need a hint?

Use ALTER SHARE <share_name> ADD DATABASE <database_name> to add a database to the share.

3

Create a role for partner access

Write a Snowflake SQL statement to create a role named partner_role.

Snowflake

CREATE SHARE partner_share;
ALTER SHARE partner_share ADD DATABASE sales_db;
-- Your code here to create role partner_role

Need a hint?

Use CREATE ROLE <role_name> to create a new role.

4

Grant usage on share to the role

Write a Snowflake SQL statement to grant usage on the share partner_share to the role partner_role.

Snowflake

CREATE SHARE partner_share;
ALTER SHARE partner_share ADD DATABASE sales_db;
CREATE ROLE partner_role;
-- Your code here to grant usage on partner_share to partner_role

Need a hint?

Use GRANT USAGE ON SHARE <share_name> TO ROLE <role_name> to allow the role to access the share.