-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathmain.tf
76 lines (66 loc) · 1.97 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
provider "snowflake" {
username = var.snowflake_username
password = var.snowflake_password
account = var.snowflake_account
role = var.snowflake_role
}
resource "snowflake_warehouse" "my_warehouse" {
name = "MY_WAREHOUSE"
size = "XSMALL"
auto_suspend = 60
auto_resume = true
initially_suspended = true
}
resource "snowflake_database" "my_database" {
name = "MY_DATABASE"
}
resource "snowflake_schema" "my_schema" {
name = "MY_SCHEMA"
database = snowflake_database.my_database.name
}
resource "snowflake_role" "my_role" {
name = "MY_ROLE"
}
resource "snowflake_user" "my_user" {
name = "MY_USER"
login_name = "my_user"
password = "StrongPassword123!"
default_warehouse = snowflake_warehouse.my_warehouse.name
default_role = snowflake_role.my_role.name
}
resource "snowflake_role_grants" "my_user_role_grant" {
role_name = snowflake_role.my_role.name
users = [snowflake_user.my_user.name]
}
resource "snowflake_database_grant" "my_database_grant" {
database_name = snowflake_database.my_database.name
roles = [snowflake_role.my_role.name]
privilege = "USAGE"
}
resource "snowflake_schema_grant" "my_schema_grant" {
schema_name = snowflake_schema.my_schema.name
database_name = snowflake_database.my_database.name
roles = [snowflake_role.my_role.name]
privilege = "USAGE"
}
resource "snowflake_table" "my_table" {
name = "MY_TABLE"
database = snowflake_database.my_database.name
schema = snowflake_schema.my_schema.name
comment = "This is my table"
column {
name = "ID"
type = "NUMBER(38,0)"
}
column {
name = "NAME"
type = "STRING"
}
}
resource "snowflake_table_grant" "my_table_grant" {
table_name = snowflake_table.my_table.name
schema_name = snowflake_schema.my_schema.name
database_name = snowflake_database.my_database.name
roles = [snowflake_role.my_role.name]
privilege = "SELECT"
}