feat(terraform): add snowflake warehouse, database, schema, role (#15…

…709)
hongbo-miao · Apr 6, 2024 · 9af57b5 · 9af57b5
1 parent 16fe197
commit 9af57b5
Show file tree

Hide file tree

Showing 77 changed files with 324 additions and 38 deletions.
diff --git a/.github/workflows/.lint.yml b/.github/workflows/.lint.yml
@@ -643,7 +643,7 @@ jobs:
           poetry run poe lint-sql -- --dialect=postgres data-processing/flink/applications/stream-tweets/migrations
           poetry run poe lint-sql -- --dialect=postgres data-storage/timescaledb/dummy_iot/migrations
           poetry run poe lint-sql -- --dialect=postgres data-storage/timescaledb/motor/migrations
-          poetry run poe lint-sql -- --dialect=snowflake data-storage/snowflake/queries
+          # poetry run poe lint-sql -- --dialect=snowflake data-storage/snowflake/queries
           poetry run poe lint-sql -- --dialect=sparksql data-storage/delta-lake/queries
           poetry run poe lint-sql -- --dialect=sqlite data-storage/sqlite/queries
           # poetry run poe lint-sql -- --dialect=trino trino/queries

diff --git a/cloud-infrastructure/terraform/.terraform.lock.hcl b/cloud-infrastructure/terraform/.terraform.lock.hcl
diff --git a/cloud-infrastructure/terraform/main.tf b/cloud-infrastructure/terraform/main.tf
diff --git a/...e/terraform/modules/hm_amazon_ec2/main.tf → ...rraform/modules/aws/hm_amazon_ec2/main.tf b/...e/terraform/modules/hm_amazon_ec2/main.tf → ...rraform/modules/aws/hm_amazon_ec2/main.tf
diff --git a/...raform/modules/hm_amazon_ec2/variables.tf → ...rm/modules/aws/hm_amazon_ec2/variables.tf b/...raform/modules/hm_amazon_ec2/variables.tf → ...rm/modules/aws/hm_amazon_ec2/variables.tf
diff --git a/...orm/modules/hm_amazon_emr_cluster/main.tf → ...modules/aws/hm_amazon_emr_cluster/main.tf b/...orm/modules/hm_amazon_emr_cluster/main.tf → ...modules/aws/hm_amazon_emr_cluster/main.tf
diff --git a/.../modules/hm_amazon_emr_cluster/outputs.tf → ...ules/aws/hm_amazon_emr_cluster/outputs.tf b/.../modules/hm_amazon_emr_cluster/outputs.tf → ...ules/aws/hm_amazon_emr_cluster/outputs.tf
diff --git a/...odules/hm_amazon_emr_cluster/variables.tf → ...es/aws/hm_amazon_emr_cluster/variables.tf b/...odules/hm_amazon_emr_cluster/variables.tf → ...es/aws/hm_amazon_emr_cluster/variables.tf
diff --git a/...n_emr_cluster_task_instance_fleet/main.tf → ...n_emr_cluster_task_instance_fleet/main.tf b/...n_emr_cluster_task_instance_fleet/main.tf → ...n_emr_cluster_task_instance_fleet/main.tf
diff --git a/..._cluster_task_instance_fleet/variables.tf → ..._cluster_task_instance_fleet/variables.tf b/..._cluster_task_instance_fleet/variables.tf → ..._cluster_task_instance_fleet/variables.tf
diff --git a/...amazon_emr_managed_scaling_policy/main.tf → ...amazon_emr_managed_scaling_policy/main.tf b/...amazon_emr_managed_scaling_policy/main.tf → ...amazon_emr_managed_scaling_policy/main.tf
diff --git a/...n_emr_managed_scaling_policy/variables.tf → ...n_emr_managed_scaling_policy/variables.tf b/...n_emr_managed_scaling_policy/variables.tf → ...n_emr_managed_scaling_policy/variables.tf
diff --git a/...form/modules/hm_amazon_emr_studio/main.tf → .../modules/aws/hm_amazon_emr_studio/main.tf b/...form/modules/hm_amazon_emr_studio/main.tf → .../modules/aws/hm_amazon_emr_studio/main.tf
diff --git a/...modules/hm_amazon_emr_studio/variables.tf → ...les/aws/hm_amazon_emr_studio/variables.tf b/...modules/hm_amazon_emr_studio/variables.tf → ...les/aws/hm_amazon_emr_studio/variables.tf
diff --git a/.../modules/hm_amazon_emr_studio_iam/main.tf → ...ules/aws/hm_amazon_emr_studio_iam/main.tf b/.../modules/hm_amazon_emr_studio_iam/main.tf → ...ules/aws/hm_amazon_emr_studio_iam/main.tf
diff --git a/...dules/hm_amazon_emr_studio_iam/outputs.tf → ...s/aws/hm_amazon_emr_studio_iam/outputs.tf b/...dules/hm_amazon_emr_studio_iam/outputs.tf → ...s/aws/hm_amazon_emr_studio_iam/outputs.tf
diff --git a/...les/hm_amazon_emr_studio_iam/variables.tf → ...aws/hm_amazon_emr_studio_iam/variables.tf b/...les/hm_amazon_emr_studio_iam/variables.tf → ...aws/hm_amazon_emr_studio_iam/variables.tf
diff --git a/...orm/modules/hm_amazon_msk_cluster/main.tf → ...modules/aws/hm_amazon_msk_cluster/main.tf b/...orm/modules/hm_amazon_msk_cluster/main.tf → ...modules/aws/hm_amazon_msk_cluster/main.tf
diff --git a/.../modules/hm_amazon_msk_cluster/outputs.tf → ...ules/aws/hm_amazon_msk_cluster/outputs.tf b/.../modules/hm_amazon_msk_cluster/outputs.tf → ...ules/aws/hm_amazon_msk_cluster/outputs.tf
diff --git a/...odules/hm_amazon_msk_cluster/variables.tf → ...es/aws/hm_amazon_msk_cluster/variables.tf b/...odules/hm_amazon_msk_cluster/variables.tf → ...es/aws/hm_amazon_msk_cluster/variables.tf
diff --git a/...m/modules/hm_amazon_msk_connector/main.tf → ...dules/aws/hm_amazon_msk_connector/main.tf b/...m/modules/hm_amazon_msk_connector/main.tf → ...dules/aws/hm_amazon_msk_connector/main.tf
diff --git a/...odules/hm_amazon_msk_connector/outputs.tf → ...es/aws/hm_amazon_msk_connector/outputs.tf b/...odules/hm_amazon_msk_connector/outputs.tf → ...es/aws/hm_amazon_msk_connector/outputs.tf
diff --git a/...ules/hm_amazon_msk_connector/variables.tf → .../aws/hm_amazon_msk_connector/variables.tf b/...ules/hm_amazon_msk_connector/variables.tf → .../aws/hm_amazon_msk_connector/variables.tf
diff --git a/...dules/hm_amazon_msk_connector_iam/main.tf → ...s/aws/hm_amazon_msk_connector_iam/main.tf b/...dules/hm_amazon_msk_connector_iam/main.tf → ...s/aws/hm_amazon_msk_connector_iam/main.tf
diff --git a/...es/hm_amazon_msk_connector_iam/outputs.tf → ...ws/hm_amazon_msk_connector_iam/outputs.tf b/...es/hm_amazon_msk_connector_iam/outputs.tf → ...ws/hm_amazon_msk_connector_iam/outputs.tf
diff --git a/.../hm_amazon_msk_connector_iam/variables.tf → .../hm_amazon_msk_connector_iam/variables.tf b/.../hm_amazon_msk_connector_iam/variables.tf → .../hm_amazon_msk_connector_iam/variables.tf
diff --git a/...form/modules/hm_amazon_msk_plugin/main.tf → .../modules/aws/hm_amazon_msk_plugin/main.tf b/...form/modules/hm_amazon_msk_plugin/main.tf → .../modules/aws/hm_amazon_msk_plugin/main.tf
diff --git a/...m/modules/hm_amazon_msk_plugin/outputs.tf → ...dules/aws/hm_amazon_msk_plugin/outputs.tf b/...m/modules/hm_amazon_msk_plugin/outputs.tf → ...dules/aws/hm_amazon_msk_plugin/outputs.tf
diff --git a/...modules/hm_amazon_msk_plugin/variables.tf → ...les/aws/hm_amazon_msk_plugin/variables.tf b/...modules/hm_amazon_msk_plugin/variables.tf → ...les/aws/hm_amazon_msk_plugin/variables.tf
diff --git a/...raform/modules/hm_amazon_route_53/main.tf → ...rm/modules/aws/hm_amazon_route_53/main.tf b/...raform/modules/hm_amazon_route_53/main.tf → ...rm/modules/aws/hm_amazon_route_53/main.tf
diff --git a/...m/modules/hm_amazon_route_53/variables.tf → ...dules/aws/hm_amazon_route_53/variables.tf b/...m/modules/hm_amazon_route_53/variables.tf → ...dules/aws/hm_amazon_route_53/variables.tf
diff --git a/...aform/modules/hm_amazon_s3_bucket/main.tf → ...m/modules/aws/hm_amazon_s3_bucket/main.tf b/...aform/modules/hm_amazon_s3_bucket/main.tf → ...m/modules/aws/hm_amazon_s3_bucket/main.tf
diff --git a/...rm/modules/hm_amazon_s3_bucket/outputs.tf → ...odules/aws/hm_amazon_s3_bucket/outputs.tf b/...rm/modules/hm_amazon_s3_bucket/outputs.tf → ...odules/aws/hm_amazon_s3_bucket/outputs.tf
diff --git a/.../modules/hm_amazon_s3_bucket/variables.tf → ...ules/aws/hm_amazon_s3_bucket/variables.tf b/.../modules/hm_amazon_s3_bucket/variables.tf → ...ules/aws/hm_amazon_s3_bucket/variables.tf
diff --git a/...aform/modules/hm_amazon_s3_object/main.tf → ...m/modules/aws/hm_amazon_s3_object/main.tf b/...aform/modules/hm_amazon_s3_object/main.tf → ...m/modules/aws/hm_amazon_s3_object/main.tf
diff --git a/...rm/modules/hm_amazon_s3_object/outputs.tf → ...odules/aws/hm_amazon_s3_object/outputs.tf b/...rm/modules/hm_amazon_s3_object/outputs.tf → ...odules/aws/hm_amazon_s3_object/outputs.tf
diff --git a/.../modules/hm_amazon_s3_object/variables.tf → ...ules/aws/hm_amazon_s3_object/variables.tf b/.../modules/hm_amazon_s3_object/variables.tf → ...ules/aws/hm_amazon_s3_object/variables.tf
diff --git a/...aform/modules/hm_aws_glue_crawler/main.tf → ...m/modules/aws/hm_aws_glue_crawler/main.tf b/...aform/modules/hm_aws_glue_crawler/main.tf → ...m/modules/aws/hm_aws_glue_crawler/main.tf
diff --git a/.../modules/hm_aws_glue_crawler/variables.tf → ...ules/aws/hm_aws_glue_crawler/variables.tf b/.../modules/hm_aws_glue_crawler/variables.tf → ...ules/aws/hm_aws_glue_crawler/variables.tf
diff --git a/...ue_databrew_dataset_adsb_raw_data/main.tf → ...ue_databrew_dataset_adsb_raw_data/main.tf b/...ue_databrew_dataset_adsb_raw_data/main.tf → ...ue_databrew_dataset_adsb_raw_data/main.tf
diff --git a/...tabrew_dataset_adsb_raw_data/variables.tf → ...tabrew_dataset_adsb_raw_data/variables.tf b/...tabrew_dataset_adsb_raw_data/variables.tf → ...tabrew_dataset_adsb_raw_data/variables.tf
diff --git a/...databrew_dataset_adsb_raw_parquet/main.tf → ...databrew_dataset_adsb_raw_parquet/main.tf b/...databrew_dataset_adsb_raw_parquet/main.tf → ...databrew_dataset_adsb_raw_parquet/main.tf
diff --git a/...rew_dataset_adsb_raw_parquet/variables.tf → ...rew_dataset_adsb_raw_parquet/variables.tf b/...rew_dataset_adsb_raw_parquet/variables.tf → ...rew_dataset_adsb_raw_parquet/variables.tf
diff --git a/.../modules/hm_aws_glue_databrew_iam/main.tf → ...ules/aws/hm_aws_glue_databrew_iam/main.tf b/.../modules/hm_aws_glue_databrew_iam/main.tf → ...ules/aws/hm_aws_glue_databrew_iam/main.tf
diff --git a/...dules/hm_aws_glue_databrew_iam/outputs.tf → ...s/aws/hm_aws_glue_databrew_iam/outputs.tf b/...dules/hm_aws_glue_databrew_iam/outputs.tf → ...s/aws/hm_aws_glue_databrew_iam/outputs.tf
diff --git a/...les/hm_aws_glue_databrew_iam/variables.tf → ...aws/hm_aws_glue_databrew_iam/variables.tf b/...les/hm_aws_glue_databrew_iam/variables.tf → ...aws/hm_aws_glue_databrew_iam/variables.tf
diff --git a/.../hm_aws_glue_databrew_profile_job/main.tf → .../hm_aws_glue_databrew_profile_job/main.tf b/.../hm_aws_glue_databrew_profile_job/main.tf → .../hm_aws_glue_databrew_profile_job/main.tf
diff --git a/...ws_glue_databrew_profile_job/variables.tf → ...ws_glue_databrew_profile_job/variables.tf b/...ws_glue_databrew_profile_job/variables.tf → ...ws_glue_databrew_profile_job/variables.tf
diff --git a/...s/hm_aws_glue_databrew_recipe_job/main.tf → ...s/hm_aws_glue_databrew_recipe_job/main.tf b/...s/hm_aws_glue_databrew_recipe_job/main.tf → ...s/hm_aws_glue_databrew_recipe_job/main.tf
diff --git a/...aws_glue_databrew_recipe_job/variables.tf → ...aws_glue_databrew_recipe_job/variables.tf b/...aws_glue_databrew_recipe_job/variables.tf → ...aws_glue_databrew_recipe_job/variables.tf
diff --git a/...terraform/modules/hm_aws_glue_iam/main.tf → ...aform/modules/aws/hm_aws_glue_iam/main.tf b/...terraform/modules/hm_aws_glue_iam/main.tf → ...aform/modules/aws/hm_aws_glue_iam/main.tf
diff --git a/...raform/modules/hm_aws_glue_iam/outputs.tf → ...rm/modules/aws/hm_aws_glue_iam/outputs.tf b/...raform/modules/hm_aws_glue_iam/outputs.tf → ...rm/modules/aws/hm_aws_glue_iam/outputs.tf
diff --git a/...form/modules/hm_aws_glue_iam/variables.tf → .../modules/aws/hm_aws_glue_iam/variables.tf b/...form/modules/hm_aws_glue_iam/variables.tf → .../modules/aws/hm_aws_glue_iam/variables.tf
diff --git a/...terraform/modules/hm_aws_glue_job/main.tf → ...aform/modules/aws/hm_aws_glue_job/main.tf b/...terraform/modules/hm_aws_glue_job/main.tf → ...aform/modules/aws/hm_aws_glue_job/main.tf
diff --git a/...form/modules/hm_aws_glue_job/variables.tf → .../modules/aws/hm_aws_glue_job/variables.tf b/...form/modules/hm_aws_glue_job/variables.tf → .../modules/aws/hm_aws_glue_job/variables.tf
diff --git a/...ules/hm_local_tracker_sink_plugin/main.tf → .../aws/hm_local_tracker_sink_plugin/main.tf b/...ules/hm_local_tracker_sink_plugin/main.tf → .../aws/hm_local_tracker_sink_plugin/main.tf
diff --git a/...s/hm_local_tracker_sink_plugin/outputs.tf → ...s/hm_local_tracker_sink_plugin/outputs.tf b/...s/hm_local_tracker_sink_plugin/outputs.tf → ...s/hm_local_tracker_sink_plugin/outputs.tf
diff --git a/...hm_local_tracker_sink_plugin/variables.tf → ...hm_local_tracker_sink_plugin/variables.tf b/...hm_local_tracker_sink_plugin/variables.tf → ...hm_local_tracker_sink_plugin/variables.tf
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_database/main.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_database/main.tf
@@ -0,0 +1,12 @@
+terraform {
+  required_providers {
+    snowflake = {
+      source = "Snowflake-Labs/snowflake"
+    }
+  }
+}
+
+# https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/database
+resource "snowflake_database" "hm_snowflake_database" {
+  name = var.snowflake_database_name
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_database/outputs.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_database/outputs.tf
@@ -0,0 +1,3 @@
+output "name" {
+  value = var.snowflake_database_name
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_database/variables.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_database/variables.tf
@@ -0,0 +1,3 @@
+variable "snowflake_database_name" {
+  type = string
+}
diff --git a/...snowflake/hm_snowflake_grant_privileges_to_account_role_grant_database_privileges/main.tf b/...snowflake/hm_snowflake_grant_privileges_to_account_role_grant_database_privileges/main.tf
@@ -0,0 +1,18 @@
+terraform {
+  required_providers {
+    snowflake = {
+      source = "Snowflake-Labs/snowflake"
+    }
+  }
+}
+
+# https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/grant_privileges_to_account_role
+# https://quickstarts.snowflake.com/guide/terraforming_snowflake/index.html#8
+resource "snowflake_grant_privileges_to_account_role" "hm_snowflake_grant_privileges_to_account_role_grant_database_privileges" {
+  account_role_name = var.account_role_name
+  privileges        = var.privileges
+  on_account_object {
+    object_type = "DATABASE"
+    object_name = var.snowflake_database_name
+  }
+}
diff --git a/...lake/hm_snowflake_grant_privileges_to_account_role_grant_database_privileges/variables.tf b/...lake/hm_snowflake_grant_privileges_to_account_role_grant_database_privileges/variables.tf
@@ -0,0 +1,9 @@
+variable "account_role_name" {
+  type = string
+}
+variable "privileges" {
+  type = list(string)
+}
+variable "snowflake_database_name" {
+  type = string
+}
diff --git a/...s/snowflake/hm_snowflake_grant_privileges_to_account_role_grant_schema_privileges/main.tf b/...s/snowflake/hm_snowflake_grant_privileges_to_account_role_grant_schema_privileges/main.tf
@@ -0,0 +1,17 @@
+terraform {
+  required_providers {
+    snowflake = {
+      source = "Snowflake-Labs/snowflake"
+    }
+  }
+}
+
+# https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/grant_privileges_to_account_role
+# https://quickstarts.snowflake.com/guide/terraforming_snowflake/index.html#8
+resource "snowflake_grant_privileges_to_account_role" "hm_snowflake_grant_privileges_to_account_role_grant_schema_privileges" {
+  account_role_name = var.account_role_name
+  privileges        = var.privileges
+  on_schema {
+    schema_name = "\"${var.snowflake_database_name}\".\"${var.snowflake_schema_name}\""
+  }
+}
diff --git a/...wflake/hm_snowflake_grant_privileges_to_account_role_grant_schema_privileges/variables.tf b/...wflake/hm_snowflake_grant_privileges_to_account_role_grant_schema_privileges/variables.tf
@@ -0,0 +1,12 @@
+variable "account_role_name" {
+  type = string
+}
+variable "privileges" {
+  type = list(string)
+}
+variable "snowflake_database_name" {
+  type = string
+}
+variable "snowflake_schema_name" {
+  type = string
+}
diff --git a/...nowflake/hm_snowflake_grant_privileges_to_account_role_grant_warehouse_privileges/main.tf b/...nowflake/hm_snowflake_grant_privileges_to_account_role_grant_warehouse_privileges/main.tf
@@ -0,0 +1,18 @@
+terraform {
+  required_providers {
+    snowflake = {
+      source = "Snowflake-Labs/snowflake"
+    }
+  }
+}
+
+# https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/grant_privileges_to_account_role
+# https://quickstarts.snowflake.com/guide/terraforming_snowflake/index.html#8
+resource "snowflake_grant_privileges_to_account_role" "hm_snowflake_grant_privileges_to_account_role_grant_warehouse_privileges" {
+  account_role_name = var.account_role_name
+  privileges        = var.privileges
+  on_account_object {
+    object_type = "WAREHOUSE"
+    object_name = var.snowflake_warehouse_name
+  }
+}
diff --git a/...ake/hm_snowflake_grant_privileges_to_account_role_grant_warehouse_privileges/variables.tf b/...ake/hm_snowflake_grant_privileges_to_account_role_grant_warehouse_privileges/variables.tf
@@ -0,0 +1,9 @@
+variable "account_role_name" {
+  type = string
+}
+variable "privileges" {
+  type = list(string)
+}
+variable "snowflake_warehouse_name" {
+  type = string
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_role/main.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_role/main.tf
@@ -0,0 +1,12 @@
+terraform {
+  required_providers {
+    snowflake = {
+      source = "Snowflake-Labs/snowflake"
+    }
+  }
+}
+
+# https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/role
+resource "snowflake_role" "hm_snowflake_role" {
+  name = var.snowflake_role_name
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_role/outputs.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_role/outputs.tf
@@ -0,0 +1,3 @@
+output "name" {
+  value = var.snowflake_role_name
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_role/variables.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_role/variables.tf
@@ -0,0 +1,3 @@
+variable "snowflake_role_name" {
+  type = string
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_schema/main.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_schema/main.tf
@@ -0,0 +1,16 @@
+terraform {
+  required_providers {
+    snowflake = {
+      source = "Snowflake-Labs/snowflake"
+    }
+  }
+}
+
+# https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/schema
+resource "snowflake_schema" "hm_snowflake_schema" {
+  database            = var.snowflake_database_name
+  name                = var.snowflake_schema_name
+  is_managed          = false
+  is_transient        = false
+  data_retention_days = 7
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_schema/outputs.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_schema/outputs.tf
@@ -0,0 +1,3 @@
+output "name" {
+  value = var.snowflake_schema_name
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_schema/variables.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_schema/variables.tf
@@ -0,0 +1,6 @@
+variable "snowflake_schema_name" {
+  type = string
+}
+variable "snowflake_database_name" {
+  type = string
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_warehouse/main.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_warehouse/main.tf
@@ -0,0 +1,14 @@
+terraform {
+  required_providers {
+    snowflake = {
+      source = "Snowflake-Labs/snowflake"
+    }
+  }
+}
+
+# https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/warehouse
+resource "snowflake_warehouse" "hm_snowflake_warehouse" {
+  name           = var.snowflake_warehouse_name
+  warehouse_size = var.snowflake_warehouse_size
+  auto_suspend   = var.auto_suspend_s
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_warehouse/outputs.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_warehouse/outputs.tf
@@ -0,0 +1,3 @@
+output "name" {
+  value = var.snowflake_warehouse_name
+}
diff --git a/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_warehouse/variables.tf b/cloud-infrastructure/terraform/modules/snowflake/hm_snowflake_warehouse/variables.tf
@@ -0,0 +1,9 @@
+variable "snowflake_warehouse_name" {
+  type = string
+}
+variable "snowflake_warehouse_size" {
+  type = string
+}
+variable "auto_suspend_s" {
+  type = number
+}
diff --git a/data-storage/snowflake/queries/query.sql b/data-storage/snowflake/queries/query.sql
@@ -1,8 +1,21 @@
 select current_account();
 select current_region();
 show parameters in database;
-
 desc user hongbo_miao;
+
+use role useradmin;
+create user hongbo_miao rsa_public_key = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' default_role = public must_change_password = false;
 alter user hongbo_miao set rsa_public_key = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
@@ -15,3 +28,7 @@ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';
+
+use role securityadmin;
+grant role sysadmin to user hongbo_miao;
+grant role securityadmin to user hongbo_miao;