Data Warehouse Manager (DWHM) Key Pair Support

We are upgrading the DWHM component to support Key Pair authentication, aligning with Snowflake's latest security enhancements.

Key Pair authentication will soon be available for all user types within the component:

• Root user managing schemas and other users.
• User representing a person interacting with the database.
• Schema representing a service interacting with the database.

Root User

• These credentials are set up by Keboola support, so no action is required from users.
• When Key Pair authentication is used for the Root user, its type is set to the new Service Snowflake user type.

User

Configuration rows of type User in the component now support both the new Person and the old Legacy Service Snowflake user types.

• If the Migrate user to PERSON flag is set to true and the component is run, the database user will be migrated from Legacy Service to Person. After migration, setting up MFA is mandatory upon first login to the Snowflake UI.
• If the flag is not set to true, a Legacy Service user can still be created. However, this is not recommended due to the upcoming deprecation of this user type by Snowflake.
• Once a user is migrated to the Person type, it cannot be reverted.

Schema

Configuration rows of type Schema in the component now support both the new Service and the old Legacy Service Snowflake user types.

• By filling in the Public key field (either by generating a Key Pair in the UI or by creating your own),
  • an existing schema user is migrated from the Legacy Service type to the new Service type,
  • new schema user is created with the Service type.
• It is still possible to use or create a Legacy Service user by leaving the Public key field empty.
• Once the schema is migrated to the Service type, it cannot be reverted.