flow-models/macros/streamline/api_integrations.sql

-- macro used to create flow api integrations
{% macro create_aws_flow_api() %}
    {{ log("Creating integration for target:" ~ target, info=True) }}
    {% if target.name == "prod" %}
        {% set sql %}
        CREATE api integration IF NOT EXISTS aws_flow_api_prod api_provider = aws_api_gateway api_aws_role_arn = 'arn:aws:iam::490041342817:role/snowflake-api-flow' api_allowed_prefixes = (
            'https://<PROD_FLOW_API_CHALICE_URL>/prod/'
        ) enabled = TRUE;
        {% endset %}
        {% do run_query(sql) %}
    {% elif target.name == "dev" %}
        {% set sql %}
        CREATE api integration IF NOT EXISTS aws_flow_api_dev api_provider = aws_api_gateway api_aws_role_arn = 'arn:aws:iam::490041342817:role/snowflake-api-flow' api_allowed_prefixes = (
            'https://<DEV_FLOW_API_CHALICE_URL>/dev/'
        ) enabled = TRUE;
        {% endset %}
        {% do run_query(sql) %}
    {% elif target.name == "sbx" %}
        {{ log("Generating api integration for target:" ~ target.name, info=True) }}
        {% set sql %}
        CREATE api integration IF NOT EXISTS aws_flow_api_sbx api_provider = aws_api_gateway api_aws_role_arn = 'arn:aws:iam::579011195466:role/flow-api-sbx-rolesnowflakeudfsAF733095-1R9BM6QXEKD5O' api_allowed_prefixes = (
            'https://bc5ejedoq8.execute-api.us-east-1.amazonaws.com/sbx'
        ) enabled = TRUE;
        {% endset %}
        -- {% do run_query(sql) %}
        {% set query_result = run_and_log_sql(sql) %}
    {% endif %}
{% endmacro %}

-- macro used to run a sql query and log the results
-- TODO: Move this to fsc-utils package
{% macro run_and_log_sql(sql_query, log_level='info') %}
    {% set result_var = 'result_' ~ sql_query[:8] %}
    
    {% set log_message = 'Executing SQL query: ' ~ sql_query %}
    {% do log(log_message,info=True) %}
    
    {% set query_result = run_query(sql_query) %}
    {% set result_str = query_result.columns[0].values()[0] if query_result.columns else None %}
    
    {% set log_message = 'SQL query result: ' ~ result_str %}
    {% do log(log_message, info=True) %}
    
    {{ result_var }}
{% endmacro %}

-- macro used to select priveleges on all views/tables in a target chema to a role
{% macro grant_select(role) %}
    {{ log("Granting privileges to role: " ~ role, info=True) }}
    {% set sql %}
        grant usage on schema {{ target.schema }} to role {{ role }};
        grant select on all tables in schema {{ target.schema }} to role {{ role }};
        grant select on all views in schema {{ target.schema }} to role {{ role }};
    {% endset %}

    {% do run_query(sql) %}
    {% do log("Privileges granted", info=True) %}
{% endmacro %}