Topology
Database & schema layout
| Object | Type | Purpose |
|---|---|---|
SNOW_COMPLIANCE_DEMO | Database | Everything for the demo |
RAW | Schema | Landing JSON / CSVs, no transformation |
CORE | Schema | Modeled dimensions, facts, bridges |
MARTS | Schema | Curated views for the demo queries |
SECURITY | Schema | Row access policies, masks, mapping tables |
GOV | Schema | Audit summary views over Snowflake metadata |
DDL: sql/01_database_and_roles.sql.
Compute
Warehouses
| Warehouse | Size | Auto-suspend | Used for |
|---|---|---|---|
WH_LOAD | X-Small | 60s | Ingest / generation (build only) |
WH_ANALYTICS | X-Small | 60s | Demo queries and reporting |
X-Small with 60-second auto-suspend keeps an idle demo effectively free. The dataset is tiny (well under a gigabyte), so compute, not storage, is the only cost lever.
Access
Role model
ACCOUNTADMIN
SYSADMIN
DEMO_ADMIN -- builds RAW/CORE/MARTS
COMPLIANCE_ADMIN -- owns SECURITY schema (policies, masks, mapping)
ATTORNEY -- matter-scoped reads via row access policy
PARALEGAL -- matter-scoped reads, reduced columns
AUDITOR -- reads GOV audit views; no data mutationPrinciple
Administrators never use
ACCOUNTADMIN for demo work. Analysts never see
unfiltered matter data. Policy objects live in SECURITY and are owned by
COMPLIANCE_ADMIN, not by whoever builds the tables.Delivery
Deployment & environments
- Snowflake: scripts in
sql/run in order;ingest/scripts populate data. Idempotent (CREATE OR REPLACE, MERGE) so the demo can be rebuilt from scratch. - Review site: this repo. GitHub Pages serves
main:/— any push tomainrepublishes automatically. It is the staging surface for board review. - Secrets: Snowflake credentials are stored as Paperclip secrets and injected at run time — never committed to this repo or pasted into documents.
Cost
Cost posture
| Item | Estimate | Note |
|---|---|---|
| Snowflake compute | < $5 while actively building/demoing | X-Small, auto-suspend; a trial credit covers it |
| Snowflake storage | Negligible | Sub-GB dataset |
| GitHub Pages | $0 | Public repo, static site |