Real-Time CDC Pipelines from Snowflake to Kafka

Within your AWS Console search for MSK in the search field at the top and select the matching result. Visit the Clusters screen, and then click Create Cluster.

The Quick Create option provides a good set of defaults for creating a Kafka cluster, so unless you've previous knowledge or experience to know you might want something different I'd suggest just confirming the details and then clicking Create cluster at the bottom of the screen.

Once you've started the cluster creation it may take about 15 minutes for provisioning to complete and for your broker to be available.

The Snowflake Push to Kafka Connector by Ockam is available in the Snowflake Marketplace.

The first screen you're presented with will ask you to select the warehouse to utilize to activate the app.

Click the Grant button to the right of this screen. The app will then be automatically granted permissions to create a warehouse and create a compute pool.

Once the permissions grants complete, an Activate button will appear. Click it and the activation process will begin.

After the app activates you'll see a page that summarizes the privileges that the application now has. There's nothing we need to review or update on these screens yet, so proceed by clicking the Launch app button.

Run the following command on your local workstation:

This will install the Ockam Command and source in the required environment settings. If you've installed Ockam Command before you can skip this step.

Once Ockam Command installation is complete you can run:

Wrapped up in this single ockam enroll command are several steps that will bootstrap your first project and get you ready to go. It will:

• Generate an Ockam Identity and store its secret keys in a file system based Ockam Vault.
• Create an account with Ockam Orchestrator.
• Provision a trial Space and Project in the Orchestrator.
• Make your Ockam Identity the administrator of your new Project.

In this section we're going to provision an Ockam node that will run alongside our Kafka broker, and provide one of the ends of our point-to-point connection.

We need to generate an enrollment ticket to allow a new Ockam Node to join the project that was just created. This node will run alongside the Kafka broker, in the network where the Kafka is running:

The Ockam Node for Amazon MSK is a streamlined way to provision a managed Ockam Node within your private AWS VPC. If you'd prefer the ability to deploy your Ockam Node yourself (for example on an existing machine or in a container) jump to our instructions on how to run an Ockam Node manually.

To deploy the node that will allow Snowflake to reach your Kafka broker visit the Ockam Node for Amazon MSK listing in the AWS Marketplace, and click the Continue to Subscribe button, and then Continue to Configuration.

On the configuration page choose the region that your Amazon MSK cluster is running in, and then click Continue to Launch followed by Launch.

The initial Create Stack screen pre-fills the fields with the correct information for your node, so you can press Next to proceed.

This screen has important details to you need to fill in:

• Stack name: Give this stack a recognisable name, you'll see this in various locations in the AWS Console. It'll also make it easier to clean these resources up later if you wish to remove them.
• VPC ID: The ID of the Virtual Private Cloud network to deploy the node in. Make sure it's the same VPC where you've deployed your Amazon MSK cluster.
• Subnet ID: Choose one of the subnets within your VPC, ensure MSK has a broker address available in that subnet.
• Enrollment ticket: Copy the contents of the kafka.ticket file we created earlier and paste it in here.
• Amazon MSK Bootstrap Server with Port: In the client configuration details for your Amazon MSK cluster you will have a list of bootstrap servers. Copy the hostname:port value for the Private endpoint that's in the same subnet you chose above.
• JSON Node Configuration: Copy the contents of the kafka.json file we created earlier and paste it in here.

We've now completed the highlighted part of the diagram below, and our Kafka broker node is waiting for another node to connect.

One end of our connection is now setup, it's time to connect the Snowflake end. We need to generate an enrollment ticket to allow another Ockam Node to join our project. This node will run in our Snowflake warehouse:

Take the contents of the file snowflake.ticket that we just created and paste it into "Provide the above Enrollment Ticket" form field in the "Configure app" setup screen in Snowflake.

Snowflake sends each stream of changes to a topic in Kafka, and we need to define the mapping between each stream and topic. Enter the stream you want to send (in the format of database.schema.stream), and then enter the name of the topic in Kafka.

If the topic doesn't exists the system will create it.

To be able to authenticate with Ockam Orchestrator and then discover the route to our outlet, the Snowflake app needs to allow outbound connections to your Ockam project. Toggle the Grant access to egress and reach your Project and approve the connection by pressing Connect.