How to load data from AWS CloudTrail to Snowflake destination
Learn how to use Airbyte to synchronize your AWS CloudTrail data into Snowflake destination within minutes.
Building your pipeline or Using Airbyte
Airbyte is the only open source solution empowering data teams to meet all their growing custom business demands in the new AI era.
Building in-house pipelines
- Inconsistent and inaccurate data
- Laborious and expensive
- Brittle and inflexible
After Airbyte
- Reliable and accurate
- Extensible and scalable for all your needs
- Deployed and governed your way
Start syncing with Airbyte in 3 easy steps within 10 minutes
Take a virtual tour
Demo video of Airbyte Cloud
Demo video of AI Connector Builder
Setup Complexities simplified!
Simple & Easy to use Interface
Airbyte is built to get out of your way. Our clean, modern interface walks you through setup, so you can go from zero to sync in minutes—without deep technical expertise.
Guided Tour: Assisting you in building connections
Whether you’re setting up your first connection or managing complex syncs, Airbyte’s UI and documentation help you move with confidence. No guesswork. Just clarity.
Airbyte AI Assistant that will act as your sidekick in building your data pipelines in Minutes
Airbyte’s built-in assistant helps you choose sources, set destinations, and configure syncs quickly. It’s like having a data engineer on call—without the overhead.
What sets Airbyte Apart
Modern GenAI Workflows
Streamline AI workflows with Airbyte: load unstructured data into vector stores like Pinecone, Weaviate, and Milvus. Supports RAG transformations with LangChain chunking and embeddings from OpenAI, Cohere, etc., all in one operation.
Move Large Volumes, Fast
Quickly get up and running with a 5-minute setup that enables both incremental and full refreshes for databases of any size, seamlessly scaling to handle large data volumes. Our optimized architecture overcomes performance bottlenecks, ensuring efficient data synchronization even as your datasets grow from gigabytes to petabytes.
An Extensible Open-Source Standard
More than 1,000 developers contribute to Airbyte’s connectors, different interfaces (UI, API, Terraform Provider, Python Library), and integrations with the rest of the stack. Airbyte’s AI Connector Builder lets you edit or add new connectors in minutes.
Full Control & Security
Airbyte secures your data with cloud-hosted, self-hosted or hybrid deployment options. Single Sign-On (SSO) and Role-Based Access Control (RBAC) ensure only authorized users have access with the right permissions. Airbyte acts as a HIPAA conduit and supports compliance with CCPA, GDPR, and SOC2.
Fully Featured & Integrated
Airbyte automates schema evolution for seamless data flow, and utilizes efficient Change Data Capture (CDC) for real-time updates. Select only the columns you need, and leverage our dbt integration for powerful data transformations.
Enterprise Support with SLAs
Airbyte Self-Managed Enterprise comes with dedicated support and guaranteed service level agreements (SLAs), ensuring that your data movement infrastructure remains reliable and performant, and expert assistance is available when needed.
What our users say
Raman Singh
Predictable, straightforward pricing model that simplified budgeting and significantly reduced overall spend
Chase Zieman
“Airbyte helped us accelerate our progress by years, compared to our competitors. We don’t need to worry about connectors and focus on creating value for our users instead of building infrastructure. That’s priceless. The time and energy saved allows us to disrupt and grow faster.”
Rupak Patel
"With Airbyte, we could just push a few buttons, allow API access, and bring all the data into Google BigQuery. By blending all the different marketing data sources, we can gain valuable insights."
How to Sync to Manually
Step 1: Enable CloudTrail and Configure S3 Bucket
Begin by ensuring that AWS CloudTrail is enabled in your AWS account. Navigate to the CloudTrail console and create a trail if one doesn't exist. Configure the trail to log events to an S3 bucket. This bucket will serve as the storage location for CloudTrail logs.
Step 2: Set Up AWS Credentials for S3 Access
Use AWS Identity and Access Management (IAM) to create a user or role with the necessary permissions to access the S3 bucket. Attach policies like `AmazonS3ReadOnlyAccess` to this user or role. Generate access keys if creating a user, and note these credentials as they'll be needed later.
Step 3: Install and Configure SnowSQL
Download and install SnowSQL, Snowflake's command-line interface, on your local machine or a server. Configure it with the necessary connection details for your Snowflake account, including your account name, user, warehouse, database, and schema. Use the `snowsql -a -u ` command to set up the connection.
Step 4: Create a Snowflake Stage for S3 Data
In Snowflake, create an external stage that points to the S3 bucket containing CloudTrail logs. Use the following SQL command in SnowSQL:
```sql
CREATE STAGE my_s3_stage
STORAGE_INTEGRATION = (your_storage_integration)
URL = 's3://your-cloudtrail-bucket-name/'
FILE_FORMAT = (TYPE = 'JSON');
```
Ensure your Snowflake account has the necessary access to the S3 bucket through a storage integration.
Step 5: Load Data from S3 into Snowflake Table
Create a target table in Snowflake where you want to load the CloudTrail data. Use the `COPY INTO` command to load data from the S3 stage into this table:
```sql
CREATE OR REPLACE TABLE cloudtrail_logs (
event_id STRING,
event_time TIMESTAMP,
event_name STRING,
user_identity STRING,
aws_region STRING,
source_ip_address STRING,
user_agent STRING,
-- Add other fields as needed
);
COPY INTO cloudtrail_logs
FROM @my_s3_stage
FILE_FORMAT = (TYPE = 'JSON')
PATTERN = '.*your-log-file-pattern.*';
```
Step 6: Automate the Data Loading Process
To keep your CloudTrail logs in Snowflake updated, automate the data loading process. Use AWS Lambda or a cron job on an EC2 instance to periodically trigger the `COPY INTO` operation. Use the Snowflake REST API or a script that utilizes SnowSQL for this task.
Step 7: Monitor and Validate Data Transfer
Regularly check the Snowflake table to ensure data is being loaded correctly. Use Snowflake's query capabilities to validate the integrity and completeness of the data. Set up alerts or dashboards in Snowflake for monitoring purposes, ensuring any discrepancies or issues are quickly identified and addressed.
By following these steps, you can efficiently transfer your AWS CloudTrail data to the Snowflake Data Cloud without relying on third-party tools.