@taylor thanks for the ref to permifrost, that is super useful!

it’s in active use at GitLab (here’s the roles.yml https://gitlab.com/gitlab-data/analytics/-/blob/master/load/snowflake/roles.yml ) but the latest version may have a bug around

"*"

as a selector just FYI