ALTR Core FPE (Snowflake Native App)

This application requires some global and object-level privileges in order to function in your account. These privileges are described below. For information on how to configure the required objects and perform these grants, see the Setup Guide section.

1. The following will create a data encryption key and securely store it in the application.

```sql
select key_handler.insert_key_tweak('MY-KEY');
```

2. The following will test the encryption of plaintext using a 62-character alphabet. This alphabet includes 0-9, A-Z, and a-z.

select encryption_handler.encrypt_varchar_r62('hello', 'MY-KEY'); --> 'a7wlv'

3. The following will decrypt ciphertext using a 62-character alphabet. The below example uses a fake ciphertext and should be replaced with the output from the above query.

select encryption_handler.decrypt_varchar_r62('a7wlv', 'MY-KEY'); --> 'hello'

4. The following will test the encryption of plaintext using a 10-character alphabet. This alphabet includes 0-9.

select encryption_handler.encrypt_varchar_r10('111-22-3333', 'MY-KEY'); --> '574-44-9457'

5. The following will decrypt ciphertext using a 10-character alphabet. The below example uses a fake ciphertext and should be replaced with the output from the above query.

select encryption_handler.decrypt_varchar_r10('574-44-9457', 'MY-KEY'); --> '111-22-3333'

6. The following will retrieve the keys stored within the application.

select key_handler.get_keys();

7. The following will retrieve only the labels of the keys stored within the application.

select key_handler.get_key_labels();

The application has four app roles that can be used to provide access to subsets of the app's functionality.

The app uses Snowpark Container Services to implement high-performance compute operations. For flexibility, the app exposes these SPCS objects to the application role APP_ADMIN. Using this role, you can inspect and control the status and parameters of these objects.

View status of the FPE service and app compute pool:

-- View the status and details of the Core FPE service
desc service services.fpe_service;

-- View the status and details of the app compute pool
desc compute pool <compute pool name>;

Alter parameters of the FPE service and compute pool:

-- Alter parameters related to service scaling
alter compute pool <compute pool name> set
   min_nodes = 1
   max_nodes = 3;
alter service services.fpe_service set
   min_instances = 1
   max_instances = 3;

-- Alter parameters related to autosupension
alter compute pool <compute pool name> set
   auto_suspend_secs = 360
   auto_resume = true;
alter service services.fpe_service set
   auto_suspend_secs = 360
   auto_resume = true;

Control service and compute pool status:

-- Suspend the service and compute pool when not in use
-- for long periods of time
alter service services.fpe_service suspend;
alter compute pool <compute pool name> suspend;

-- Resume the service
alter compute pool <compute pool name> resume;
alter service services.fpe_service resume;