How to get started with the third-party Snowflake data source.
Overview
Integrate Cortex Cloud Data Security with your Snowflake account to gain comprehensive visibility into any data and posture risk existing in your Snowflake environment. This integration enables automated scanning of all assets in Snowflake, including data classification and risk assessment.
You can add Snowflake as a third-party data source in Cortex Cloud Data Security .
Prerequisite
In order to use Snowflake, you must be registered with one of these cloud providers: Amazon AWS, Microsoft Azure, or Google Cloud Platform (GCP).
Ensure you have the necessary account permissions to onboard. It is recommended to use
Account Adminas the role for the onboarding.
Configuration Step
Navigate to → .
On the Data Sources & Integrations page, click + Add New.
On the Add Data Sources or Integrations page, search for Snowflake, then hover over it and click Add.
On the New Data Source Snowflake integration instance settings page, do the following:
Enter a display name for your Snowflake integration instance.
Enter a Data Sharing Account Identifier.
Note
The account identifier can be found using the user information at the bottom left. Hover over the account you wish to onboard and select the copy option at the top right. The account identifier is usually of the format:
(organization).[account]
(Optional) If you have a Snowflake account that is protected by a network policy, turn on the My Snowflake account is protected by network policies toggle button. The network policies are related to the IP allow list.
Select a cloud platform and choose a region.
(Optional) If you want to use an existing user:
Click Show advance settings and then turn on the Use an existing user toggle button.
Enter the user name and the login name.
Click Next.
Establish Connection Step
Open your Snowflake console in a new tab.
Using the copy or download icons, copy or download the script in the Generated script text box and paste it into a new worksheet in Snowflake.
Select the entire script and select Run all.
Once the script runs without errors, come back to the Snowflake screen and click Verify Connection to check if the instance is detected.
Verify Connection Step
A success or failure message appears on the screen.
If a success message appears, you can do the following:
View the instance's information in the Snowflake Posture instances.
View the assets in Asset Inventory, once the first scan is complete.
Delete a Snowflake instance
Navigate to → .
On the Data Sources & Integrations page, select the Snowflake integration or filter to search for it and then select it.
On the Snowflake page, right click the row of the integration instance you want to delete.
From the drop down menu, select Settings and from the integration instance settings page select the Delete checkbox and then click Delete.
The Snowflake instance is now removed, including all previous scans.