Skip to main content

Snowflake

OverviewSnowflake is a cloud data platform that enables secure data storage, processing, and analytics at scale.Secureframe’s Snowflake in...

Written by Brady Price

Overview

Snowflake is a cloud data platform that enables secure data storage, processing, and analytics at scale.

Secureframe’s Snowflake integration connects through the Snowflake API to pull user accounts, roles, grants, password policies, alerts, network policies, and key account configuration parameters. This data powers Secureframe’s compliance controls and automated tests to ensure access, password, and account settings remain secure and compliant.

Connecting the Integration

To connect Snowflake with Secureframe, navigate to the Integrations page, select the Native tab, and click + Add native connection. Search for Snowflake, then click Connect. Then follow the steps below:

  • Create role, user, and OAuth app
    In your Snowflake dashboard, open a SQL Worksheet. Copy the provided SQL block from Secureframe and run it using the Run All button.
    Important: Before running, replace 'password-to-be-replaced' in the script with a strong password. Be sure to keep it in a safe place. This password is only used to complete OAuth consent.

    This script will:
    1. Create a service user.
    2. Assign the correct role and permissions
    3. Set up a small warehouse
    4. Create an OAuth security integration and print out the OAUTH_CLIENT_ID and OAUTH_CLIENT_SECRET

  • Enter the OAuth Client Secret
    From the SQL output, copy the OAUTH_CLIENT_SECRET and paste it into the Secureframe connection form.

  • Enter the OAuth Client ID
    From the same SQL output, copy the OAUTH_CLIENT_ID and paste it into the Secureframe connection form.

  • Enter your Snowflake Account URL
    Enter the base URL for your Snowflake account. This is the same URL used by other tools (like Tableau, dbt, or an ODBC/JDBC driver) to connect to Snowflake.

    Run the following command in Snowflake to get your account locator and region:
    SELECT CURRENT_ACCOUNT(), CURRENT_REGION();

    Use these values to construct your account URL.
    For example: https://<account_locator>.<region>.snowflakecomputing.com
    Paste this URL into the Secureframe connection form.

  • Sign in to Snowflake
    Click Start Connection.
    A Snowflake login window will appear.
    1. Enter the username: SECUREFRAME_SERVICE_USER
    2. Enter the password you defined in the SQL script
    3. Complete the login to grant OAuth access

You can now navigate to the “Integrations” page, and you should be able to see your Snowflake connection.

Permissions, Fields Pulled, Controls, and Automated Tests

  1. Click the provided link or navigate to the “Integration” page.

  2. Select the “Available” tab.

  3. Search for the integration.

  4. Click “View details”.

Did this answer your question?