Control: Allow firewall to connect client applications to Snowflake

Description

Allow firewall to connect client applications to Snowflake if your network has a firewall for egress traffic.

Run SYSTEM\$WHITELIST and/or SYSTEM\$WHITELIST_PRIVATELINK based on whether you’re allowing public endpoint, the private endpoint, or both to be accessible for your Snowflake account.
Use SnowCD to ensure proper connectivity has been set up with Snowflake.
If you’re using network proxy to inspect egress traffic, then set it up for SSL passthrough. Snowflake doesn’t support SSL terminating proxies.

Usage

Run the control in your terminal:

powerpipe control run snowflake_compliance.control.security_overview_network_security_allow_firewall_to_connect_client_applications

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run snowflake_compliance.control.security_overview_network_security_allow_firewall_to_connect_client_applications --share

SQL

This control uses a named query:

manual_control