Loading controls...
Control: Use network policies to allow 'known' client locations (IP ranges)
Description
Use network policies to allow known client locations (IP ranges) to connect to your Snowflake account while blocking others. Additionally, if you’re using service account users to connect from a client application, SCIM, or Snowflake OAuth integrations, check if you need to configure different network policies (SCIM network policy, OAuth network policy) that overrides the account level network policy.
Usage
Run the control in your terminal:
powerpipe control run snowflake_compliance.control.security_overview_network_security_network_policy_allowed_list_setSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run snowflake_compliance.control.security_overview_network_security_network_policy_allowed_list_set --shareSQL
This control uses a named query:
network_policy_allowed_list_setParams
| Args | Name | Default | Description | Variable |
|---|---|---|---|---|
| $1 | allowed_ips | |