-
Notifications
You must be signed in to change notification settings - Fork 982
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Snowflake Privatelink VPC Endpoint ID Docs (#5268)
## What are you changing in this pull request and why? Added setup instructions for using VPC Endpoint IDs in [Snowflake Network Policies](https://docs.snowflake.com/en/user-guide/network-policies). <!--- Describe your changes and why you're making them. If related to an open issue or a pull request on dbt Core, then link to them here! To learn more about the writing conventions used in the dbt Labs docs, see the [Content style guide](https://github.com/dbt-labs/docs.getdbt.com/blob/current/contributing/content-style-guide.md). --> ## Checklist - [x] Review the [Content style guide](https://github.com/dbt-labs/docs.getdbt.com/blob/current/contributing/content-style-guide.md) so my content adheres to these guidelines.
- Loading branch information
Showing
3 changed files
with
44 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -56,3 +56,47 @@ Once dbt Cloud support completes the configuration, you can start creating new c | |
3. Select the private endpoint from the dropdown (this will automatically populate the hostname/account field). | ||
4. Configure the remaining data platform details. | ||
5. Test your connection and save it. | ||
|
||
## Configuring Network Policies | ||
If your organization uses [Snowflake Network Policies](https://docs.snowflake.com/en/user-guide/network-policies) to restrict access to your Snowflake account, you will need to add a network rule for dbt Cloud. | ||
|
||
You can request the VPCE ID from [dbt Cloud Support](mailto:[email protected]), that you can use to create a network policy. | ||
|
||
### Using the UI | ||
|
||
Open the Snowflake UI and take the following steps: | ||
1. Go to the **Security** tab. | ||
2. Click on **Network Rules**. | ||
3. Click on **Add Rule**. | ||
4. Give the rule a name. | ||
5. Select a database and schema where the rule will be stored. These selections are for permission settings and organizational purposes; they do not affect the rule itself. | ||
6. Set the type to `AWS VPCE ID` and the mode to `Ingress`. | ||
7. Type the VPCE ID provided by dbt Cloud Support into the identifier box and press **Enter**. | ||
8. Click **Create Network Rule**. | ||
|
||
<Lightbox src="/img/docs/dbt-cloud/snowflakeprivatelink2.png" title="Create Network Rule"/> | ||
|
||
9. In the **Network Policy** tab, edit the policy you want to add the rule to. This could be your account-level policy or a policy specific to the users connecting from dbt Cloud. | ||
|
||
|
||
10. Add the new rule to the allowed list and click **Update Network Policy**. | ||
|
||
<Lightbox src="/img/docs/dbt-cloud/snowflakeprivatelink3.png" title="Update Network Policy"/> | ||
|
||
### Using SQL | ||
For quick and automated setup of network rules via SQL in Snowflake, the following commands allow you to create and configure access rules for dbt Cloud. These SQL examples demonstrate how to add a network rule and update your network policy accordingly. | ||
|
||
1. Create a new network rule with the following SQL: | ||
```sql | ||
CREATE NETWORK RULE allow_dbt_cloud_access | ||
MODE = INGRESS | ||
TYPE = AWSVPCEID | ||
VALUE_LIST = ('<VPCE_ID>'); -- Replace '<VPCE_ID>' with the actual ID provided | ||
``` | ||
|
||
2. Add the rule to a network policy with the following SQL: | ||
```sql | ||
ALTER NETWORK POLICY <network_policy_name> | ||
ADD ALLOWED_NETWORK_RULE_LIST =('allow_dbt_cloud_access'); | ||
``` | ||
|
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.