Snowflake

Connect Sola and Snowflake to get security insights

Overview

The Snowflake integration allows you to query and analyze data directly from your warehouse in real time. Turn live data into easy to use natural language security investigations and context.

With the Snowflake integration, you can:

• Query and analyze your Snowflake data directly in Sola in real time, with no scheduled syncs or data exports.

• Get contextual insights based on live data to support faster investigation and decision-making.

• Correlate Snowflake data with activity across your cloud, identity, and SaaS environment.

• Ask natural language questions about your Snowflake data directly in Sola.

Your data can only be retrieved, never modified.

Once connected, your data is securely stored, and access is restricted to retrieving configurations and metadata only. Authentication methods ensure secure delegation of permissions while maintaining data integrity.

Set up Snowflake data source integration with Sola

Go to Integrations > Data Sources > click New data source > select Snowflake.

The Sola wizard will take you through the steps.

Set up Snowflake ->

Connect Snowflake to Sola

To connect Snowflake, you'll need SECURITYADMIN privileges in your Snowflake account.

Workload Identity Federation

This method uses AWS Workload Identity Federation to authenticate Sola to your Snowflake account without storing credentials. Recommended for publicly accessible Snowflake accounts.

This method uses a script to create a role that has access to all tables and all future tables. To limit access, manage role permissions directly in the Snowflake UI, or modify the script to specific schemas or tables before running. For example:

GRANT USAGE ON SCHEMA my_database.my_schema TO ROLE SOLA_READ_ROLE;

GRANT SELECT ON TABLE my_database.my_schema.my_table TO ROLE SOLA_READ_ROLE;