Snowflake

Introduction

This document provides the step-by-step procedure to configure Snowflake in SAFE.

SAFE integrates with Snowflake, and fetches the security misconfiguration of the Sentry account in SAFE.

Prerequisites

• Access required in SAFE:
  • SAFE Admin Access
• Access required in Snowflake:
  • Snowflake Admin Account
• Required User Inputs:
  • API Instance URL
  • Client ID
  • Client Secret
  • Refresh Token
  • Asset Name in SAFE (optional)
• Scope:
  • Manage Grants
  • Import Share

Generate Connection Details

• How to generate Client ID and Client Secret:
  1. Login to the Snowflake dashboard as an Admin.

  2. Click on the Settings option from the left panel.

• 3. From the Develop drop-down, click the Build App option, available at the top-right of the screen.

• 4. Click the Server-to-Server OAuth App type.

• 5. Enter the name of your app. For example, SAFE Integration.

• 6. Click Create. The system creates the App.
  7. Go to the App details page and click the App credentials option.
  8. Here, the system displays the Account ID, Client ID, and Client Secret.

  9. Copy and save these credentials to use while configuring Zoom in SAFE.

• 10. In the API Scopes section, select the permissions:

      1. read:all or read:resources
      2. create:reports
      3. update:reports
  11. Click Add Service Account to generate and display the Client ID and Client Secret. Copy and save the values as these will no longer be visible after you leave the page.
• How to get a Site ID:
  1. Run the following curl command to get the site-id.
  2. Copy and save the site-id to be used for onboarding Tableau in SAFE:
  3. Replace the personalAccessTokenName and personAccessTokenSecret using the above captured Token Name and Token Secret.
  4. Log in to your Tableau account as Admin.

  5. In the exhibit provided, find the contentUrl highlighted. Copy and save this contentUrl to use it while generating site-id.

• 6. In the exhibit provided, find the URL highlighted. Copy and save this URL to use it while generating site-id.

• 7. Use the above captured contentUrl to generate the site-id in below curl request.

curl --location 'https://tableau-server-name.online.tableau.com/api/3.21/auth/signin' \
--header 'Accept: application/json' \
--header 'Content-Type: application/xml' \
--data '<tsRequest> <credentials personalAccessTokenName="<PAT name>" personalAccessTokenSecret="<PAT secret>"> <site contentUrl="<content_url>"/> </credentials> </tsRequest>'

• The system displays the Site ID. Copy and save the Site ID to use it while configuring Tableau in SAFE.

Configure Snowflake in SAFE

1. Log in to your SAFE account as Admin.
2. Click on the Integrations option from the left navigation.

3. Scroll to find the Snowflake integration card or search for Snowflake in the search bar.

4. Hover over the Snowflake integration card and click on the Configure button.

5. Enter the following configuration values:

   • API Instance URL
   • Client ID
   • Client Secret
   • Refresh Token
   • Asset Name in SAFE (optional): Provide a unique identifier which can uniquely identify the asset.
6. Enter the Auto Sync Frequency.
7. Click on the Test Connection button.

8. Once the connection is successful, click on the Save button.

9. Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.

10. Upon a successful sync, the system pulls the Snowflake assets and their findings into SAFE. You can track the status of the sync in the History table.

View Results

Navigate to the integration dashboard parameters view to inspect ingested telemetry:

• Finding View: This tab displays all the findings details pulled from Snowflake.

• Asset View: This tab displays all the assets pulled from Snowflake.

To check sync status and errors for this integration, see Integration History.

Did this article help?

Let us know by leaving a star rating at the top of this article.