Skip to content

Snowflake Python

Service Name: Snowflake

Service Description: Snowflake is a cloud-based data warehousing platform that provides a complete solution for data storage, processing, and analytics. It separates compute from storage to enable independent scaling.

Service Address: https://www.snowflake.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants programmatic access to Snowflake data warehouses through Python applications.

Secret Revokement URL: https://docs.snowflake.com/en/user-guide/admin-user-management

Secret Example: snowflake://username:password@account.snowflakecomputing.com/database/schema?warehouse=COMPUTE_WH&role=ANALYST

Suspicious Activity Investigation Instructions:

  • Review Snowflake account access history for unauthorized logins
  • Check for unusual query patterns or data exports
  • Examine account usage to identify abnormal compute resource consumption
  • Monitor for unauthorized role or privilege changes
  • Review network access logs for connections from unexpected locations

Mitigation Instructions:

  • Immediately change the user password associated with the connection string
  • Revoke and rotate any OAuth tokens or keys associated with the account
  • Navigate to the Snowflake web interface and go to User Management
  • Disable the compromised user account
  • Create a new user with appropriate permissions if needed
  • Update application configurations with new credentials
  • Consider implementing IP allowlisting for additional security