Snowflake Requirement for Network Policies

If your Snowflake account uses Snowflake network policies and if your Control Hub organization runs pipelines with the hosted Transformer for Snowflake engine, you must add Control Hub IP addresses to a Snowflake network policy to enable StreamSets Control Hub to communicate with your Snowflake account.

If your Snowflake account does not use network policies, you can skip this requirement. If your Control Hub organization runs pipelines using the deployed Transformer for Snowflake engines, skip this requirement and configure the firewalls for each engine machine. For more information, see the Control Hub documentation.

To enable communication using a network policy, include the following Control Hub IP addresses in the Allowed IP Addresses list in the network policy. For details on creating a network policy, see the Snowflake documentation.

StreamSets periodically adds IP addresses of newly promoted instances to this list. As a best practice, allow all of the following DNS names so that your account is always up to date: