Snowflake Compliance Checks

The Snowflake plugin is meant to connect to Snowflake REST API endpoints that can be found in the Snowflake products. The plugin connects to Snowflake targets, fetches data from REST API endpoints, and evaluates the output for specific expressions.

Scan Requirements

Credentials

The plugin requires the Miscellaneous credentials of Snowflake REST API for scanning that includes the following items:

Permissions

A user with the ACCOUNTADMIN role is required.

Checks

All Snowflake REST API compliance checks must be bracketed with the check_type encapsulation and the Snowflake designation. This is required to differentiate .audit files intended specifically for Snowflake REST API from other types of compliance audits.

Copy
<check_type:"Snowflake">
* audit content
</check_type>

Review the following topics on specific elements in the audit language.