Snowflake Requirement for Network Policies

If your Snowflake account uses Snowflake network policies and your Control Hub organization runs pipelines with the hosted Transformer for Snowflake engine, you must add Control Hub IP addresses to a Snowflake network policy. This enables Control Hub to communicate with your Snowflake account.

If your Snowflake account does not use network policies, you can skip this requirement. If your Control Hub organization runs pipelines using the deployed Transformer for Snowflake engines, skip this requirement and configure the firewalls for each engine machine. For more information, see the Control Hub documentation.

To enable communication using a network policy, include the following IP addresses for your Control Hub instance in the Allowed IP Addresses list in the network policy. For details on creating a network policy, see the Snowflake documentation.

Control Hub instances are available in several geographic regions that are operated by different infrastructure providers. Some of the IP addresses are not within the control of IBM StreamSets and might change. As a best practice, allow the provided DNS names so that your firewall is always up to date.

Allow the following addresses for your Control Hub instance: