Skip to main content

Beta: Configure Snowflake Secure Data Sharing

Updated over 2 weeks ago

This article covers the steps for a feature in Beta. Read here to learn more about our release types.

The Snowflake Connection in BlueConic is used to enrich BlueConic profiles with data from Snowflake and vice versa. With this beta release, a new authentication method leverages Snowflake's Secure Data Sharing capabilities, providing a secure and efficient alternative to traditional import methods that relied on intermediary storage (e.g., S3, Azure Blob Storage, Google Cloud Storage) or complex credential management.

This feature currently works with data imports only.


Before you begin

  • Ensure that any views or tables you share with BlueConic have change tracking enabled. Enable Change Tracking:

    • For Tables - Run the following command to enable change tracking on a table: ALTER TABLE SET CHANGE_TRACKING = true

    • For Views - Although Snowflake provides a command to enable change tracking on a view, remember that views are built upon one or more underlying tables. Therefore, ensure that both the view and its underlying tables have change tracking enabled.

      • Run the command below to enable change tracking on a view:

        ALTER VIEW <view> SET CHANGE_TRACKING=true

      • Note: Enabling change tracking on the underlying tables is critical because it ensures that all changes captured by the view are fully tracked.

Note: Double check if Change tracking is enabled on each table and view, If you don't see them listed in the Import goal


Configure Secure Data Sharing

To use Secure Data Sharing in the Snowflake Connection:

  1. Open the Set up and run page of your Snowflake Connection.

  2. Under Data access method, choose the “Secure Data Sharing (import only)” option.

    • If switching to this option in an existing Snowflake Connection, a pop-up will appear that confirms you wish to make this change.

  3. A Secure Data Sharing configuration will appear.

  4. Select a Cloud Platform from the dropdown. This should be where your Snowflake instance is hosted: AWS, Azure, or Google Cloud.

  5. Select the geographic region of your Snowflake instance.

  6. Once the cloud platform and region are defined, the Secure Share Identifier and BlueConic Account will populate and look something like:

    • Copy the Secure Share Identifier and in your Snowflake environment, set up a share with this exact name.

    • Copy the BlueConic Account and use it as the unique identifier of the BlueConic Snowflake account to set up the share.

  7. Create the private share. In your Snowflake account, go to Data Products > Private sharing

  8. Click Share on the right top, and click on Create a Direct Share.

  9. Select a database and then the tables and views that you want to Share to BlueConic. Click Done.

  10. Enter the Secure Share Identifier of the BlueConic snowflake account as shown in the BlueConic UI in step 6. Click Create Share.

  11. In BlueConic, click the Validate configuration button to test that everything works correctly.

  12. When validated, the button will show a checkmark.

    1. Note: If you make a change to the configuration, the button will reactivate.

  13. Set up the rest of your Snowflake Connection.

    1. Note: The "Run now" button doesn't work in Beta. You can schedule the connection to run by choosing options in the Schedule window.

Did this answer your question?