Salesforce Docs Portal

Add an IP Networking Policy

If you encounter an authentication error when setting up a Snowflake data share target, make sure to include Data Cloud IP addresses in Snowflake. Create an IP networking policy in Snowflake that lists the allowed Data Cloud IP addresses.

Required Editions

Available in: All Editions supported by Data 360. See Data 360 edition availability.
  1. In Data Cloud, click Setup, and select Data Cloud Setup.
  2. Locate your instance. For example, CDP2-AWS-PROD1-USEAST1.
  3. Based on your region, identify your VPCE ID and source IP addresses in the IP Addresses Used by Data Cloud Services table. For example, for CDP2-AWS-PROD1-USEAST1, the cloud is AWS, the region is US-EAST-1, and the VPCE ID is CDP2.
  4. In Snowflake, create a network policy that includes the IP addresses. 
    CREATE OR REPLACE NETWORK POLICY <name> -- Example: SFDC_NW_POLICY
    ALLOWED_IP_LIST = ('ip1 from step 3', 'ipN from step 3')
    COMMENT = 'Policy for SFDC Auth';
  5. Attach the network policy to your security integration. 
    CREATE OR REPLACE SECURITY INTEGRATION oauth_kp_int
    TYPE = oauth
    ENABLED = true
    OAUTH_CLIENT = custom
    OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
    OAUTH_REDIRECT_URI = '<SFDC_Callback_URL>'
    NETWORK_POLICY = SFDC_NW_POLICY;

See Also