---
schema_version: "1"
id: 4c05f0947c4acdba32528c4de8ee166b18256e32308a232480dcc5f186527d84
title: Add a Private Network Route for Snowflake on Amazon Web Services (AWS)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_add_network_route_snowflake.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_add_network_route_snowflake.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: acab81db5a9d239dafe56ec3996cbc14b4f7020626ed1469258d5168e8c0d8f8
description: Connect your Snowflake data source and Data 360 tenant with a dedicated network connection by using Private Connect for Data 360. Create a single connection to a specific instance, even if you have multiple Data 360 instances. Before you set up a Snowflake federation connection or data share, create a Private Network Route (PNR).
products:
  - Data 360
release: "264"
---
# Add a Private Network Route for Snowflake on Amazon Web Services (AWS)

Connect your Snowflake data source and Data 360 tenant with a dedicated network connection by using Private Connect for Data 360. Create a single connection to a specific instance, even if you have multiple Data 360 instances. Before you set up a Snowflake federation connection or data share, create a Private Network Route (PNR).

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All Editions</strong> supported by Data 360. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;release=264.0.0&amp;type=5" title="Data 360 is available in several supported Salesforce editions. Some Data 360 features also require additional licenses.">Data 360 edition availability</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:left;vertical-align:top;" id="d56493e67">User Permissions
              Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d56493e67 ">To create a Snowflake network route:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d56493e67 ">Data Cloud Architect permission set, Manage External Connections, or Customize
              Application permission</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d56493e67 ">To administer a Snowflake environment:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d56493e67 ">Snowflake account administrator</td>

          </tr>
        </tbody>
      </table>

Limitations

- The maximum number of private network routes (PNRs) for a particular Snowflake URL is limited to one per Data 360 functional domain (not per Data 360 org).
- To connect Data 360 to your Snowflake instance, add the virtual private cloud (VPC) endpoint ID to your organization’s allowlist.
    
    Alternatively, you can add the internal IP address range 10.0.0.0/8 to your Snowflake network policy's allowlist. Only private networks use this reserved address range. For more information, see [Controlling network traffic with network policies](https://docs.snowflake.com/en/user-guide/network-policies) in the Snowflake documentation.

1. From the **App Launcher**, select **Data Cloud**.
2. From **Setup**, select **Data Cloud Setup**.
3. From **Data Cloud Setup**, expand **Admin Tools** and select **Private Connect**.
4. Select **New**.
    
    When the maximum number of licensed private network routes is reached, the New button doesn’t appear. To get more private network routes, speak with your Salesforce account representitve.
5. On the Add Private Network Route page, select the **Snowflake** tile.
6. In the Select a network panel, select **AWS** and then click **Add Private Network Route**.
7. On the Configure Snowflake Private Network Route page, enter a route name. Data 360 autopopulates the Route API name based on the route name.
    
    You can’t change the route name after you save.
8. Optionally, in the **Description** field, enter a description to identify the connection.
9. In the **Account URL** field, enter the [Snowflake account URL](https://docs.snowflake.com/en/user-guide/admin-account-identifier).
10. In the **Virtual Private Cloud endpoint ID** field, enter the ID.
    
    To get the ID, use the SYSTEM$GET\_PRIVATELINK\_CONFIG function. See the [Function and stored](https://docs.snowflake.com/en/sql-reference/functions/system_get_privatelink_config) procedure reference documentation.
11. Select **Save**.

After the network provisioning is complete, create a Snowflake federated connection or data share. Provisioning can take some time. After Data 360 provisions the network route, update the Snowflake network policy. See [Update Your Snowflake Network Policy](https://help.salesforce.com/s/articleView?id=data.c360_a_private_connect_update_your_snowflake_network_policy.htm&release=264.0.0&type=5 "To ensure access, modify your Snowflake network policy to include the Data Cloud virtual private cloud (VPC) endpoint ID.").

- **[Update Your Snowflake Network Policy](https://help.salesforce.com/s/articleView?id=data.c360_a_private_connect_update_your_snowflake_network_policy.htm&release=264.0.0&type=5)**  
    To ensure access, modify your Snowflake network policy to include the Data Cloud virtual private cloud (VPC) endpoint ID.

#### See Also

- [_Salesforce Help_: Create Data Share Target and Connect with Snowflake](https://help.salesforce.com/s/articleView?id=data.c360_a_create_data_share_target_snowflake.htm&release=264.0.0&type=5 "Create a data share target in Data 360 to establish connectivity with a Snowflake account.")
- [_External Link_: Enabling AWS PrivateLink](https://docs.snowflake.com/en/user-guide/admin-security-privatelink#enabling-aws-privatelink)
- [_External Link_: Create a service powered by AWS PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/create-endpoint-service.html)
- [_External Link_: Account identifiers](https://docs.snowflake.com/en/user-guide/admin-account-identifier)
- [_External Link_: Configuring your AWS VPC environment](https://docs.snowflake.com/en/user-guide/admin-security-privatelink#configuring-your-aws-vpc-environment)
- [_Salesforce Help_: Set Up a Snowflake Federation Connection for Private Connect](https://help.salesforce.com/s/articleView?id=data.c360_a_set_up_a_snowflake_federation_connection_for_private_connect.htm&release=264.0.0&type=5 "Set up a connection between Snowflake and Private Connect for Data Cloud to access the data.")