Skip to main content

Connecting Snowflake

Connect a Snowflake data warehouse to FreshGuard for monitoring.

Snowflake requires a Starter plan or higher. Starter+

Connection Fields

FieldDescriptionExample
Account IdentifierYour Snowflake account locatorxy12345.eu-west-1
WarehouseCompute warehouse to useFRESHGUARD_WH
DatabaseDatabase nameANALYTICS
SchemaSchema namePUBLIC
UsernameSnowflake userFRESHGUARD_READER
PasswordUser password
RoleRole to assumeFRESHGUARD_ROLE

Account Identifier Format

The account identifier depends on your Snowflake edition and region. Common formats:

  • xy12345 (legacy)
  • xy12345.us-east-1 (with region)
  • orgname-accountname (organization format)

You can find your account identifier in the Snowflake web UI under Admin > Accounts, or in the URL: https://<account_identifier>.snowflakecomputing.com.

Tip

Do not include .snowflakecomputing.com in the account identifier field — just the identifier portion.

Setup Steps

  1. Go to Sources and click Add Source.
  2. Select Snowflake.
  3. Enter your account identifier, warehouse, database, schema, username, password, and role.
  4. Click Test Connection.
  5. Save.

Create a dedicated read-only role and user for FreshGuard. This ensures FreshGuard has the minimum privileges needed and cannot modify your data. See the Snowflake: Read-Only Role guide for the exact SQL commands.

Common Issues

Account Not Found

  • Double-check the account identifier format. Try including the region suffix (e.g. xy12345.eu-west-1).
  • Ensure the account is active and not suspended.

Warehouse Suspended

  • FreshGuard needs an active warehouse to run queries. If your warehouse auto-suspends, FreshGuard will resume it automatically (the user must have USAGE on the warehouse).
  • You can use a small X-SMALL warehouse — FreshGuard queries are lightweight.

Role Permissions

  • Verify the role has USAGE on the warehouse, database, and schema.
  • Confirm SELECT is granted on the tables you want to monitor.