Add an IP Networking Policy

If you encounter an authentication error when setting up a Snowflake data share target, make sure to include Data Cloud IP addresses in Snowflake. Create an IP networking policy in Snowflake that lists the allowed Data Cloud IP addresses.

1. In Data Cloud, click Setup, and select Data Cloud Setup.
2. Locate your instance. For example, CDP2-AWS-PROD1-USEAST1.
3. Based on your region, identify your VPCE ID and source IP addresses in the IP Addresses Used by Data Cloud Services table. For example, for CDP2-AWS-PROD1-USEAST1, the cloud is AWS, the region is US-EAST-1, and the VPCE ID is CDP2.
4. In Snowflake, create a network policy that includes the IP addresses.

   CREATE OR REPLACE NETWORK POLICY <name> -- Example: SFDC_NW_POLICY
       ALLOWED_IP_LIST = ('ip1 from step 3', 'ipN from step 3')
       COMMENT = 'Policy for SFDC Auth';
   

5. Attach the network policy to your security integration.

   CREATE OR REPLACE SECURITY INTEGRATION oauth_kp_int
       TYPE = oauth
       ENABLED = true
       OAUTH_CLIENT = custom
       OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
       OAUTH_REDIRECT_URI = '<SFDC_Callback_URL>'
       NETWORK_POLICY = SFDC_NW_POLICY;