Snowflake integration
Automatically sync your Snowflake users, roles, warehouses, and databases into your IT asset inventory for complete visibility into data infrastructure access and governance.
What it connects
- Collect all user accounts with their login credentials, MFA status, warehouse defaults, and security settings to maintain an accurate identity registry.
- Ingest role definitions and hierarchies to understand who has what level of access across your Snowflake environment.
- Track all virtual warehouses and their operational states, running, suspended, or queued, to monitor compute resource availability and usage.
- Map databases and schemas to understand your data structure, ownership, and how data assets are organized across the platform.
What it automates
- Create, update, or disable user accounts directly from STLabs to manage access lifecycle without switching tools.
- Grant and revoke roles for users to quickly adjust access permissions in response to staffing changes or security incidents.
- Suspend or resume data warehouses to control cost and resource allocation based on business needs.
- Create and assign network policies to restrict user access by IP range, adding a network-level security layer to containment strategies.
In practice
- When an employee is terminated, STLabs syncs their Snowflake user record and immediately disables it, then revokes all role assignments to prevent unauthorized data access.
- Audit your data environment by pulling user-role relationships and warehouse assignments into STLabs, then use compliance workflows to validate that access matches your organization chart.
- During a security incident affecting a specific region, use STLabs to apply network policies restricting access to IP ranges associated with compromised locations across all affected users.
- Track warehouse scaling and lifecycle. Pull current warehouse states and configurations into Axiom, then automate suspension of idle warehouses to reduce cloud costs.
