Why Go Beyond Native Snowflake Data Cloud Security
- Snowflake delivers enterprise-grade security including end-to-end encryption, role-based access control, MFA, and support for customer-managed keys, providing secure and flexible data access in the cloud.
- As Snowflake environments expand across multi-cloud deployments with more users, integrations, and data sharing, advanced threats and misconfigurations can introduce risks beyond what native controls alone address.
- Centralized key management, enhanced monitoring, and advanced data protection controls build on Snowflake’s native security to improve visibility and help meet evolving regulatory requirements.
~165 Snowflake customer accounts were targeted / impacted
The mid-2024 incident resulted in large-scale data exfiltration and extortion activity.*
*WIRED: Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake. June, 2024
Shared-Responsibility Risk
Snowflake leaves security burden on customers
Limited Key Control
Native keys are managed by Snowflake only
Column-Level Encryption Complexity
Snowflake relies on user-defined functions (UDFs) that can affect performance and scale
Data Sovereignty Challenges
Sensitive data outside customer’s cloud account
Snowflake Data Cloud Security Requirements to Consider
Simplified Customer-Managed Keys
Maintain full control over encryption key lifecycle
Flexible Encryption Models
Encrypt at file, column, and app levels
Granular Access Control
Enforce fine-grained policies without re-architecting
Consistent Compliance
Enforce fine-grained policies without re-architecting
Real-Time Data Activity Monitoring
Detect anomalous access and exfiltration
External Secrets Handling
Secure credentials, tokens, and keys externally
Database Security Solutions for Oracle
CipherTrust Cloud Key Management (CCKM)
Centralizes encryption key lifecycle management and reduces operational burden and enforces consistent security controls across environments
Thales Data Security Fabric (DSF) – Data Activity Monitoring
Real-time visibility into user activity, data access patterns, vulnerabilities, and privileged account usage
Still have questions?
Talk to a specialist about CipherTrust Database Security Solutions.
Related resources
