# Has anyone zitified Snowflake?

**URL:** <https://openziti.discourse.group/t/has-anyone-zitified-snowflake/1819>\
**Category:** Uncategorized\
**Created:** [November 23, 2023, 1:16am UTC](https://openziti.discourse.group/t/has-anyone-zitified-snowflake/1819 "2023-11-23T01:16:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![nyck33](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/nyck33/32/1466_2.png) [@nyck33](https://openziti.discourse.group/u/nyck33)\
**Post date:** [November 23, 2023, 1:16am UTC](https://openziti.discourse.group/t/has-anyone-zitified-snowflake/1819/1 "2023-11-23T01:16:05Z")

</div>

Snowflake's security is good but since I can connect from a normal browser (not like Browzer) or from the terminal using SnowSQL, they must be looking for incoming connections. According to OpenZiit, this increase the attack surface so it makes me think that Zitifying Snowflake makes it more secure. Are there any examples of this being done?

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [November 23, 2023, 1:26am UTC](https://openziti.discourse.group/t/has-anyone-zitified-snowflake/1819/2 "2023-11-23T01:26:45Z")

</div>

Generally speaking, a project as large as that would need to want to adopt OpenZiti. Let them know! 🙂 I've personally not used snowflake, but I do think there have been people here who have used OpenZiti with Snowflake, just not me personally. I don't know their security model to know if they have the same sort of concepts as "totally private" instances (protected by firewalls or bastions etc). I'd imagine they do, but I don't know at all.

Perhaps another community member has more experience to comment, but I don't! 🙂

---

<div class="post-metadata">

**Author:** ![nyck33](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/nyck33/32/1466_2.png) [@nyck33](https://openziti.discourse.group/u/nyck33)\
**Post date:** [November 23, 2023, 1:45am UTC](https://openziti.discourse.group/t/has-anyone-zitified-snowflake/1819/3 "2023-11-23T01:45:00Z")

</div>

@TheLumberjack doe the same go for Databricks?

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [November 23, 2023, 1:48am UTC](https://openziti.discourse.group/t/has-anyone-zitified-snowflake/1819/4 "2023-11-23T01:48:14Z")

</div>

It'd be the same basic idea, yes. You can absolutely use OpenZiti with any technology that requires secure connectivity using tunnelers. But to "zitify" a program has a different meaning to me. To "zitify" a program, you'd have to take and embed one of our sdks into the application, creating an application embedded zero trust solution. We did that for kubectl, we did it for a prometheus prototype, for [NATS.io](http://NATS.io) etc, but they are forks that we update if and when there's a desire.

---

<div class="post-metadata">

**Author:** ![nyck33](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/nyck33/32/1466_2.png) [@nyck33](https://openziti.discourse.group/u/nyck33)\
**Post date:** [November 23, 2023, 7:47am UTC](https://openziti.discourse.group/t/has-anyone-zitified-snowflake/1819/5 "2023-11-23T07:47:26Z")

</div>

I found something about Azure Private Link: [Azure Private Link & Snowflake | Snowflake Documentation](https://docs.snowflake.com/en/user-guide/privatelink-azure) so investigating using that from a web app deployed on Azure to connect to Snowflake and then zitifying the web app using the SDK. This seems secure to me.