There are a few ways to encrypt your shared data on Snowflake.
- Use Secure Data Sharing (SDS): SDS encrypts all shared data in transit and at rest. This helps to protect your data from unauthorized access.
- Use customer-managed keys: Customer-managed keys (CMKs) allow you to encrypt your data with your own encryption keys. This can give you more control over your data encryption.
- Use a third-party encryption solution: There are a number of third-party encryption solutions that you can use to encrypt your data. These solutions can provide additional encryption features, such as key rotation and key management.
By using SDS, CMKs, or a third-party encryption solution, you can help to protect your shared data from unauthorized access.
Here are some additional details about each of these methods:
-
Secure Data Sharing (SDS): SDS encrypts all shared data in transit and at rest. This helps to protect your data from unauthorized access.
When you share data with another account using SDS, the data is encrypted using a key that is managed by Snowflake. This ensures that the data is protected from unauthorized access even if the shared object is compromised.
SDS also encrypts the data in transit between your account and the account that you are sharing the data with. This helps to protect the data from unauthorized access while it is being transferred.
-
Customer-managed keys: Customer-managed keys (CMKs) allow you to encrypt your data with your own encryption keys. This can give you more control over your data encryption.
When you use CMKs, you create a key pair in Snowflake and then store the private key in a secure location. You then use the public key to encrypt your data.
When you share data with another account using CMKs, you share the public key with the account. The account can then use the public key to decrypt the data.
-
Third-party encryption solution: There are a number of third-party encryption solutions that you can use to encrypt your data. These solutions can provide additional encryption features, such as key rotation and key management.
When you use a third-party encryption solution, you will need to create an account with the solution provider and then configure the solution to encrypt your data.
Once your data is encrypted, you can share it with other accounts by using the solution provider's API or SDK.
By using SDS, CMKs, or a third-party encryption solution, you can help to protect your shared data from unauthorized access.
