External network access overview¶

You can create secure access to specific network locations external to Snowflake, then use that access from within the handler code for user-defined functions (UDFs) and stored procedures. You can enable this access through an external access integration.

With an external access integration, you can:

• Write UDF and procedure handlers that access external locations.

• Allow or block access to locations on a network external to Snowflake.

• Use secrets that represent stored credentials, rather than using literal values, within handler code to authenticate with external network locations.

• Specify which secrets are allowed for use with external network locations.

• Choose whether your connectivity to the external network location uses the public internet or a private network, such as by using Azure Private Link, AWS PrivateLink, or Google Cloud Private Service Connect.

  If you choose to use private connectivity, your Snowflake account must be Business Critical Edition (or later).

  For more information, see the following topics:

  • External network access and private connectivity on Microsoft Azure

  • External network access and private connectivity on AWS

  • External network access and private connectivity on Google Cloud