Continuous Data Protection¶
Continuous Data Protection (CDP) encompasses a comprehensive set of features that help protect data stored in Snowflake against human error, malicious acts, and software or hardware failure. At every stage within the data lifecycle, Snowflake enables your data to be accessible and recoverable in the event of accidental or intentional modification, removal, or corruption.
The features include:
Feature |
Additional Reading |
|---|---|
Network policies for granting or restricting users access to the site based on their IP address (i.e. IP allow lists). |
|
Verification/authentication required for any users accessing your account (includes support for MFA and SSO). |
Multi-Factor Authentication (MFA) — enabled per user . Federated Authentication & SSO |
Security roles for controlling user access to all objects in the system. |
|
Automatic 256-bit AES encryption of data (at rest and in transit); 128-bit or 256-bit AES encryption of all files staged for loading/unloading data. |
|
Maintenance of historical data (i.e. data that has been changed or deleted) through Snowflake Time Travel (for querying and restoring data) and Fail-safe (for disaster recovery; can only be performed by Snowflake). |
Most Continuous Data Protection features are included standard for all Snowflake Editions (i.e. no additional licensing is required); however, some features are available only for Snowflake Enterprise Edition (or higher).
In addition, both Time Travel and Fail-safe require additional data storage, which has associated fees. For more details, see Data Storage Considerations.