Whitelisting ALTR's IP Addresses

ALTR must be able to reach Snowflake over the internet to apply and enforce policy. If your Snowflake account restricts inbound IP traffic using network policies, create the service user first, then create and assign a network rule whitelisting ALTR’s IP addresses to that service user, before connecting a Snowflake data source. ALTR’s IP addresses are:

• 44.203.133.160/28
• 3.145.219.176/28
• 35.89.45.128/28

Create a Network Policy for ALTR

To create a network policy for ALTR:

1. Verify you are using the ACCOUNTADMIN or SECURITYADMIN role.

   USE ROLE ACCOUNTADMIN;

2. Create a database and schema to house the network rule. Skip this step if you want to use an existing database and schema.

   CREATE DATABASE IF NOT EXISTS ALTR_DSAAS_DB;
   CREATE SCHEMA IF NOT EXISTS ALTR_DSAAS_DB.NETWORK_RULE_SCHEMA;

3. Create a network rule listing ALTR’s IP addresses. Replace ALTR_DSAAS_DB.NETWORK_RULE_SCHEMA if you’re using a different database and schema.

   CREATE NETWORK RULE ALTR_DSAAS_DB.NETWORK_RULE_SCHEMA.ALLOW_ALTR_ACCESS
     MODE = INGRESS
     TYPE = IPV4
     VALUE_LIST = ('44.203.133.160/28', '3.145.219.176/28', '35.89.45.128/28');

4. Create a network policy that allows the network rule. Replace ALTR_DSAAS_DB.NETWORK_RULE_SCHEMA if you used a different database and schema in step 3.

   CREATE NETWORK POLICY ALLOW_ALTR_ACCESS
     ALLOWED_NETWORK_RULE_LIST = ('ALTR_DSAAS_DB.NETWORK_RULE_SCHEMA.ALLOW_ALTR_ACCESS');

5. Assign the network policy to ALTR’s service user. Replace PC_ALTR_USER with your service user’s name — ALTR_SERVICE_USER for the default manual setup, or your custom name.

   ALTER USER PC_ALTR_USER SET NETWORK_POLICY = ALLOW_ALTR_ACCESS;