Installation onhttps://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/Recent content in Installation onHugoenPre-Configurationhttps://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/preconfiguration/Mon, 01 Jan 0001 00:00:00 +0000https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/preconfiguration/<ol id="toc"></ol> <script> // JavaScript to generate the table of contents from H2 headings document.addEventListener("DOMContentLoaded", function () { //get all h2 headings within the 'main' element and generate a toc with links to them //excluding h2 heading 'Feedback' if it exists const toc = document.getElementById("toc"); const headings = document.querySelectorAll("main h2"); headings.forEach(heading => { if (heading.textContent === "Feedback") { return; // Skip the 'Feedback' heading } const li = document.createElement("li"); const a = document.createElement("a"); const id = heading.textContent.toLowerCase().replace(/\s+/g, '-'); heading.id = id; // Set the id for the heading a.href = `#${id}`; a.textContent = heading.textContent; li.appendChild(a); toc.appendChild(li); }); }); </script> <p> <h2 id="determine-aws-region">Determine AWS Region</h2> <p>Query the AWS region where the Snowflake cluster is running. This is the region in which Protegrity Serverless must be installed.</p>Prerequisiteshttps://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/prerequisite/Mon, 01 Jan 0001 00:00:00 +0000https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/prerequisite/<ol id="toc"></ol> <script> // JavaScript to generate the table of contents from H2 headings document.addEventListener("DOMContentLoaded", function () { //get all h2 headings within the 'main' element and generate a toc with links to them //excluding h2 heading 'Feedback' if it exists const toc = document.getElementById("toc"); const headings = document.querySelectorAll("main h2"); headings.forEach(heading => { if (heading.textContent === "Feedback") { return; // Skip the 'Feedback' heading } const li = document.createElement("li"); const a = document.createElement("a"); const id = heading.textContent.toLowerCase().replace(/\s+/g, '-'); heading.id = id; // Set the id for the heading a.href = `#${id}`; a.textContent = heading.textContent; li.appendChild(a); toc.appendChild(li); }); }); </script> <p> <h2 id="aws-services">AWS Services</h2> <p>The following table describes the AWS services that may be a part of your Protegrity installation.</p>Protect Service Installationhttps://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/protector/Mon, 01 Jan 0001 00:00:00 +0000https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/protector/<ol id="toc"></ol> <script> // JavaScript to generate the table of contents from H2 headings document.addEventListener("DOMContentLoaded", function () { //get all h2 headings within the 'main' element and generate a toc with links to them //excluding h2 heading 'Feedback' if it exists const toc = document.getElementById("toc"); const headings = document.querySelectorAll("main h2"); headings.forEach(heading => { if (heading.textContent === "Feedback") { return; // Skip the 'Feedback' heading } const li = document.createElement("li"); const a = document.createElement("a"); const id = heading.textContent.toLowerCase().replace(/\s+/g, '-'); heading.id = id; // Set the id for the heading a.href = `#${id}`; a.textContent = heading.textContent; li.appendChild(a); toc.appendChild(li); }); }); </script> <p> <h2 id="preparation">Preparation</h2> <ol> <li> <p>Ensure that all the steps in <a href="https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/preconfiguration/">Pre-Configuration</a> are performed.</p><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/overview/prerequisites/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/overview/prerequisites/</guid><description><h2 id="prerequisites">Prerequisites</h2> <table><thead><tr><th> <p>Requirement</p> </th><th> <p>Detail</p> </th></tr></thead><tbody><tr><td> <p>Protegrity distribution and installation scripts</p> </td><td> <p>These artifacts are provided by Protegrity</p> </td></tr><tr><td> <p>Protegrity ESA 10.0+</p> </td><td> <p>The Cloud VPC must be able to obtain network access to the ESA</p> </td></tr> <tr> <td>AWS Account</td> <td>Recommend creating a new sub-account for Protegrity Serverless</td> </tr> <tr> <td>Snowflake cluster (Enterprise Edition)</td> <td></td> </tr> </tbody> </table></description></item><item><title/><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/overview/skills/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/overview/skills/</guid><description><h2 id="required-skills-and-abilities">Required Skills and Abilities</h2> <table><thead><tr><th> <p>Role / Skillset</p> </th><th> <p>Description</p> </th></tr></thead><tbody><tr><td> <p>AWS Account Administrator</p> </td><td> <p>To run CloudFormation (or perform steps manually), create/configure a VPC and IAM permissions.</p> </td></tr><tr><td> <p>Protegrity Administrator</p> </td><td> <p>The ESA credentials required to extract the policy for the Policy Agent</p> </td></tr> <tr> <td>Network Administrator</td> <td>To open firewall to access ESA and evaluate AWS network setup</td> </tr> <tr> <td>Snowflake Administrator</td> <td>Account Admin access required to setup access</td> </tr> </tbody> </table></description></item><item><title/><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/services/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/snowflake/installation/services/</guid><description><h2 id="aws-services">AWS Services</h2> <p>The following table describes the AWS services that may be a part of your Protegrity installation.</p> <table><thead><tr><th> <p>Service</p> </th><th> <p>Description</p> </th></tr></thead><tbody><tr><td> <p>Lambda</p> </td><td> <p>Provides serverless compute for Protegrity protection operations and the ESA integration to fetch policy updates or deliver audit logs.</p> </td></tr><tr><td> <p>API Gateway</p> </td><td> <p>Provides the endpoint and access control.</p> </td></tr><tr><td> <p>KMS</p> </td><td> <p>Provides secrets for envelope policy encryption/decryption for Protegrity.</p> </td></tr><tr><td> <p>Secrets Manager</p> </td><td> <p>Provides secrets management for the ESA credentials .</p></description></item></channel></rss>