IP allowlist for Snowflake
Admin steps when Snowflake uses a network policy.
Most data connections need no IP allowlist. Use this page only if your Snowflake account restricts inbound traffic by IP.
- Ask Kimpton support for the current integration egress addresses. Do not use an old list from a copied guide; the provider can change it.
- In Snowflake, create a network policy with those addresses.
- Apply it to the Kimpton service user, not your whole Snowflake account.
- Test the Snowflake connection and check an expected table in Vault → Data Catalog.
S3 access uses its IAM role and trust policy instead. Cloud file pickers run in your own browser; Kimpton's Snowflake egress addresses do not apply to them.