Security Analytics with Snowflake
An introduction to performing analytics with Snowflake
Overview
With the new Snowflake Data Share integration, your data science, BI and AppSec teams can securely access the same underlying data available in Snyk Reporting, but within your own Snowflake account, unlocking powerful new analytical tools to better understand and visualize Snyk data.
Use this integration to enable teams to rapidly build exploratory and custom analytics using the ecosystem of tools that Snowflake supports. Customers can connect Snyk data to BI tools like PowerBI, Tableau, and Looker Data Studio or build custom Streamlit apps.
Having Snyk datasets directly in your Snowflake account opens doors for combining Snyk data with additional data sources, which contributes a great deal to the organization-level holistic AppSec view.
Additional documentation can be found here.
This lesson will
- Provide an overview of some of the most sought after usage patterns this release should support
- Discuss and briefly demonstrate those capabilities
- Link to demonstration code to help you get started.
Main use-cases
Snyk Snowflake Data Share can be used for various use cases and can answer countless security and business-related questions. Some of these use cases include:
- Enhance the AppSec posture visibility for the CISO and management team.
- Streamline Snyk data to your BI platforms and existing security dashboards and reflect performance metrics and KPI's, for example, MTTR, SLA compliance, remediation trends, and so on.
- Answer specific questions or surface unique insights.
- Better understand risk exposure trends, such as tracking total issues above a specific risk score only affect certain Project collections or tags across all Snyk Groups whilst filtering for only main or master branches.
- Measure the performance of fix behaviour against SLA. For example, enter custom SLA targets and track towards those goals.
- Build custom prevention reporting to understand shift left impact. For example, view trends in preventable Open Source vulnerabilities across all Snyk Groups, filtered by specific severities and risk scores.
Video - 2:03min
- A Snyk Enterprise plan customer
- A participant in the Early Access release in Snowflake Data Share
- or Purchased a Snowflake add-on for Snyk Enterprise
- An active Snowflake account
- Snowflake: Organization admin (requires ORGADMIN role) to accept provider and Consumer Terms of Service
- Snowflake: Setting up privileges requires ACCOUNTADMIN role or another role with CREATE DATABASE and IMPORT SHARE privilege
For more information, contact your Snyk Account Executive.
Request a Snowflake Data Share access
Follow the steps below to request a Snowflake Data Share access:
- Contact your Snyk Account Executive to request access
- Provide your Snyk contact person with the following Snowflake account details (find here guidelines to trace your credentials):
- Account Name.
- Organization Name.
- If you prefer to limit the data share to a specific set of Snyk Groups, mention the relevant Group IDs (the ID is available in the Snyk Group Settings).
After Snyk receives the Snowflake account details, the team will prepare the Data Share. You should expect to see your data within 24 hours.
The data share will be provided as a Privately Shared Listing. If it is the first time that you consume Snowflake data shares, proceed with the steps below; otherwise, proceed to Create a database from Snyk Data Share:
Your Snowflake Organization admin (requires ORGADMIN role) should accept Snowflake Provider and Consumer Terms of Service.
Set up the required privileges (requires ACCOUNTADMIN role or another role with CREATE DATABASE and IMPORT SHARE privileges).
The following presentation discusses the above sample code and other possibilities.
Video - 5:11min