snowflake
6 Dtwo policies tagged "snowflake", including Block Bulk Export & External Staging (Snowflake), Block Destructive and Mutating Snowflake SQL. Browse by what the control does rather than which app it targets.
Block Bulk Export & External Staging (Snowflake)Blocks Snowflake SQL-execution tool calls whose query text moves whole tables off the Snowflake perimeter — bulk export to cloud storage or a stage, and…Block Destructive and Mutating Snowflake SQLInspects the SQL text that Snowflake MCP tools carry in their query argument and denies any statement in a mutating or destructive class — DROP, TRUNCATE,…Fence Snowflake Sensitive Schemas by Data DomainFences customer-designated sensitive data domains inside a Snowflake warehouse by inspecting the SQL text the agent is about to run — not by tool name, which…Snowflake Default-Deny Unknown ToolsPins an allowlist of the exact Snowflake tool names your team audited and denies every other tool name on the Snowflake MCP server(s).Snowflake Deny Composite & Generic ToolsDenies the opaque composite and generic passthrough tools on the Snowflake-managed MCP server whose execution the gateway cannot inspect one SQL statement at…Snowflake: Redact PII from Query Result SetsScans the row content returned by the result-returning Snowflake MCP tools and rewrites personally identifiable information to fixed redaction tokens before…