Encryption of data in transit on the Snowflake pla

Question

Is data encrypted while in transit on the Snowflake plaform? It's clear that via Snowflake End to End Encryption that data at rest is encrypted, but what about data on the move?

For example when data is being transferred from remote Snowflake disk (long term storage) to local cache (SSDs on compute nodes) - does the data remain encrypted during that transfer?

Another example would be when adding results sets to the Snowflake results cache (available to all Virtual Warehouses) - is the data encrypted while being added to the results cache?

Thanks.

Answer 1

Yes, the data is encrypted in transit. Snowflake works on the concept of END-TO-END ENCRYPTION where only the end-users view the data and nobody else would be able to view the data.

For example when data is being transferred from remote Snowflake disk (long term storage) to local cache (SSDs on compute nodes) - does the data remain encrypted during that transfer?

Yes, the data remains encrypted while in the transfer and the same is applicable when using result_cache as well.

Ref : https://www.snowflake.com/blog/end-to-end-encryption-in-the-snowflake-data-warehouse/

Answer 2

I believe this article covers the scenarios that you are asking about, specifically the results cache question. Everything within the Snowflake infrastructure is encrypted...(all the data, all the time): https://resources.snowflake.com/snowflake/automatic-encryption-of-data