Programmatic notifications for Snowflake Trust Center findings

Use cases

Imagine you need to monitor security violations detected by the Trust Center without manually checking Snowsight or email inboxes.

• Forward security alerts automatically to webhooks and message queues.
• Validate message delivery before executing a real scan using test notifications.
• Filter alerts based on specific severity thresholds.

How to use

Configure the notification integration for your target service and link it to the Trust Center scanner.

CREATE OR REPLACE NOTIFICATION INTEGRATION test_pagerduty_int
  TYPE = WEBHOOK
  ENABLED = TRUE
  WEBHOOK_URL = 'https://events.pagerduty.com/v2/enqueue'
  WEBHOOK_SECRET = test_db.test_schema.integration_key
  WEBHOOK_BODY_TEMPLATE = '{
    "routing_key": "SNOWFLAKE_WEBHOOK_SECRET",
    "event_action": "trigger",
    "payload": {
        "summary": "Snowflake Trust Center Scanner Finding",
        "source": "Snowflake",
        "severity": "critical",
        "custom_details": SNOWFLAKE_WEBHOOK_MESSAGE
    }
  }'
  WEBHOOK_HEADERS = ('Content-Type'='application/json');

What happens in this code:

1. Creates a webhook notification integration pointing to the PagerDuty endpoint.
2. Associates a secret key for authentication.
3. Defines the message body template including the payload generated by Snowflake.

CALL SNOWFLAKE.TRUST_CENTER.SEND_TEST_NOTIFICATION_INTEGRATION(
  'CIS_BENCHMARKS',
  'TEST_PAGERDUTY_INT'
);

What happens in this code:

1. Triggers a simulated test notification for the specified scanner package.
2. Allows you to validate if the destination receives the alert without waiting for a real scan.

What it returns

Field	Description
status	Returns 'SUCCESS' or 'FAILURE' depending on the test notification delivery.
message	Descriptive message of the operation result.
error_message	Error details if the delivery fails.

Limitations and requirements

• Public Preview feature available to all accounts.
• Supports outbound notification integrations only.
• Requires USAGE privileges on the integration and additional grants if using secrets.