snow-utils-networks

You can automate Snowflake IP allowlisting by creating and managing network rules for sources like local IP, GitHub Actions, Google IPs, and custom CIDRs. This skill enforces interactive, privilege-aware operations to prevent unsafe network policy changes.

Managing Snowflake network rules is best handled through manifest-driven workflows. A central manifest at .snow-utils/snow-utils-manifest.md enables you to create, replay, audit, and clean up network policies idempotently across schemas and accounts.

Yes, you need the Snowflake CLI and the snow-utils-common library to create network policies. The skill relies on these dependencies to execute privilege-aware operations and attach network rules that enforce allowlists for users and services.

To recover from IP changes, you can replay the network configuration from your central manifest. Using the replay workflow recreates the necessary network rules and policies from the stored manifest, restoring access without manual reconfiguration.

Yes, you can create and manage Snowflake network rules for INGRESS, EGRESS, and other modes. The skill supports IP allowlisting for various sources and attaches network policies that reference these rules to enforce traffic allowlists.

The manifest-driven workflow requires interactive, privilege-aware execution to prevent unsafe changes, meaning it cannot run fully autonomously in non-interactive CI environments without proper privilege escalation and manifest initialization.