Configure private connectivity for the Snowflake Open Catalog UI¶

This topic describes how to configure private connectivity for the Snowflake Open Catalog UI. This configuration, combined with configuring private connectivity for your Open Catalog account, allows you to access the Open Catalog UI through private connectivity instead of over the public internet. For more information, see the prerequisites for configuring private connectivity for the Snowflake Open Catalog UI.

Configuring private connectivity for the UI is similar to configuring it for your Open Catalog account. However, when you configure it for the UI, you need to configure additional DNS entries because the UI is hosted under a different domain, compared to your account.

Prerequisites¶

Before you configure private connectivity for the Open Catalog UI, you must set up inbound private connectivity for your Open Catalog account. If you don’t, you won’t be able to use the UI.

To set up inbound private connectivity for your Open Catalog account, follow the guide specific to the cloud platform that hosts your Open Catalog account:
- AWS
- Azure

Step 1: Retrieve your PrivateLink URLs¶

In this procedure, you retrieve PrivateLink URLs, which you use to configure private connectivity.

Sign in to Snowflake Open Catalog.
In the navigation menu, select Settings.
On the Settings page, copy the values for the following settings into a text editor:
- PrivateLink Account URL
- Regionless PrivateLink Account URL
- Regionless Snowsight PrivateLink URL
- Snowsight PrivateLink URL
For descriptions of each setting, see Return values for the SYSTEM$GET_PRIVATELINK_CONFIG system function in the Snowflake documentation. In this topic, the names of the account settings are in JSON format.
Note
- Remember that the description refers to a Snowflake account, but your value is actually for your Snowflake Open Catalog account. For example, the privatelink-account-url is the URL for your Snowflake Open Catalog account.
- You need the Regionless Snowsight PrivateLink URL and Snowsight PrivateLink URL settings because if an Open Catalog user navigates to the Regionless Account URL, the user is redirected to Snowsight.
- Optional: To retrieve these values in JSON format, Create a Snowflake CLI connection for Open Catalog, and then call the SYSTEM$GET_PRIVATELINK_CONFIG system function.

Step 2: Confirm your settings¶

To use private connectivity with the Open Catalog UI, configure your DNS, and ensure that firewalls allow access to the relevant values:

Confirm that your DNS settings can resolve the values.
To confirm that you can connect to Open Catalog from your browser, use each of the PrivateLink URLs.
Optional: To use the account name URL (the value for Regionless PrivateLink Account URL) as your primary URL to access Open Catalog, contact Snowflake Support, and request that all URL redirects point to the URL specified by Regionless PrivateLink Account URL.