1. Help Center
  2. Getting Started
  3. Account & Security

Maintaining Snowplow-Managed Infrastructure

Account & Security
Mariia Khusainova  
Edited

Maintaining the integrity of your Snowplow-managed infrastructure is crucial for ensuring uninterrupted service and optimal performance.

Why This Matters

Modifications to Snowplow-managed infrastructure, such as changes to resource configurations, access permissions, or deletion of deployed components, can result in pipeline downtime, data collection interruptions, delayed incident response, and compromised SLA performance.

To help avoid these risks, it’s critical that your Snowplow-managed infrastructure remains configured as intended and that access permissions remain intact.

Verify Your Infrastructure

To ensure smooth operations, please confirm the following:

Access Permissions Are Maintained

  • AWS: Cross-account IAM roles and permissions boundaries allow Snowplow access. For standard permissions, refer to the JSON policy document. If stricter access control is required, we recommend using a Permission Boundary, which meets the minimum requirements.
  • GCP: techops-cloud-admin@snowplowanalytics.com retains required service account permissions. For more details, refer to the GCP required permissions guide.
  • Azure: Snowplow service principals maintain necessary subscription permissions. For more information, see the Azure required permissions guide.

Snowplow-Deployed Infrastructure Remains Unchanged

  • No modifications have been made to Snowplow-managed cloud resources (compute, storage, networking).
  • No Snowplow-deployed components have been deleted.
  • CDN/WAF configurations remain accessible to Snowplow endpoints.
  • Cloud storage policies set by Snowplow have not been altered.

Our Shared Responsibility

Under our shared responsibility model, Snowplow manages your pipeline infrastructure, while you maintain the access and environment required for us to operate effectively. If you need to make changes to your infrastructure, please coordinate with our team to ensure these changes are implemented safely and without disruption.

Need Assistance?

If you have any questions about what Snowplow manages or need to make changes to your cloud infrastructure, please contact our support team. We're here to help ensure changes are implemented safely without disrupting your data pipelines.

For complete details about our shared responsibility model, visit: https://docs.snowplow.io/shared-responsibility-model/