Snowflake - Go Fig Documentation

Guide to Connect Snowflake:

Create a dedicated read-only user for Go Fig. (Recommended)
Whitelist Go Fig’s IP address in your Snowflake network policy: 35.185.38.164
Collect the following details:

Snowflake account identifier from your login URL
Username and password with appropriate permissions
Warehouse name for queries
Database name (required)
Role (optional)

1) Create a read-only user (recommended)

Create a dedicated Go Fig user with a read-only role so Go Fig never has write access. The example below grants SELECT on a schema’s current and future tables:

CREATE ROLE GOFIG_ROLE;
GRANT USAGE ON WAREHOUSE COMPUTE_WH TO ROLE GOFIG_ROLE;
GRANT USAGE ON DATABASE MY_DATABASE TO ROLE GOFIG_ROLE;
GRANT USAGE ON SCHEMA MY_DATABASE.PUBLIC TO ROLE GOFIG_ROLE;
GRANT SELECT ON ALL TABLES IN SCHEMA MY_DATABASE.PUBLIC TO ROLE GOFIG_ROLE;
GRANT SELECT ON FUTURE TABLES IN SCHEMA MY_DATABASE.PUBLIC TO ROLE GOFIG_ROLE;

CREATE USER GOFIG_USER
  PASSWORD = 'StrongPassword123!'
  DEFAULT_ROLE = GOFIG_ROLE
  DEFAULT_WAREHOUSE = COMPUTE_WH;

GRANT ROLE GOFIG_ROLE TO USER GOFIG_USER;

Set a strong password and store it securely. Never use your admin credentials for the connection.

2) Whitelist Go Fig’s IP address

Add Go Fig’s IP to your Snowflake network policy so it can reach your warehouse:

CREATE NETWORK POLICY GOFIG_NETWORK_POLICY
  ALLOWED_IP_LIST = ('35.185.38.164/32');

ALTER USER GOFIG_USER SET NETWORK_POLICY = GOFIG_NETWORK_POLICY;

3) Connect Go Fig to Snowflake

Add Snowflake connection

Navigate to your Organization Data page and click Add data source. Select Snowflake from the list of database connections.

The Connect a new data source modal on the Database tab with the Snowflake connector tile highlighted.

Enter connection details

Fill in your Snowflake connection information:

Account: Your Snowflake account identifier (e.g., your-account.snowflakecomputing.com)
- Go Fig automatically removes the .snowflakecomputing.com suffix if included
Username: Your Snowflake username (will be converted to uppercase)
Password: Your Snowflake password
Warehouse: Virtual warehouse for queries (e.g., COMPUTE_WH)
- Must start with a letter or underscore; can contain letters, numbers, underscores, hyphens, and dollar signs
Database (Required): Database name to connect to
Role (Optional): Role to assume (e.g., GOFIG_ROLE)

The Snowflake connection form with Account, Username, Password, Database, Warehouse, and Role fields.

Connect to Snowflake

Click Connect to complete the setup. Go Fig will verify the connection, then encrypt and store your credentials securely.

Filter early in flows: Add filters at the start of your Flow to reduce data scanned and query time. Queries are limited to 90 seconds, so break complex queries into smaller steps if you hit the timeout.

Watching Go Fig’s usage on your warehouse

Every session Go Fig opens is tagged GoFig, so you can attribute our queries in Account Usage without inferring them from the username:

SELECT start_time, warehouse_name, total_elapsed_time, bytes_scanned, query_text
FROM SNOWFLAKE.ACCOUNT_USAGE.QUERY_HISTORY
WHERE QUERY_TAG = 'GoFig'
ORDER BY start_time DESC;

Pair the tag with the dedicated warehouse from step 1. Between them you can see exactly what Go Fig costs you, and put a resource monitor on that warehouse without affecting anything else in your account.

​1) Create a read-only user (recommended)

​2) Whitelist Go Fig’s IP address

​3) Connect Go Fig to Snowflake

​Watching Go Fig’s usage on your warehouse

1) Create a read-only user (recommended)

2) Whitelist Go Fig’s IP address

3) Connect Go Fig to Snowflake

Watching Go Fig’s usage on your warehouse