Which of the following are characteristics of security in Snowflake?

Snowflake provides robust security features across all editions, with more advanced capabilities available in higher tiers. Periodic rekeying is an enhanced security feature that automatically creates new encryption keys and re-encrypts data on a periodic basis. This aligns with stringent internal and regulatory data security policies. According to Snowflake's official documentation, this feature is available starting with the Enterprise Edition, providing an additional layer of protection beyond the standard always-on encryption available in all editions.

A. Account and user authentication (e.g., username/password, MFA) are fundamental security features available in all Snowflake editions, not just Business Critical.
B. Features supporting stringent compliance standards like HIPAA are primarily available in the Business Critical edition, which is designed for highly sensitive data.
D. Private communication to Snowflake services, including internal stages, via AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect is a feature of the Business Critical edition, not Enterprise.

1. Snowflake Documentation: Editions

Reference for C: Under the "Enterprise" column, the feature "Periodic rekeying of data" is listed.

Reference for A: Under the "Standard" column, "Snowflake-managed credentials" and "Multi-factor authentication (MFA)" are listed, confirming authentication is available in all editions.

Reference for D: Under the "Business Critical" column, "Support for AWS PrivateLink, Azure Private Link, and Google Cloud Private Service Connect" is listed.

2. Snowflake Documentation: Encryption Key Management

Reference for C: In the section "Periodic Rekeying," it states, "For Enterprise Edition (and higher) customers, Snowflake automatically and periodically rekeys the data."

3. Snowflake Documentation: Business Critical Edition

Reference for B: This page details that the Business Critical Edition offers "enhanced security and data protection" and is designed for organizations with "the need for HIPAA... support."

Reference for D: This page confirms that support for private connectivity (e.g., AWS PrivateLink) is a key feature of the Business Critical Edition.