RSA Connection Setup Guide

1. Navigate to Revsure App and Click "Data Hub"

2. Click "Data Sources"

3. Click "Add New"

4. Click Snowflake among the list of Integrations

5. Set the "Connection Name" field.

6. Fill the "Custom URL" field.

7. Fill the "Warehouse" field.

8. Choose the "Private Key / Pair" field.

9. Give the "User Name"

10. From the .p8 file for Private Key of RSA, Copy paste to the "Private Key" field.

11. Set the "Private Key Passphrase" field.

12. Set the "User Role" field.

13. Click "Connect"

The connection is created!


Key Management Architecture

The Keys and Tokens Used for Authentication are stored with Revsure in a Secure Manner utilizing Google's Key Management System

• All keys and tokens are encrypted with Google Cloud KMS before being stored, ensuring plaintext values are never persisted.

• Multiple CryptoKeys are maintained for different services and use cases, enabling isolation, fine-grained access control, and independent rotation.

• Only ciphertext is stored in the database, making the data unreadable without authorized access to the correct KMS key.
  Security of Keys, Credentials and Tokens in RevSure

Note:  When you re-generate/rotate a Key Pair i.e. Private Key (.p8 file) and Public Key (.pub file).  The  new Public Key should be set in Snowflake against the user and the new Private key should be updated in Revsure App’s Snowflake Connection along with the passphrase.  

When the keys are updated in Revsure, Any active workflows in RevSure that are currently using the old keys will continue to run and complete.  For all new connections, the newly updated keys will be used.  You can unset the old keys in Snowflake after the active workflows are completed.

Snowflake Source Connection using RSA - Integration Architecture