Network Connectivity Glossary
This page defines the terms used across Atlan's private connectivity guides, such as the AWS and Azure private network link guides for Snowflake.
| Term | What it means |
|---|---|
| Endpoint (private endpoint) | The "plug" - a private network address inside Atlan's network that forwards traffic to your Snowflake service. Atlan creates and owns it. |
| Endpoint service / Private Link service | The "socket" - the thing Snowflake exposes for private connections. Snowflake creates it when Private Link is enabled on your account. |
privatelink-vpce-id | The AWS name of the socket (VPCE = "VPC endpoint"). Only exists for AWS-hosted Snowflake. If your config output has no vpce-id, your Snowflake is on Azure - use the Azure guide. |
privatelink-pls-id | The Azure name of the socket (PLS = "Private Link service"). Only exists for Azure-hosted Snowflake. |
| Resource ID | Azure's full path-like name for any object (starts /subscriptions/…). Atlan sends you the Resource ID of the endpoint it created so you can approve exactly that one. |
| Azure token | A short-lived proof-of-identity string Atlan generates alongside the endpoint. Snowflake requires it in the approval command so only the endpoint's real owner can be authorized. It expires - if approval fails with a token error, ask Atlan support for a fresh one. |
| OCSP URL | The address used to check that TLS certificates haven't been revoked. It must also resolve over the private path, which is why the guides collect it. You never configure it yourself - Atlan does. |
| Regionless vs regional URL | Snowflake accounts have two hostname styles (org-account.privatelink… vs account.region.privatelink…). Share both if present; Atlan tells you which to use in the crawler. |
| Network policy / network rule | Snowflake's firewall: a list of IPs, CIDR ranges, or endpoint IDs allowed to connect. If you use one, it needs an Atlan entry - see the private network link guides. |
| NAT IP | The fixed public IP address your Atlan tenant's outbound traffic appears from when not using a private link. |
| CIDR range | Shorthand for a block of IP addresses, for example 10.20.0.0/17 = all addresses from 10.20.0.0 to 10.20.127.255. Allowlist the whole published block - a partial range causes intermittent failures. |