Client Considerations

Snowflake clients (SnowSQL, JDBC driver, ODBC driver, etc.) allow you to access data in Snowflake by connecting directly through the client, or by developing programs in programming languages such as Python and JavaScript.

This topic describes information common across all clients, such as limits and configuration information.

In this Topic:

Limits on Query Text Size

Snowflake limits the size of query text (i.e. SQL statements) submitted through Snowflake clients to 1MB per statement.

This limit includes any literals, such as string literals or binary literals, that are part of the statement, whether as part of a WHERE clause, SET clause (in an UPDATE statement), etc.

If multiple SQL statements are combined into a single string (separated by semicolons), the length limit applies to the entire string, not to individual statements within the string.

Some Snowflake data types support data longer than 1 MB (e.g. VARCHAR supports up to 16 MB). To load data that exceeds the 1MB limit, load from data files as described in Data Loading.

Hostname Whitelisting

All Snowflake clients (SnowSQL, JDBC driver, ODBC driver, etc.) require temporary access to cloud storage (AWS S3 or Azure Blob Storage), as well as other web-based hosts, to perform various runtime operations. To ensure access, particularly in a secure/private network (e.g. AWS PrivateLink-enabled network), you must whitelist the hostnames for the required hosts.

The hostnames that need to be whitelisted depend on your cloud platform (AWS or Azure) and the region where your Snowflake account is located. The following sections list the hostname patterns to whitelist per cloud and region.

If you wish to whitelist specific hostnames (instead of patterns), please contact Snowflake Support for the complete list of hostnames used by your Snowflake account.

Snowflake on Amazon AWS

Regions Hostnames Notes
Used for temporary cloud storage in:    
All AWS regions
sfc-*-stage.s3.amazonaws.com:443  
All AWS regions, except US East
sfc-*-stage.s3-region.amazonaws.com:443 . sfc-*-stage.s3.region.amazonaws.com:443 Note the hyphen (-) and period (.) in front of the region segment.
Used for SnowSQL auto-upgrade in:    
All AWS regions
sfc-snowsql-updates.s3.us-west-2.amazonaws.com:443  
Used for OCSP validation in:    
All AWS regions
ocsp.snowflakecomputing.com:80 . *.ss2.us:80 . *.amazontrust.com:80 . *.digicert.com:80  
AWS US West only
*.netsolssl.com:80 . *.usertrust.com:80  

For more details about OCSP, see the documentation for each client.

Snowflake on Microsoft Azure

Regions Hostnames Notes
Used for temporary cloud storage in:    
All Azure regions
*.blob.core.windows.net:443  
Used for SnowSQL auto-upgrade in:    
All Azure regions
sfc-snowsql-updates.s3.us-west-2.amazonaws.com:443 Regardless of the cloud platform, SnowSQL auto-upgrade requires access to this S3 host.
Used for OCSP validation in:    
All Azure regions
ocsp.snowflakecomputing.com:80 . *.digicert.com:80 . *.msocsp.com:80  

For more details about OCSP, see the documentation for each client.