Case Study: Snowflake achieves secretless, policy-based workload access with Aembit

Snowflake Uses Aembit to Secure Workload Access

Snowflake faced the challenge of managing insecure and inefficient workload-to-workload access. Their previous method relied on manual provisioning of long-lived credentials, leading to significant secrets sprawl, a high maintenance burden for security teams, and an increased security risk. To address this, they partnered with Aembit to implement its Workload IAM solution.

By deploying Aembit as a workload identity broker, Snowflake transitioned to a secretless, identity-based access model. The Aembit platform automated credential issuance and rotation, enforced conditional access policies, and provided a full audit trail. This solution enhanced security by eliminating 85% of credential management work and is estimated to save the company the equivalent of two full-time employees (FTEs) in administrative effort.

Snowflake

Cameron Tekiyeh

Sr. Manager, Global Security Analytics