Granted Patent B2

US 12,712,850 · App. 18/958,641 · Granted Aug 18, 2026

Inventors: Khondokar Sami Iqram (Burlingame, CA); Laxman Mamidi (Redwood City, CA); Sanjay Srivastava (Mountain View, CA); Chieh-Sheng Wang (San Mateo, CA); Di Wu (Newark, CA)

Assignee: Snowflake Inc.

H04L63/0263G06F21/6218H04L63/0272H04L63/083

Abstract

Claims (64)

1 . A method comprising:

generating, by a provider in a virtual private cloud (VPC) deployment, a listing of data for sharing with a consumer in a public multi-tenant deployment;

creating a public account in the public multi-tenant deployment;

transmitting, to the consumer in the public multi-tenant deployment, a link associated with the listing;

receiving, from the consumer, a selection of the link; and

in response to the selection of the link:

automatically creating, by at least one hardware processor, a secure shared area in the VPC deployment;

replicating, into the secure shared area, a database associated with the listing as a database replica;

replicating, into the secure shared area, a share object associated with the listing as a share object replica;

sharing, with the consumer in the public multi-tenant deployment, the database replica and the share object replica as data share objects;

enabling the consumer to launch the data share objects in a consumer mounted database; and

enabling the consumer to perform database operations on provider data within the VPC deployment.

2 . The method of claim 1 , wherein the VPC deployment is in a first region, the first region being designated as a private region and the public multi-tenant deployment is in a second region, the second region being designated as a public multi-tenant region.

3 . The method of claim 2 , wherein the first region and the second region are physically isolated regions.

4 . The method of claim 1 , further comprising:

disabling a firewall policy that restricts data traffic between the VPC deployment and the public multi-tenant deployment based on an established trust relationship, the disabling the firewall policy being contingent on a location of the consumer being within an approved geographic region, and wherein the disabling the firewall policy comprises:

employing rules for selectively restricting the data traffic based on the approved geographic region.

5 . The method of claim 1 , wherein the listing comprises metadata describing the share object.

6 . The method of claim 1 , further comprising:

synchronizing metadata associated with the provider into the VPC deployment.

7 . The method of claim 6 , wherein the metadata comprises at least one of organization data, account data, billing contacts, billing entities, connection data, data exchange profiles, listing VPC data platform targets, replication groups, global shares, or global databases.

8 . A system comprising:

one or more hardware processors of a machine; and

at least one memory storing instructions that, when executed by the one or more hardware processors, cause the system to perform operations comprising:

generating, by a provider in a virtual private cloud (VPC) deployment, a listing of data for sharing with a consumer in a public multi-tenant deployment;

creating a public account in the public multi-tenant deployment;

transmitting, to the consumer in the public multi-tenant deployment, a link associated with the listing;

receiving, from the consumer, a selection of the link; and

in response to the selection of the link:

automatically creating a secure shared area in the VPC deployment;

replicating, into the secure shared area, a database associated with the listing as a database replica;

replicating, into the secure shared area, a share object associated with the listing as a share object replica;

sharing, with the consumer in the public multi-tenant deployment, the database replica and the share object replica as data share objects;

enabling the consumer to launch the data share objects in a consumer mounted database; and

enabling the consumer to perform database operations on provider data within the VPC deployment.

9 . The system of claim 8 , wherein the VPC deployment is in a first region, the first region being designated as a private region and the public multi-tenant deployment is in a second region, the second region being designated as a public multi-tenant region.

10 . The system of claim 9 , wherein the first region and the second region are physically isolated regions.

11 . The system of claim 8 , wherein the operations further comprise:

disabling a firewall policy that restricts data traffic between the VPC deployment and the public multi-tenant deployment based on an established trust relationship, the disabling the firewall policy being contingent on a location of the consumer being within an approved geographic region, and wherein the disabling the firewall policy comprises:

employing rules for selectively restricting the data traffic based on the approved geographic region.

12 . The system of claim 8 , wherein the listing comprises metadata describing the share object.

13 . The system of claim 8 , wherein the operations further comprise:

synchronizing metadata associated with the provider into the VPC deployment.

14 . The system of claim 13 , wherein the metadata comprises at least one of organization data, account data, billing contacts, billing entities, connection data, data exchange profiles, listing VPC data platform targets, replication groups, global shares, or global databases.

15 . A machine-storage medium embodying instructions that, when executed by a machine, cause the machine to perform operations comprising:

generating, by a provider in a virtual private cloud (VPC) deployment, a listing of data for sharing with a consumer in a public multi-tenant deployment;

creating a public account in the public multi-tenant deployment;

transmitting, to the consumer in the public multi-tenant deployment, a link associated with the listing;

receiving, from the consumer, a selection of the link; and

in response to the selection of the link:

automatically creating a secure shared area in the VPC deployment;

replicating, into the secure shared area, a database associated with the listing as a database replica;

replicating, into the secure shared area, a share object associated with the listing as a share object replica;

sharing, with the consumer in the public multi-tenant deployment, the database replica and the share object replica as data share objects;

enabling the consumer to launch the data share objects in a consumer mounted database; and

enabling the consumer to perform database operations on provider data within the VPC deployment.

16 . The machine-storage medium of claim 15 , wherein the VPC deployment is in a first region, the first region being designated as a private region and the public multi-tenant deployment is in a second region, the second region being designated as a public multi-tenant region.

17 . The machine-storage medium of claim 16 , wherein the first region and the second region are physically isolated regions.

18 . The machine-storage medium of claim 15 , wherein the operations further comprise:

disabling a firewall policy that restricts data traffic between the VPC deployment and the public multi-tenant deployment based on an established trust relationship, the disabling the firewall policy being contingent on a location of the consumer being within an approved geographic region, and wherein the disabling the firewall policy comprises:

employing rules for selectively restricting the data traffic based on the approved geographic region.

19 . The machine-storage medium of claim 15 , wherein the listing comprises metadata describing the share object.

20 . The machine-storage medium of claim 15 , wherein the operations further comprise:

synchronizing metadata associated with the provider into the VPC deployment.

Assignments (1)

Continuity (4)

References Cited (59)