GBQ Datatransfer. Is it possible to create a dedicated IP for a datatransfer?

[Anka]

Hi! We are testing the Salesforce DataTransfer Connector to GBQ. 

We created the app in the Salesforce Sandbox and tested the connection, which worked well. However, using the app's credentials, anyone could potentially access the data, so we want to add an extra layer of security by limiting the Salesforce app to specific IPs.

Is it possible to assign a limited range of Google IPs for use with this specific data transfer in GBQ?

[caryna]

Hi @Anka,

Welcome to Google Cloud Community!

From my understanding, although the connection between Salesforce and BigQuery is working, you want to enhance data security by allowing access to the Salesforce app only from a certain IP address.

At present, this feature is not supported. I recommend considering the implementation of VPC Service Controls to prevent unauthorized access, block data exfiltration and secure service interactions. For further details and insights, you may refer to this documentation.

Alternatively, you could submit a feature request that will allow users to specify and whitelist IP addresses for secure data transfer. I can't give a timeline for when this will be implemented, but I suggest checking the release notes and the tracker for the latest updates.

I hope the above information is helpful.