# Snowflake: Critical incident: INC20000115

**Summary:** Snowflake reported a critical incident preventing some customers in listed AWS and Azure regions from logging in to Snowsight via private endpoints, with HTTP 404 or IP/Token access errors. It started at 2026-07-30 03:00 UTC and was resolved at 2026-07-30 04:56 UTC after reverting a recent configuration change. _(machine-written, sol)_
- Kind: Major incident · Label: outage (model (Jev))
- Changed: 2026-07-30 03:00 UTC · Detected: 2026-10-17 18:22 UTC
- [Source: https://stspg.io/2jfpk15p29pd](https://stspg.io/2jfpk15p29pd)
- [Company: Snowflake](https://rewindex.com/company/snowflake.md)
- Versions: before (none: first archived) → after incident\_version:164/0js22rxjm66q@bc46bce7c5e4
- Change 1 of 1 for this incident

## What changed

**1. Added: Title**

```diff
+ INC20000115
```

**2. Added: Impact**

```diff
+ critical
```

**3. Added: Status**

```diff
+ postmortem
```

**4. Added: Start time**

```diff
+ 2026-07-30 03:00 UTC
```

**5. Added: Resolved time**

```diff
+ 2026-07-30 04:56 UTC
```

**6. Added: Affected components**

```diff
+ Applications, AWS - Africa (Cape Town) - Applications, AWS - Asia Pacific (Jakarta) - Applications, AWS - Asia Pacific (Malaysia) - Applications, AWS - Asia Pacific (Mumbai) - Applications, AWS - Asia Pacific (New Zealand) - Applications, AWS - Asia Pacific (Osaka) - Applications, AWS - Asia Pacific (Seoul) - Applications, AWS - Asia Pacific (Singapore) - Applications, AWS - Asia Pacific (Sydney) - Applications, AWS - Asia Pacific (Thailand) - Applications, AWS - Asia Pacific (Tokyo) - Applications, AWS - Canada (Central) - Applications, AWS - Europe (Frankfurt) - Applications, AWS - Europe (London) - Applications, AWS - Europe (Paris) - Applications, AWS - Europe (Stockholm) - Applications, AWS - Europe (Zürich) - Applications, AWS - South America (São Paulo) - Applications, AWS - US East (Ohio) - Applications, AWS - US West (Oregon) - Applications, Azure - Australia East (New South Wales) - Applications, Azure - Canada Central (Toronto) - Applications, Azure - Central Korea (Seoul) - Applications, Azure - Central US (Iowa) - Applications, Azure - Japan East (Tokyo, Saitama) - Applications, Azure - Mexico (Central) - Applications, Azure - North Europe (Ireland) - Applications, Azure - South Central US (Texas) - Applications, Azure - Southeast Asia (Singapore) - Applications, Azure - Sweden Central (Gävle) - Applications, Azure - Switzerland North (Zürich) - Applications, Azure - UAE North (Dubai) - Applications
```

**7. Added: Update** (investigating) · 2026-07-30 03:00 UTC

```diff
+ Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 30 minutes. Customer experience: Customers hosted in the specified regions may be unable to log in to Snowsight. Affected users may encounter HTTP 404 errors or "Incoming request with IP/Token is not allowed to access Snowflake" errors when attempting to access Snowsight via private endpoints.
```

**8. Added: Update** (identified) · 2026-07-30 03:30 UTC

```diff
+ Current status: We've identified the source of the issue, and we're developing and implementing a fix to restore service. We'll provide another update within 30 minutes. Customer experience: Customers hosted in the specified regions may be unable to log in to Snowsight. Affected users may encounter HTTP 404 errors or "Incoming request with IP/Token is not allowed to access Snowflake" errors when attempting to access Snowsight via private endpoints. ETA: Our current estimate is that service will be restored within 1 hour. Workaround: There are currently no available workarounds for this issue.
```

**9. Added: Update** (monitoring) · 2026-07-30 04:17 UTC

```diff
+ Current status: We've reverted a recent configuration change and confirmed that service has been restored. We'll continue to monitor the environment until we're confident all services are functioning properly. Customer experience: Customers hosted in the specified regions may have been unable to log in to Snowsight. Affected users may have encountered HTTP 404 errors or "Incoming request with IP/Token is not allowed to access Snowflake" errors when attempting to access Snowsight via private endpoints. Workaround: There were no available workarounds for this issue. Incident start time: 00:18 UTC July 30, 2026 Incident end time: 03:52 UTC July 30, 2026 Preliminary root cause: A recent configuration change to a subset of the routing infrastructure caused connectivity failures for customers accessing Snowsight via private endpoints.
```

**10. Added: Update** (resolved) · 2026-07-30 04:56 UTC

```diff
+ Current status: We've monitored the environment and confirmed that reverting the configuration change restored service. If you experience additional issues or have questions, please open a support case via Snowflake Community or the Support page in Snowsight. Customer experience: Customers hosted in the specified regions may have been unable to log in to Snowsight. Affected users may have encountered HTTP 404 errors or "Incoming request with IP/Token is not allowed to access Snowflake" errors when attempting to access Snowsight via private endpoints. Workaround: There were no available workarounds for this issue. Incident start time: 00:18 UTC July 30, 2026 Incident end time: 03:52 UTC July 30, 2026 Preliminary root cause: A recent configuration change to a subset of the routing infrastructure caused connectivity failures for customers accessing Snowsight via private endpoints. A root cause analysis (RCA) will be conducted and a summary will be shared on the Snowflake status page within 5 business days.
```

**11. Added: Update** (postmortem) · 2026-08-10 04:31 UTC

```diff
+ Snowflake Engineering has completed the postmortem of this service incident. A detailed Root Cause Analysis \(RCA\) is available on the Snowflake Community site: [https://community.snowflake.com/s/article/INC20000115](https://community.snowflake.com/s/article/INC20000115)
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-07-30 03:00 UTC | Critical incident: INC20000115 (this change) | outage |

All Snowflake changes: [timeline](https://rewindex.com/company/snowflake/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/id2bdd76ce6f9f6 · Markdown: https://rewindex.com/change/id2bdd76ce6f9f6.md · JSON: https://rewindex.com/api/v1/changes/id2bdd76ce6f9f6 · Generated 2026-10-18T01:53:35.864Z