Snowflake Resource Provider

The Snowflake Resource Provider lets you manage Snowflake resources.

Installing

This package is available in many languages in the standard packaging formats.

Node.js (Java/TypeScript)

To use from JavaScript or TypeScript in Node.js, install using either npm:

$ npm install @pulumi/snowflake

or yarn:

$ yarn add @pulumi/snowflake

Python

To use from Python, install using pip:

$ pip install pulumi_snowflake

Go

To use from Go, use go get to grab the latest version of the library

$ go get github.com/pulumi/pulumi-snowflake/sdk

.NET

To use from .NET, install using dotnet add package:

$ dotnet add package Pulumi.Snowflake

Configuration

Note: For the complete and latest provider configuration options and descriptions, see the Snowflake provider configuration reference.

The following commonly used configuration points are available:

snowflake:account - (String) Specifies the Snowflake account identifier. Can be provided in the org-name format (e.g. "myorg-myaccount") or as an account locator (e.g. "xy12345"). Use as a fallback when accountName and organizationName are not set. If both accountName and organizationName are set, they take precedence. Requires the PROVIDER_CONFIGURATION_ACCOUNT_FALLBACK experiment to be enabled. Can also be sourced from the SNOWFLAKE_ACCOUNT environment variable.
snowflake:accountName - (String) Specifies your Snowflake account name assigned by Snowflake. For information about account identifiers, see the Snowflake documentation. Required unless using profile. Can also be sourced from the SNOWFLAKE_ACCOUNT_NAME environment variable.
snowflake:authenticator - (String) Specifies the authentication type to use when connecting to Snowflake. Valid options are: SNOWFLAKE | OAUTH | EXTERNALBROWSER | OKTA | SNOWFLAKE_JWT | TOKENACCESSOR | USERNAMEPASSWORDMFA | PROGRAMMATIC_ACCESS_TOKEN | OAUTH_CLIENT_CREDENTIALS | OAUTH_AUTHORIZATION_CODE | WORKLOAD_IDENTITY. Can also be sourced from the SNOWFLAKE_AUTHENTICATOR environment variable.
snowflake:oauthAuthorizationUrl - (String, Sensitive) Authorization URL of OAuth2 external IdP. See Snowflake OAuth documentation. Can also be sourced from the SNOWFLAKE_OAUTH_AUTHORIZATION_URL environment variable.
snowflake:oauthClientId - (String, Sensitive) Client id for OAuth2 external IdP. See Snowflake OAuth documentation. Can also be sourced from the SNOWFLAKE_OAUTH_CLIENT_ID environment variable.
snowflake:oauthClientSecret - (String, Sensitive) Client secret for OAuth2 external IdP. See Snowflake OAuth documentation. Can also be sourced from the SNOWFLAKE_OAUTH_CLIENT_SECRET environment variable.
snowflake:oauthRedirectUri - (String, Sensitive) Redirect URI registered in IdP. See Snowflake OAuth documentation. Can also be sourced from the SNOWFLAKE_OAUTH_REDIRECT_URI environment variable.
snowflake:oauthScope - (String) Comma separated list of scopes. If empty it is derived from role. See Snowflake OAuth documentation. Can also be sourced from the SNOWFLAKE_OAUTH_SCOPE environment variable.
snowflake:oauthTokenRequestUrl - (String, Sensitive) Token request URL of OAuth2 external IdP. See Snowflake OAuth documentation. Can also be sourced from the SNOWFLAKE_OAUTH_TOKEN_REQUEST_URL environment variable.
snowflake:organizationName - (String) Specifies your Snowflake organization name assigned by Snowflake. For information about account identifiers, see the Snowflake documentation. Required unless using profile. Can also be sourced from the SNOWFLAKE_ORGANIZATION_NAME environment variable.
snowflake:password - (String, Sensitive) Password for user + password or token for PAT auth. Cannot be used with privateKey and privateKeyPassphrase. Can also be sourced from the SNOWFLAKE_PASSWORD environment variable.
snowflake:privateKey - (String, Sensitive) Private Key for username+private-key auth. Cannot be used with password. Can also be sourced from the SNOWFLAKE_PRIVATE_KEY environment variable.
snowflake:privateKeyPassphrase - (String, Sensitive) Supports the encryption ciphers aes-128-cbc, aes-128-gcm, aes-192-cbc, aes-192-gcm, aes-256-cbc, aes-256-gcm, and des-ede3-cbc. Can also be sourced from the SNOWFLAKE_PRIVATE_KEY_PASSPHRASE environment variable.
snowflake:profile - (String) Sets the profile to read from ~/.snowflake/config file. Can also be sourced from the SNOWFLAKE_PROFILE environment variable.
snowflake:role - (String) Specifies the role to use by default for accessing Snowflake objects in the client session. Can also be sourced from the SNOWFLAKE_ROLE environment variable.
snowflake:token - (String, Sensitive) Token to use for OAuth and other forms of token based auth. When this field is set here, or in the TOML file, the provider sets the authenticator to OAUTH. Optionally, set the authenticator field to the authenticator you want to use. Can also be sourced from the SNOWFLAKE_TOKEN environment variable.
snowflake:user - (String) Username. Required unless using profile. Can also be sourced from the SNOWFLAKE_USER environment variable.
snowflake:warehouse - (String) Specifies the virtual warehouse to use by default for queries, loading, etc. in the client session. Can also be sourced from the SNOWFLAKE_WAREHOUSE environment variable.

Reference

For further information, please visit the Snowflake provider docs or for detailed reference documentation, please visit the API docs.

Metadata

Release files for pulumi-snowflake 2.22.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pulumi-snowflake 2.22.1
File	Size	Uploaded	Provenance	Actions
pulumi_snowflake-2.22.1.tar.gz	1.7 MB	Oct 27, 2026	Without provenance	Details for pulumi_snowflake-2.22.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for pulumi-snowflake 2.22.1
File	Interpreter	ABI	Platform	Actions Reset
pulumi_snowflake-2.22.1-py3-none-any.whl 1.9 MB Oct 27, 2026 Without provenance	Python 3	none	any	Details for pulumi_snowflake-2.22.1-py3-none-any.whl

Total release size: 3.6 MB

Release files / pulumi_snowflake-2.22.1.tar.gz

Download URL	pulumi_snowflake-2.22.1.tar.gz
Size	1.7 MB
Tags	Source
SHA-256 checksum How to use checksums	`cc20284b3d1bbdbaee8f6d11d10e1867853d31e9050d48926468735d4187280c`
BLAKE2b-256 checksum How to use checksums	`44697f2b38d6c5779b2875018f61e202904c6227a508859431e8ee8b9719aa4c`
Upload date	Oct 27, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.11.15`

Release files / pulumi_snowflake-2.22.1-py3-none-any.whl

Download URL	pulumi_snowflake-2.22.1-py3-none-any.whl
Size	1.9 MB
Tags	Python 3
SHA-256 checksum How to use checksums	`a90a1556c6ef5ff3cafd1a3313682da6a2e8e9e841ef723051466981cb5c9593`
BLAKE2b-256 checksum How to use checksums	`239085d1297551d611dabd373364af2fba0fa2c3c5968d447eaed67698ed95fb`
Upload date	Oct 27, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.11.15`

Security for pulumi-snowflake 2.22.1

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.