published on Wednesday, Jul 8, 2026 by Pulumi
published on Wednesday, Jul 8, 2026 by Pulumi
Caution: Preview Feature This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to
previewFeaturesEnabledfield in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.
Resource used to manage API integration for git HTTPS API via a private link endpoint. For more information, check api integration documentation.
Example Usage
Note Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.
import * as pulumi from "@pulumi/pulumi";
import * as snowflake from "@pulumi/snowflake";
// basic resource - no authentication secrets (none allowed)
const basic = new snowflake.ApiIntegrationGitRepositoryPrivateLink("basic", {
name: "git_repository_private_link_integration",
usePrivatelinkEndpoint: true,
noAllowedAuthenticationSecrets: true,
apiAllowedPrefixes: ["https://github.example.internal/my-org/"],
enabled: true,
});
// with specific allowed secrets
const withSecrets = new snowflake.ApiIntegrationGitRepositoryPrivateLink("with_secrets", {
name: "git_repository_private_link_integration_secrets",
usePrivatelinkEndpoint: true,
allowedAuthenticationSecrets: ["my_db.my_schema.my_secret"],
apiAllowedPrefixes: ["https://github.example.internal/my-org/"],
enabled: true,
});
// complete resource - all secrets allowed, with TLS certificates
const complete = new snowflake.ApiIntegrationGitRepositoryPrivateLink("complete", {
name: "git_repository_private_link_integration_complete",
usePrivatelinkEndpoint: true,
allAllowedAuthenticationSecrets: true,
tlsTrustedCertificates: ["my_db.my_schema.my_cert_secret"],
apiAllowedPrefixes: ["https://github.example.internal/my-org/"],
apiBlockedPrefixes: ["https://github.example.internal/my-org/private-repo/"],
enabled: true,
comment: "Example Git Repository Private Link integration",
});
import pulumi
import pulumi_snowflake as snowflake
# basic resource - no authentication secrets (none allowed)
basic = snowflake.ApiIntegrationGitRepositoryPrivateLink("basic",
name="git_repository_private_link_integration",
use_privatelink_endpoint=True,
no_allowed_authentication_secrets=True,
api_allowed_prefixes=["https://github.example.internal/my-org/"],
enabled=True)
# with specific allowed secrets
with_secrets = snowflake.ApiIntegrationGitRepositoryPrivateLink("with_secrets",
name="git_repository_private_link_integration_secrets",
use_privatelink_endpoint=True,
allowed_authentication_secrets=["my_db.my_schema.my_secret"],
api_allowed_prefixes=["https://github.example.internal/my-org/"],
enabled=True)
# complete resource - all secrets allowed, with TLS certificates
complete = snowflake.ApiIntegrationGitRepositoryPrivateLink("complete",
name="git_repository_private_link_integration_complete",
use_privatelink_endpoint=True,
all_allowed_authentication_secrets=True,
tls_trusted_certificates=["my_db.my_schema.my_cert_secret"],
api_allowed_prefixes=["https://github.example.internal/my-org/"],
api_blocked_prefixes=["https://github.example.internal/my-org/private-repo/"],
enabled=True,
comment="Example Git Repository Private Link integration")
package main
import (
"github.com/pulumi/pulumi-snowflake/sdk/v2/go/snowflake"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
// basic resource - no authentication secrets (none allowed)
_, err := snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "basic", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
Name: pulumi.String("git_repository_private_link_integration"),
UsePrivatelinkEndpoint: pulumi.Bool(true),
NoAllowedAuthenticationSecrets: pulumi.Bool(true),
ApiAllowedPrefixes: pulumi.StringArray{
pulumi.String("https://github.example.internal/my-org/"),
},
Enabled: pulumi.Bool(true),
})
if err != nil {
return err
}
// with specific allowed secrets
_, err = snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "with_secrets", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
Name: pulumi.String("git_repository_private_link_integration_secrets"),
UsePrivatelinkEndpoint: pulumi.Bool(true),
AllowedAuthenticationSecrets: pulumi.StringArray{
pulumi.String("my_db.my_schema.my_secret"),
},
ApiAllowedPrefixes: pulumi.StringArray{
pulumi.String("https://github.example.internal/my-org/"),
},
Enabled: pulumi.Bool(true),
})
if err != nil {
return err
}
// complete resource - all secrets allowed, with TLS certificates
_, err = snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "complete", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
Name: pulumi.String("git_repository_private_link_integration_complete"),
UsePrivatelinkEndpoint: pulumi.Bool(true),
AllAllowedAuthenticationSecrets: pulumi.Bool(true),
TlsTrustedCertificates: pulumi.StringArray{
pulumi.String("my_db.my_schema.my_cert_secret"),
},
ApiAllowedPrefixes: pulumi.StringArray{
pulumi.String("https://github.example.internal/my-org/"),
},
ApiBlockedPrefixes: pulumi.StringArray{
pulumi.String("https://github.example.internal/my-org/private-repo/"),
},
Enabled: pulumi.Bool(true),
Comment: pulumi.String("Example Git Repository Private Link integration"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Snowflake = Pulumi.Snowflake;
return await Deployment.RunAsync(() =>
{
// basic resource - no authentication secrets (none allowed)
var basic = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("basic", new()
{
Name = "git_repository_private_link_integration",
UsePrivatelinkEndpoint = true,
NoAllowedAuthenticationSecrets = true,
ApiAllowedPrefixes = new[]
{
"https://github.example.internal/my-org/",
},
Enabled = true,
});
// with specific allowed secrets
var withSecrets = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("with_secrets", new()
{
Name = "git_repository_private_link_integration_secrets",
UsePrivatelinkEndpoint = true,
AllowedAuthenticationSecrets = new[]
{
"my_db.my_schema.my_secret",
},
ApiAllowedPrefixes = new[]
{
"https://github.example.internal/my-org/",
},
Enabled = true,
});
// complete resource - all secrets allowed, with TLS certificates
var complete = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("complete", new()
{
Name = "git_repository_private_link_integration_complete",
UsePrivatelinkEndpoint = true,
AllAllowedAuthenticationSecrets = true,
TlsTrustedCertificates = new[]
{
"my_db.my_schema.my_cert_secret",
},
ApiAllowedPrefixes = new[]
{
"https://github.example.internal/my-org/",
},
ApiBlockedPrefixes = new[]
{
"https://github.example.internal/my-org/private-repo/",
},
Enabled = true,
Comment = "Example Git Repository Private Link integration",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.snowflake.ApiIntegrationGitRepositoryPrivateLink;
import com.pulumi.snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
// basic resource - no authentication secrets (none allowed)
var basic = new ApiIntegrationGitRepositoryPrivateLink("basic", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
.name("git_repository_private_link_integration")
.usePrivatelinkEndpoint(true)
.noAllowedAuthenticationSecrets(true)
.apiAllowedPrefixes("https://github.example.internal/my-org/")
.enabled(true)
.build());
// with specific allowed secrets
var withSecrets = new ApiIntegrationGitRepositoryPrivateLink("withSecrets", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
.name("git_repository_private_link_integration_secrets")
.usePrivatelinkEndpoint(true)
.allowedAuthenticationSecrets("my_db.my_schema.my_secret")
.apiAllowedPrefixes("https://github.example.internal/my-org/")
.enabled(true)
.build());
// complete resource - all secrets allowed, with TLS certificates
var complete = new ApiIntegrationGitRepositoryPrivateLink("complete", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
.name("git_repository_private_link_integration_complete")
.usePrivatelinkEndpoint(true)
.allAllowedAuthenticationSecrets(true)
.tlsTrustedCertificates("my_db.my_schema.my_cert_secret")
.apiAllowedPrefixes("https://github.example.internal/my-org/")
.apiBlockedPrefixes("https://github.example.internal/my-org/private-repo/")
.enabled(true)
.comment("Example Git Repository Private Link integration")
.build());
}
}
resources:
# basic resource - no authentication secrets (none allowed)
basic:
type: snowflake:ApiIntegrationGitRepositoryPrivateLink
properties:
name: git_repository_private_link_integration
usePrivatelinkEndpoint: true
noAllowedAuthenticationSecrets: true
apiAllowedPrefixes:
- https://github.example.internal/my-org/
enabled: true
# with specific allowed secrets
withSecrets:
type: snowflake:ApiIntegrationGitRepositoryPrivateLink
name: with_secrets
properties:
name: git_repository_private_link_integration_secrets
usePrivatelinkEndpoint: true
allowedAuthenticationSecrets:
- my_db.my_schema.my_secret
apiAllowedPrefixes:
- https://github.example.internal/my-org/
enabled: true
# complete resource - all secrets allowed, with TLS certificates
complete:
type: snowflake:ApiIntegrationGitRepositoryPrivateLink
properties:
name: git_repository_private_link_integration_complete
usePrivatelinkEndpoint: true
allAllowedAuthenticationSecrets: true
tlsTrustedCertificates:
- my_db.my_schema.my_cert_secret
apiAllowedPrefixes:
- https://github.example.internal/my-org/
apiBlockedPrefixes:
- https://github.example.internal/my-org/private-repo/
enabled: true
comment: Example Git Repository Private Link integration
pulumi {
required_providers {
snowflake = {
source = "pulumi/snowflake"
}
}
}
# basic resource - no authentication secrets (none allowed)
resource "snowflake_apiintegrationgitrepositoryprivatelink" "basic" {
name = "git_repository_private_link_integration"
use_privatelink_endpoint = true
no_allowed_authentication_secrets = true
api_allowed_prefixes = ["https://github.example.internal/my-org/"]
enabled = true
}
# with specific allowed secrets
resource "snowflake_apiintegrationgitrepositoryprivatelink" "with_secrets" {
name = "git_repository_private_link_integration_secrets"
use_privatelink_endpoint = true
allowed_authentication_secrets = ["my_db.my_schema.my_secret"]
api_allowed_prefixes = ["https://github.example.internal/my-org/"]
enabled = true
}
# complete resource - all secrets allowed, with TLS certificates
resource "snowflake_apiintegrationgitrepositoryprivatelink" "complete" {
name = "git_repository_private_link_integration_complete"
use_privatelink_endpoint = true
all_allowed_authentication_secrets = true
tls_trusted_certificates = ["my_db.my_schema.my_cert_secret"]
api_allowed_prefixes = ["https://github.example.internal/my-org/"]
api_blocked_prefixes = ["https://github.example.internal/my-org/private-repo/"]
enabled = true
comment = "Example Git Repository Private Link integration"
}
Note If a field has a default value, it is shown next to the type in the schema.
Create ApiIntegrationGitRepositoryPrivateLink Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ApiIntegrationGitRepositoryPrivateLink(name: string, args: ApiIntegrationGitRepositoryPrivateLinkArgs, opts?: CustomResourceOptions);@overload
def ApiIntegrationGitRepositoryPrivateLink(resource_name: str,
args: ApiIntegrationGitRepositoryPrivateLinkArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ApiIntegrationGitRepositoryPrivateLink(resource_name: str,
opts: Optional[ResourceOptions] = None,
api_allowed_prefixes: Optional[Sequence[str]] = None,
enabled: Optional[bool] = None,
use_privatelink_endpoint: Optional[bool] = None,
all_allowed_authentication_secrets: Optional[bool] = None,
allowed_authentication_secrets: Optional[Sequence[str]] = None,
api_blocked_prefixes: Optional[Sequence[str]] = None,
comment: Optional[str] = None,
name: Optional[str] = None,
no_allowed_authentication_secrets: Optional[bool] = None,
tls_trusted_certificates: Optional[Sequence[str]] = None)func NewApiIntegrationGitRepositoryPrivateLink(ctx *Context, name string, args ApiIntegrationGitRepositoryPrivateLinkArgs, opts ...ResourceOption) (*ApiIntegrationGitRepositoryPrivateLink, error)public ApiIntegrationGitRepositoryPrivateLink(string name, ApiIntegrationGitRepositoryPrivateLinkArgs args, CustomResourceOptions? opts = null)
public ApiIntegrationGitRepositoryPrivateLink(String name, ApiIntegrationGitRepositoryPrivateLinkArgs args)
public ApiIntegrationGitRepositoryPrivateLink(String name, ApiIntegrationGitRepositoryPrivateLinkArgs args, CustomResourceOptions options)
type: snowflake:ApiIntegrationGitRepositoryPrivateLink
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "snowflake_apiintegrationgitrepositoryprivatelink" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args ApiIntegrationGitRepositoryPrivateLinkArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ApiIntegrationGitRepositoryPrivateLinkArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ApiIntegrationGitRepositoryPrivateLinkArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ApiIntegrationGitRepositoryPrivateLinkArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ApiIntegrationGitRepositoryPrivateLinkArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var apiIntegrationGitRepositoryPrivateLinkResource = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource", new()
{
ApiAllowedPrefixes = new[]
{
"string",
},
Enabled = false,
UsePrivatelinkEndpoint = false,
AllAllowedAuthenticationSecrets = false,
AllowedAuthenticationSecrets = new[]
{
"string",
},
ApiBlockedPrefixes = new[]
{
"string",
},
Comment = "string",
Name = "string",
NoAllowedAuthenticationSecrets = false,
TlsTrustedCertificates = new[]
{
"string",
},
});
example, err := snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "apiIntegrationGitRepositoryPrivateLinkResource", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
ApiAllowedPrefixes: pulumi.StringArray{
pulumi.String("string"),
},
Enabled: pulumi.Bool(false),
UsePrivatelinkEndpoint: pulumi.Bool(false),
AllAllowedAuthenticationSecrets: pulumi.Bool(false),
AllowedAuthenticationSecrets: pulumi.StringArray{
pulumi.String("string"),
},
ApiBlockedPrefixes: pulumi.StringArray{
pulumi.String("string"),
},
Comment: pulumi.String("string"),
Name: pulumi.String("string"),
NoAllowedAuthenticationSecrets: pulumi.Bool(false),
TlsTrustedCertificates: pulumi.StringArray{
pulumi.String("string"),
},
})
resource "snowflake_apiintegrationgitrepositoryprivatelink" "apiIntegrationGitRepositoryPrivateLinkResource" {
api_allowed_prefixes = ["string"]
enabled = false
use_privatelink_endpoint = false
all_allowed_authentication_secrets = false
allowed_authentication_secrets = ["string"]
api_blocked_prefixes = ["string"]
comment = "string"
name = "string"
no_allowed_authentication_secrets = false
tls_trusted_certificates = ["string"]
}
var apiIntegrationGitRepositoryPrivateLinkResource = new ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
.apiAllowedPrefixes("string")
.enabled(false)
.usePrivatelinkEndpoint(false)
.allAllowedAuthenticationSecrets(false)
.allowedAuthenticationSecrets("string")
.apiBlockedPrefixes("string")
.comment("string")
.name("string")
.noAllowedAuthenticationSecrets(false)
.tlsTrustedCertificates("string")
.build());
api_integration_git_repository_private_link_resource = snowflake.ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource",
api_allowed_prefixes=["string"],
enabled=False,
use_privatelink_endpoint=False,
all_allowed_authentication_secrets=False,
allowed_authentication_secrets=["string"],
api_blocked_prefixes=["string"],
comment="string",
name="string",
no_allowed_authentication_secrets=False,
tls_trusted_certificates=["string"])
const apiIntegrationGitRepositoryPrivateLinkResource = new snowflake.ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource", {
apiAllowedPrefixes: ["string"],
enabled: false,
usePrivatelinkEndpoint: false,
allAllowedAuthenticationSecrets: false,
allowedAuthenticationSecrets: ["string"],
apiBlockedPrefixes: ["string"],
comment: "string",
name: "string",
noAllowedAuthenticationSecrets: false,
tlsTrustedCertificates: ["string"],
});
type: snowflake:ApiIntegrationGitRepositoryPrivateLink
properties:
allAllowedAuthenticationSecrets: false
allowedAuthenticationSecrets:
- string
apiAllowedPrefixes:
- string
apiBlockedPrefixes:
- string
comment: string
enabled: false
name: string
noAllowedAuthenticationSecrets: false
tlsTrustedCertificates:
- string
usePrivatelinkEndpoint: false
ApiIntegrationGitRepositoryPrivateLink Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ApiIntegrationGitRepositoryPrivateLink resource accepts the following input properties:
- Api
Allowed List<string>Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- Enabled bool
- Specifies whether this API integration is enabled or disabled.
- Use
Privatelink boolEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- All
Allowed boolAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Allowed
Authentication List<string>Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Api
Blocked List<string>Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- Comment string
- Specifies a comment for the integration.
- Name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - No
Allowed boolAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Tls
Trusted List<string>Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- Api
Allowed []stringPrefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- Enabled bool
- Specifies whether this API integration is enabled or disabled.
- Use
Privatelink boolEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- All
Allowed boolAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Allowed
Authentication []stringSecrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Api
Blocked []stringPrefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- Comment string
- Specifies a comment for the integration.
- Name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - No
Allowed boolAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Tls
Trusted []stringCertificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- api_
allowed_ list(string)prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- enabled bool
- Specifies whether this API integration is enabled or disabled.
- use_
privatelink_ boolendpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all_
allowed_ boolauthentication_ secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed_
authentication_ list(string)secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api_
blocked_ list(string)prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment string
- Specifies a comment for the integration.
- name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no_
allowed_ boolauthentication_ secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - tls_
trusted_ list(string)certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- api
Allowed List<String>Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- enabled Boolean
- Specifies whether this API integration is enabled or disabled.
- use
Privatelink BooleanEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all
Allowed BooleanAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed
Authentication List<String>Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api
Blocked List<String>Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment String
- Specifies a comment for the integration.
- name String
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no
Allowed BooleanAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - tls
Trusted List<String>Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- api
Allowed string[]Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- enabled boolean
- Specifies whether this API integration is enabled or disabled.
- use
Privatelink booleanEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all
Allowed booleanAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed
Authentication string[]Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api
Blocked string[]Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment string
- Specifies a comment for the integration.
- name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no
Allowed booleanAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - tls
Trusted string[]Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- api_
allowed_ Sequence[str]prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- enabled bool
- Specifies whether this API integration is enabled or disabled.
- use_
privatelink_ boolendpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all_
allowed_ boolauthentication_ secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed_
authentication_ Sequence[str]secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api_
blocked_ Sequence[str]prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment str
- Specifies a comment for the integration.
- name str
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no_
allowed_ boolauthentication_ secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - tls_
trusted_ Sequence[str]certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- api
Allowed List<String>Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- enabled Boolean
- Specifies whether this API integration is enabled or disabled.
- use
Privatelink BooleanEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all
Allowed BooleanAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed
Authentication List<String>Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api
Blocked List<String>Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment String
- Specifies a comment for the integration.
- name String
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no
Allowed BooleanAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - tls
Trusted List<String>Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
Outputs
All input properties are implicitly available as output properties. Additionally, the ApiIntegrationGitRepositoryPrivateLink resource produces the following output properties:
- Describe
Outputs List<ApiIntegration Git Repository Private Link Describe Output> - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Id string
- The provider-assigned unique ID for this managed resource.
- Show
Outputs List<ApiIntegration Git Repository Private Link Show Output> - Outputs the result of
SHOW API INTEGRATIONSfor the given integration.
- Describe
Outputs []ApiIntegration Git Repository Private Link Describe Output - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Id string
- The provider-assigned unique ID for this managed resource.
- Show
Outputs []ApiIntegration Git Repository Private Link Show Output - Outputs the result of
SHOW API INTEGRATIONSfor the given integration.
- describe_
outputs list(object) - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - fully_
qualified_ stringname - Fully qualified name of the resource. For more information, see object name resolution.
- id string
- The provider-assigned unique ID for this managed resource.
- show_
outputs list(object) - Outputs the result of
SHOW API INTEGRATIONSfor the given integration.
- describe
Outputs List<ApiIntegration Git Repository Private Link Describe Output> - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- id String
- The provider-assigned unique ID for this managed resource.
- show
Outputs List<ApiIntegration Git Repository Private Link Show Output> - Outputs the result of
SHOW API INTEGRATIONSfor the given integration.
- describe
Outputs ApiIntegration Git Repository Private Link Describe Output[] - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- id string
- The provider-assigned unique ID for this managed resource.
- show
Outputs ApiIntegration Git Repository Private Link Show Output[] - Outputs the result of
SHOW API INTEGRATIONSfor the given integration.
- describe_
outputs Sequence[ApiIntegration Git Repository Private Link Describe Output] - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - fully_
qualified_ strname - Fully qualified name of the resource. For more information, see object name resolution.
- id str
- The provider-assigned unique ID for this managed resource.
- show_
outputs Sequence[ApiIntegration Git Repository Private Link Show Output] - Outputs the result of
SHOW API INTEGRATIONSfor the given integration.
- describe
Outputs List<Property Map> - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- id String
- The provider-assigned unique ID for this managed resource.
- show
Outputs List<Property Map> - Outputs the result of
SHOW API INTEGRATIONSfor the given integration.
Look up Existing ApiIntegrationGitRepositoryPrivateLink Resource
Get an existing ApiIntegrationGitRepositoryPrivateLink resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ApiIntegrationGitRepositoryPrivateLinkState, opts?: CustomResourceOptions): ApiIntegrationGitRepositoryPrivateLink@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
all_allowed_authentication_secrets: Optional[bool] = None,
allowed_authentication_secrets: Optional[Sequence[str]] = None,
api_allowed_prefixes: Optional[Sequence[str]] = None,
api_blocked_prefixes: Optional[Sequence[str]] = None,
comment: Optional[str] = None,
describe_outputs: Optional[Sequence[ApiIntegrationGitRepositoryPrivateLinkDescribeOutputArgs]] = None,
enabled: Optional[bool] = None,
fully_qualified_name: Optional[str] = None,
name: Optional[str] = None,
no_allowed_authentication_secrets: Optional[bool] = None,
show_outputs: Optional[Sequence[ApiIntegrationGitRepositoryPrivateLinkShowOutputArgs]] = None,
tls_trusted_certificates: Optional[Sequence[str]] = None,
use_privatelink_endpoint: Optional[bool] = None) -> ApiIntegrationGitRepositoryPrivateLinkfunc GetApiIntegrationGitRepositoryPrivateLink(ctx *Context, name string, id IDInput, state *ApiIntegrationGitRepositoryPrivateLinkState, opts ...ResourceOption) (*ApiIntegrationGitRepositoryPrivateLink, error)public static ApiIntegrationGitRepositoryPrivateLink Get(string name, Input<string> id, ApiIntegrationGitRepositoryPrivateLinkState? state, CustomResourceOptions? opts = null)public static ApiIntegrationGitRepositoryPrivateLink get(String name, Output<String> id, ApiIntegrationGitRepositoryPrivateLinkState state, CustomResourceOptions options)resources: _: type: snowflake:ApiIntegrationGitRepositoryPrivateLink get: id: ${id}import {
to = snowflake_apiintegrationgitrepositoryprivatelink.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- All
Allowed boolAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Allowed
Authentication List<string>Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Api
Allowed List<string>Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- Api
Blocked List<string>Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- Comment string
- Specifies a comment for the integration.
- Describe
Outputs List<ApiIntegration Git Repository Private Link Describe Output> - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - Enabled bool
- Specifies whether this API integration is enabled or disabled.
- Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - No
Allowed boolAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Show
Outputs List<ApiIntegration Git Repository Private Link Show Output> - Outputs the result of
SHOW API INTEGRATIONSfor the given integration. - Tls
Trusted List<string>Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- Use
Privatelink boolEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- All
Allowed boolAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Allowed
Authentication []stringSecrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Api
Allowed []stringPrefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- Api
Blocked []stringPrefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- Comment string
- Specifies a comment for the integration.
- Describe
Outputs []ApiIntegration Git Repository Private Link Describe Output Args - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - Enabled bool
- Specifies whether this API integration is enabled or disabled.
- Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - No
Allowed boolAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Show
Outputs []ApiIntegration Git Repository Private Link Show Output Args - Outputs the result of
SHOW API INTEGRATIONSfor the given integration. - Tls
Trusted []stringCertificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- Use
Privatelink boolEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all_
allowed_ boolauthentication_ secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed_
authentication_ list(string)secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api_
allowed_ list(string)prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- api_
blocked_ list(string)prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment string
- Specifies a comment for the integration.
- describe_
outputs list(object) - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - enabled bool
- Specifies whether this API integration is enabled or disabled.
- fully_
qualified_ stringname - Fully qualified name of the resource. For more information, see object name resolution.
- name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no_
allowed_ boolauthentication_ secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - show_
outputs list(object) - Outputs the result of
SHOW API INTEGRATIONSfor the given integration. - tls_
trusted_ list(string)certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- use_
privatelink_ boolendpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all
Allowed BooleanAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed
Authentication List<String>Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api
Allowed List<String>Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- api
Blocked List<String>Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment String
- Specifies a comment for the integration.
- describe
Outputs List<ApiIntegration Git Repository Private Link Describe Output> - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - enabled Boolean
- Specifies whether this API integration is enabled or disabled.
- fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- name String
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no
Allowed BooleanAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - show
Outputs List<ApiIntegration Git Repository Private Link Show Output> - Outputs the result of
SHOW API INTEGRATIONSfor the given integration. - tls
Trusted List<String>Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- use
Privatelink BooleanEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all
Allowed booleanAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed
Authentication string[]Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api
Allowed string[]Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- api
Blocked string[]Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment string
- Specifies a comment for the integration.
- describe
Outputs ApiIntegration Git Repository Private Link Describe Output[] - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - enabled boolean
- Specifies whether this API integration is enabled or disabled.
- fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- name string
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no
Allowed booleanAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - show
Outputs ApiIntegration Git Repository Private Link Show Output[] - Outputs the result of
SHOW API INTEGRATIONSfor the given integration. - tls
Trusted string[]Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- use
Privatelink booleanEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all_
allowed_ boolauthentication_ secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed_
authentication_ Sequence[str]secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api_
allowed_ Sequence[str]prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- api_
blocked_ Sequence[str]prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment str
- Specifies a comment for the integration.
- describe_
outputs Sequence[ApiIntegration Git Repository Private Link Describe Output Args] - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - enabled bool
- Specifies whether this API integration is enabled or disabled.
- fully_
qualified_ strname - Fully qualified name of the resource. For more information, see object name resolution.
- name str
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no_
allowed_ boolauthentication_ secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - show_
outputs Sequence[ApiIntegration Git Repository Private Link Show Output Args] - Outputs the result of
SHOW API INTEGRATIONSfor the given integration. - tls_
trusted_ Sequence[str]certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- use_
privatelink_ boolendpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
- all
Allowed BooleanAuthentication Secrets - When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
noAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - allowed
Authentication List<String>Secrets - A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandnoAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - api
Allowed List<String>Prefixes - Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
- api
Blocked List<String>Prefixes - Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
- comment String
- Specifies a comment for the integration.
- describe
Outputs List<Property Map> - Outputs the result of
DESCRIBE API INTEGRATIONfor the given integration. - enabled Boolean
- Specifies whether this API integration is enabled or disabled.
- fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- name String
- Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - no
Allowed BooleanAuthentication Secrets - When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with
allAllowedAuthenticationSecretsandallowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - show
Outputs List<Property Map> - Outputs the result of
SHOW API INTEGRATIONSfor the given integration. - tls
Trusted List<String>Certificates - Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
- use
Privatelink BooleanEndpoint - Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
Supporting Types
ApiIntegrationGitRepositoryPrivateLinkDescribeOutput, ApiIntegrationGitRepositoryPrivateLinkDescribeOutputArgs
- Allowed
Authentication stringSecrets - Allowed
Prefixes List<string> - Api
Provider string - Blocked
Prefixes List<string> - Comment string
- Enabled bool
- Tls
Trusted List<string>Certificates - Use
Privatelink boolEndpoint
- Allowed
Authentication stringSecrets - Allowed
Prefixes []string - Api
Provider string - Blocked
Prefixes []string - Comment string
- Enabled bool
- Tls
Trusted []stringCertificates - Use
Privatelink boolEndpoint
- allowed_
authentication_ stringsecrets - allowed_
prefixes list(string) - api_
provider string - blocked_
prefixes list(string) - comment string
- enabled bool
- tls_
trusted_ list(string)certificates - use_
privatelink_ boolendpoint
- allowed
Authentication StringSecrets - allowed
Prefixes List<String> - api
Provider String - blocked
Prefixes List<String> - comment String
- enabled Boolean
- tls
Trusted List<String>Certificates - use
Privatelink BooleanEndpoint
- allowed
Authentication stringSecrets - allowed
Prefixes string[] - api
Provider string - blocked
Prefixes string[] - comment string
- enabled boolean
- tls
Trusted string[]Certificates - use
Privatelink booleanEndpoint
- allowed_
authentication_ strsecrets - allowed_
prefixes Sequence[str] - api_
provider str - blocked_
prefixes Sequence[str] - comment str
- enabled bool
- tls_
trusted_ Sequence[str]certificates - use_
privatelink_ boolendpoint
- allowed
Authentication StringSecrets - allowed
Prefixes List<String> - api
Provider String - blocked
Prefixes List<String> - comment String
- enabled Boolean
- tls
Trusted List<String>Certificates - use
Privatelink BooleanEndpoint
ApiIntegrationGitRepositoryPrivateLinkShowOutput, ApiIntegrationGitRepositoryPrivateLinkShowOutputArgs
Import
$ pulumi import snowflake:index/apiIntegrationGitRepositoryPrivateLink:ApiIntegrationGitRepositoryPrivateLink example '"<name>"'
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Snowflake pulumi/pulumi-snowflake
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
snowflakeTerraform Provider.
published on Wednesday, Jul 8, 2026 by Pulumi