1. Packages
  2. Packages
  3. Snowflake Provider
  4. API Docs
  5. ApiIntegrationGitRepositoryPrivateLink
Viewing docs for Snowflake v2.18.0
published on Wednesday, Jul 8, 2026 by Pulumi
snowflake logo
Viewing docs for Snowflake v2.18.0
published on Wednesday, Jul 8, 2026 by Pulumi

    Caution: Preview Feature This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to previewFeaturesEnabled field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.

    Resource used to manage API integration for git HTTPS API via a private link endpoint. For more information, check api integration documentation.

    Example Usage

    Note Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.

    import * as pulumi from "@pulumi/pulumi";
    import * as snowflake from "@pulumi/snowflake";
    
    // basic resource - no authentication secrets (none allowed)
    const basic = new snowflake.ApiIntegrationGitRepositoryPrivateLink("basic", {
        name: "git_repository_private_link_integration",
        usePrivatelinkEndpoint: true,
        noAllowedAuthenticationSecrets: true,
        apiAllowedPrefixes: ["https://github.example.internal/my-org/"],
        enabled: true,
    });
    // with specific allowed secrets
    const withSecrets = new snowflake.ApiIntegrationGitRepositoryPrivateLink("with_secrets", {
        name: "git_repository_private_link_integration_secrets",
        usePrivatelinkEndpoint: true,
        allowedAuthenticationSecrets: ["my_db.my_schema.my_secret"],
        apiAllowedPrefixes: ["https://github.example.internal/my-org/"],
        enabled: true,
    });
    // complete resource - all secrets allowed, with TLS certificates
    const complete = new snowflake.ApiIntegrationGitRepositoryPrivateLink("complete", {
        name: "git_repository_private_link_integration_complete",
        usePrivatelinkEndpoint: true,
        allAllowedAuthenticationSecrets: true,
        tlsTrustedCertificates: ["my_db.my_schema.my_cert_secret"],
        apiAllowedPrefixes: ["https://github.example.internal/my-org/"],
        apiBlockedPrefixes: ["https://github.example.internal/my-org/private-repo/"],
        enabled: true,
        comment: "Example Git Repository Private Link integration",
    });
    
    import pulumi
    import pulumi_snowflake as snowflake
    
    # basic resource - no authentication secrets (none allowed)
    basic = snowflake.ApiIntegrationGitRepositoryPrivateLink("basic",
        name="git_repository_private_link_integration",
        use_privatelink_endpoint=True,
        no_allowed_authentication_secrets=True,
        api_allowed_prefixes=["https://github.example.internal/my-org/"],
        enabled=True)
    # with specific allowed secrets
    with_secrets = snowflake.ApiIntegrationGitRepositoryPrivateLink("with_secrets",
        name="git_repository_private_link_integration_secrets",
        use_privatelink_endpoint=True,
        allowed_authentication_secrets=["my_db.my_schema.my_secret"],
        api_allowed_prefixes=["https://github.example.internal/my-org/"],
        enabled=True)
    # complete resource - all secrets allowed, with TLS certificates
    complete = snowflake.ApiIntegrationGitRepositoryPrivateLink("complete",
        name="git_repository_private_link_integration_complete",
        use_privatelink_endpoint=True,
        all_allowed_authentication_secrets=True,
        tls_trusted_certificates=["my_db.my_schema.my_cert_secret"],
        api_allowed_prefixes=["https://github.example.internal/my-org/"],
        api_blocked_prefixes=["https://github.example.internal/my-org/private-repo/"],
        enabled=True,
        comment="Example Git Repository Private Link integration")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-snowflake/sdk/v2/go/snowflake"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		// basic resource - no authentication secrets (none allowed)
    		_, err := snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "basic", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
    			Name:                           pulumi.String("git_repository_private_link_integration"),
    			UsePrivatelinkEndpoint:         pulumi.Bool(true),
    			NoAllowedAuthenticationSecrets: pulumi.Bool(true),
    			ApiAllowedPrefixes: pulumi.StringArray{
    				pulumi.String("https://github.example.internal/my-org/"),
    			},
    			Enabled: pulumi.Bool(true),
    		})
    		if err != nil {
    			return err
    		}
    		// with specific allowed secrets
    		_, err = snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "with_secrets", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
    			Name:                   pulumi.String("git_repository_private_link_integration_secrets"),
    			UsePrivatelinkEndpoint: pulumi.Bool(true),
    			AllowedAuthenticationSecrets: pulumi.StringArray{
    				pulumi.String("my_db.my_schema.my_secret"),
    			},
    			ApiAllowedPrefixes: pulumi.StringArray{
    				pulumi.String("https://github.example.internal/my-org/"),
    			},
    			Enabled: pulumi.Bool(true),
    		})
    		if err != nil {
    			return err
    		}
    		// complete resource - all secrets allowed, with TLS certificates
    		_, err = snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "complete", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
    			Name:                            pulumi.String("git_repository_private_link_integration_complete"),
    			UsePrivatelinkEndpoint:          pulumi.Bool(true),
    			AllAllowedAuthenticationSecrets: pulumi.Bool(true),
    			TlsTrustedCertificates: pulumi.StringArray{
    				pulumi.String("my_db.my_schema.my_cert_secret"),
    			},
    			ApiAllowedPrefixes: pulumi.StringArray{
    				pulumi.String("https://github.example.internal/my-org/"),
    			},
    			ApiBlockedPrefixes: pulumi.StringArray{
    				pulumi.String("https://github.example.internal/my-org/private-repo/"),
    			},
    			Enabled: pulumi.Bool(true),
    			Comment: pulumi.String("Example Git Repository Private Link integration"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Snowflake = Pulumi.Snowflake;
    
    return await Deployment.RunAsync(() => 
    {
        // basic resource - no authentication secrets (none allowed)
        var basic = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("basic", new()
        {
            Name = "git_repository_private_link_integration",
            UsePrivatelinkEndpoint = true,
            NoAllowedAuthenticationSecrets = true,
            ApiAllowedPrefixes = new[]
            {
                "https://github.example.internal/my-org/",
            },
            Enabled = true,
        });
    
        // with specific allowed secrets
        var withSecrets = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("with_secrets", new()
        {
            Name = "git_repository_private_link_integration_secrets",
            UsePrivatelinkEndpoint = true,
            AllowedAuthenticationSecrets = new[]
            {
                "my_db.my_schema.my_secret",
            },
            ApiAllowedPrefixes = new[]
            {
                "https://github.example.internal/my-org/",
            },
            Enabled = true,
        });
    
        // complete resource - all secrets allowed, with TLS certificates
        var complete = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("complete", new()
        {
            Name = "git_repository_private_link_integration_complete",
            UsePrivatelinkEndpoint = true,
            AllAllowedAuthenticationSecrets = true,
            TlsTrustedCertificates = new[]
            {
                "my_db.my_schema.my_cert_secret",
            },
            ApiAllowedPrefixes = new[]
            {
                "https://github.example.internal/my-org/",
            },
            ApiBlockedPrefixes = new[]
            {
                "https://github.example.internal/my-org/private-repo/",
            },
            Enabled = true,
            Comment = "Example Git Repository Private Link integration",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.snowflake.ApiIntegrationGitRepositoryPrivateLink;
    import com.pulumi.snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            // basic resource - no authentication secrets (none allowed)
            var basic = new ApiIntegrationGitRepositoryPrivateLink("basic", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
                .name("git_repository_private_link_integration")
                .usePrivatelinkEndpoint(true)
                .noAllowedAuthenticationSecrets(true)
                .apiAllowedPrefixes("https://github.example.internal/my-org/")
                .enabled(true)
                .build());
    
            // with specific allowed secrets
            var withSecrets = new ApiIntegrationGitRepositoryPrivateLink("withSecrets", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
                .name("git_repository_private_link_integration_secrets")
                .usePrivatelinkEndpoint(true)
                .allowedAuthenticationSecrets("my_db.my_schema.my_secret")
                .apiAllowedPrefixes("https://github.example.internal/my-org/")
                .enabled(true)
                .build());
    
            // complete resource - all secrets allowed, with TLS certificates
            var complete = new ApiIntegrationGitRepositoryPrivateLink("complete", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
                .name("git_repository_private_link_integration_complete")
                .usePrivatelinkEndpoint(true)
                .allAllowedAuthenticationSecrets(true)
                .tlsTrustedCertificates("my_db.my_schema.my_cert_secret")
                .apiAllowedPrefixes("https://github.example.internal/my-org/")
                .apiBlockedPrefixes("https://github.example.internal/my-org/private-repo/")
                .enabled(true)
                .comment("Example Git Repository Private Link integration")
                .build());
    
        }
    }
    
    resources:
      # basic resource - no authentication secrets (none allowed)
      basic:
        type: snowflake:ApiIntegrationGitRepositoryPrivateLink
        properties:
          name: git_repository_private_link_integration
          usePrivatelinkEndpoint: true
          noAllowedAuthenticationSecrets: true
          apiAllowedPrefixes:
            - https://github.example.internal/my-org/
          enabled: true
      # with specific allowed secrets
      withSecrets:
        type: snowflake:ApiIntegrationGitRepositoryPrivateLink
        name: with_secrets
        properties:
          name: git_repository_private_link_integration_secrets
          usePrivatelinkEndpoint: true
          allowedAuthenticationSecrets:
            - my_db.my_schema.my_secret
          apiAllowedPrefixes:
            - https://github.example.internal/my-org/
          enabled: true
      # complete resource - all secrets allowed, with TLS certificates
      complete:
        type: snowflake:ApiIntegrationGitRepositoryPrivateLink
        properties:
          name: git_repository_private_link_integration_complete
          usePrivatelinkEndpoint: true
          allAllowedAuthenticationSecrets: true
          tlsTrustedCertificates:
            - my_db.my_schema.my_cert_secret
          apiAllowedPrefixes:
            - https://github.example.internal/my-org/
          apiBlockedPrefixes:
            - https://github.example.internal/my-org/private-repo/
          enabled: true
          comment: Example Git Repository Private Link integration
    
    pulumi {
      required_providers {
        snowflake = {
          source = "pulumi/snowflake"
        }
      }
    }
    
    # basic resource - no authentication secrets (none allowed)
    resource "snowflake_apiintegrationgitrepositoryprivatelink" "basic" {
      name                              = "git_repository_private_link_integration"
      use_privatelink_endpoint          = true
      no_allowed_authentication_secrets = true
      api_allowed_prefixes              = ["https://github.example.internal/my-org/"]
      enabled                           = true
    }
    # with specific allowed secrets
    resource "snowflake_apiintegrationgitrepositoryprivatelink" "with_secrets" {
      name                           = "git_repository_private_link_integration_secrets"
      use_privatelink_endpoint       = true
      allowed_authentication_secrets = ["my_db.my_schema.my_secret"]
      api_allowed_prefixes           = ["https://github.example.internal/my-org/"]
      enabled                        = true
    }
    # complete resource - all secrets allowed, with TLS certificates
    resource "snowflake_apiintegrationgitrepositoryprivatelink" "complete" {
      name                               = "git_repository_private_link_integration_complete"
      use_privatelink_endpoint           = true
      all_allowed_authentication_secrets = true
      tls_trusted_certificates           = ["my_db.my_schema.my_cert_secret"]
      api_allowed_prefixes               = ["https://github.example.internal/my-org/"]
      api_blocked_prefixes               = ["https://github.example.internal/my-org/private-repo/"]
      enabled                            = true
      comment                            = "Example Git Repository Private Link integration"
    }
    

    Note If a field has a default value, it is shown next to the type in the schema.

    Create ApiIntegrationGitRepositoryPrivateLink Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ApiIntegrationGitRepositoryPrivateLink(name: string, args: ApiIntegrationGitRepositoryPrivateLinkArgs, opts?: CustomResourceOptions);
    @overload
    def ApiIntegrationGitRepositoryPrivateLink(resource_name: str,
                                               args: ApiIntegrationGitRepositoryPrivateLinkArgs,
                                               opts: Optional[ResourceOptions] = None)
    
    @overload
    def ApiIntegrationGitRepositoryPrivateLink(resource_name: str,
                                               opts: Optional[ResourceOptions] = None,
                                               api_allowed_prefixes: Optional[Sequence[str]] = None,
                                               enabled: Optional[bool] = None,
                                               use_privatelink_endpoint: Optional[bool] = None,
                                               all_allowed_authentication_secrets: Optional[bool] = None,
                                               allowed_authentication_secrets: Optional[Sequence[str]] = None,
                                               api_blocked_prefixes: Optional[Sequence[str]] = None,
                                               comment: Optional[str] = None,
                                               name: Optional[str] = None,
                                               no_allowed_authentication_secrets: Optional[bool] = None,
                                               tls_trusted_certificates: Optional[Sequence[str]] = None)
    func NewApiIntegrationGitRepositoryPrivateLink(ctx *Context, name string, args ApiIntegrationGitRepositoryPrivateLinkArgs, opts ...ResourceOption) (*ApiIntegrationGitRepositoryPrivateLink, error)
    public ApiIntegrationGitRepositoryPrivateLink(string name, ApiIntegrationGitRepositoryPrivateLinkArgs args, CustomResourceOptions? opts = null)
    public ApiIntegrationGitRepositoryPrivateLink(String name, ApiIntegrationGitRepositoryPrivateLinkArgs args)
    public ApiIntegrationGitRepositoryPrivateLink(String name, ApiIntegrationGitRepositoryPrivateLinkArgs args, CustomResourceOptions options)
    
    type: snowflake:ApiIntegrationGitRepositoryPrivateLink
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "snowflake_api_integration_git_repository_private_link" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args ApiIntegrationGitRepositoryPrivateLinkArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ApiIntegrationGitRepositoryPrivateLinkArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ApiIntegrationGitRepositoryPrivateLinkArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ApiIntegrationGitRepositoryPrivateLinkArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ApiIntegrationGitRepositoryPrivateLinkArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var apiIntegrationGitRepositoryPrivateLinkResource = new Snowflake.ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource", new()
    {
        ApiAllowedPrefixes = new[]
        {
            "string",
        },
        Enabled = false,
        UsePrivatelinkEndpoint = false,
        AllAllowedAuthenticationSecrets = false,
        AllowedAuthenticationSecrets = new[]
        {
            "string",
        },
        ApiBlockedPrefixes = new[]
        {
            "string",
        },
        Comment = "string",
        Name = "string",
        NoAllowedAuthenticationSecrets = false,
        TlsTrustedCertificates = new[]
        {
            "string",
        },
    });
    
    example, err := snowflake.NewApiIntegrationGitRepositoryPrivateLink(ctx, "apiIntegrationGitRepositoryPrivateLinkResource", &snowflake.ApiIntegrationGitRepositoryPrivateLinkArgs{
    	ApiAllowedPrefixes: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Enabled:                         pulumi.Bool(false),
    	UsePrivatelinkEndpoint:          pulumi.Bool(false),
    	AllAllowedAuthenticationSecrets: pulumi.Bool(false),
    	AllowedAuthenticationSecrets: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	ApiBlockedPrefixes: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Comment:                        pulumi.String("string"),
    	Name:                           pulumi.String("string"),
    	NoAllowedAuthenticationSecrets: pulumi.Bool(false),
    	TlsTrustedCertificates: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    })
    
    resource "snowflake_api_integration_git_repository_private_link" "apiIntegrationGitRepositoryPrivateLinkResource" {
      lifecycle {
        create_before_destroy = true
      }
      api_allowed_prefixes               = ["string"]
      enabled                            = false
      use_privatelink_endpoint           = false
      all_allowed_authentication_secrets = false
      allowed_authentication_secrets     = ["string"]
      api_blocked_prefixes               = ["string"]
      comment                            = "string"
      name                               = "string"
      no_allowed_authentication_secrets  = false
      tls_trusted_certificates           = ["string"]
    }
    
    var apiIntegrationGitRepositoryPrivateLinkResource = new ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource", ApiIntegrationGitRepositoryPrivateLinkArgs.builder()
        .apiAllowedPrefixes("string")
        .enabled(false)
        .usePrivatelinkEndpoint(false)
        .allAllowedAuthenticationSecrets(false)
        .allowedAuthenticationSecrets("string")
        .apiBlockedPrefixes("string")
        .comment("string")
        .name("string")
        .noAllowedAuthenticationSecrets(false)
        .tlsTrustedCertificates("string")
        .build());
    
    api_integration_git_repository_private_link_resource = snowflake.ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource",
        api_allowed_prefixes=["string"],
        enabled=False,
        use_privatelink_endpoint=False,
        all_allowed_authentication_secrets=False,
        allowed_authentication_secrets=["string"],
        api_blocked_prefixes=["string"],
        comment="string",
        name="string",
        no_allowed_authentication_secrets=False,
        tls_trusted_certificates=["string"])
    
    const apiIntegrationGitRepositoryPrivateLinkResource = new snowflake.ApiIntegrationGitRepositoryPrivateLink("apiIntegrationGitRepositoryPrivateLinkResource", {
        apiAllowedPrefixes: ["string"],
        enabled: false,
        usePrivatelinkEndpoint: false,
        allAllowedAuthenticationSecrets: false,
        allowedAuthenticationSecrets: ["string"],
        apiBlockedPrefixes: ["string"],
        comment: "string",
        name: "string",
        noAllowedAuthenticationSecrets: false,
        tlsTrustedCertificates: ["string"],
    });
    
    type: snowflake:ApiIntegrationGitRepositoryPrivateLink
    properties:
        allAllowedAuthenticationSecrets: false
        allowedAuthenticationSecrets:
            - string
        apiAllowedPrefixes:
            - string
        apiBlockedPrefixes:
            - string
        comment: string
        enabled: false
        name: string
        noAllowedAuthenticationSecrets: false
        tlsTrustedCertificates:
            - string
        usePrivatelinkEndpoint: false
    

    ApiIntegrationGitRepositoryPrivateLink Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ApiIntegrationGitRepositoryPrivateLink resource accepts the following input properties:

    ApiAllowedPrefixes List<string>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    UsePrivatelinkEndpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets List<string>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiBlockedPrefixes List<string>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    TlsTrustedCertificates List<string>
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    ApiAllowedPrefixes []string
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    UsePrivatelinkEndpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets []string
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiBlockedPrefixes []string
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    TlsTrustedCertificates []string
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    api_allowed_prefixes list(string)
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    use_privatelink_endpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets list(string)
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_blocked_prefixes list(string)
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    tls_trusted_certificates list(string)
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    usePrivatelinkEndpoint Boolean
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    tlsTrustedCertificates List<String>
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    apiAllowedPrefixes string[]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled boolean
    Specifies whether this API integration is enabled or disabled.
    usePrivatelinkEndpoint boolean
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    allAllowedAuthenticationSecrets boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets string[]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiBlockedPrefixes string[]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    tlsTrustedCertificates string[]
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    api_allowed_prefixes Sequence[str]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    use_privatelink_endpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets Sequence[str]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_blocked_prefixes Sequence[str]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment str
    Specifies a comment for the integration.
    name str
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    tls_trusted_certificates Sequence[str]
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    usePrivatelinkEndpoint Boolean
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    tlsTrustedCertificates List<String>
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ApiIntegrationGitRepositoryPrivateLink resource produces the following output properties:

    DescribeOutputs List<ApiIntegrationGitRepositoryPrivateLinkDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Id string
    The provider-assigned unique ID for this managed resource.
    ShowOutputs List<ApiIntegrationGitRepositoryPrivateLinkShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    DescribeOutputs []ApiIntegrationGitRepositoryPrivateLinkDescribeOutput
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Id string
    The provider-assigned unique ID for this managed resource.
    ShowOutputs []ApiIntegrationGitRepositoryPrivateLinkShowOutput
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describe_outputs list(object)
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fully_qualified_name string
    Fully qualified name of the resource. For more information, see object name resolution.
    id string
    The provider-assigned unique ID for this managed resource.
    show_outputs list(object)
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describeOutputs List<ApiIntegrationGitRepositoryPrivateLinkDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    id String
    The provider-assigned unique ID for this managed resource.
    showOutputs List<ApiIntegrationGitRepositoryPrivateLinkShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describeOutputs ApiIntegrationGitRepositoryPrivateLinkDescribeOutput[]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    id string
    The provider-assigned unique ID for this managed resource.
    showOutputs ApiIntegrationGitRepositoryPrivateLinkShowOutput[]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describe_outputs Sequence[ApiIntegrationGitRepositoryPrivateLinkDescribeOutput]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fully_qualified_name str
    Fully qualified name of the resource. For more information, see object name resolution.
    id str
    The provider-assigned unique ID for this managed resource.
    show_outputs Sequence[ApiIntegrationGitRepositoryPrivateLinkShowOutput]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describeOutputs List<Property Map>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    id String
    The provider-assigned unique ID for this managed resource.
    showOutputs List<Property Map>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.

    Look up Existing ApiIntegrationGitRepositoryPrivateLink Resource

    Get an existing ApiIntegrationGitRepositoryPrivateLink resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ApiIntegrationGitRepositoryPrivateLinkState, opts?: CustomResourceOptions): ApiIntegrationGitRepositoryPrivateLink
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            all_allowed_authentication_secrets: Optional[bool] = None,
            allowed_authentication_secrets: Optional[Sequence[str]] = None,
            api_allowed_prefixes: Optional[Sequence[str]] = None,
            api_blocked_prefixes: Optional[Sequence[str]] = None,
            comment: Optional[str] = None,
            describe_outputs: Optional[Sequence[ApiIntegrationGitRepositoryPrivateLinkDescribeOutputArgs]] = None,
            enabled: Optional[bool] = None,
            fully_qualified_name: Optional[str] = None,
            name: Optional[str] = None,
            no_allowed_authentication_secrets: Optional[bool] = None,
            show_outputs: Optional[Sequence[ApiIntegrationGitRepositoryPrivateLinkShowOutputArgs]] = None,
            tls_trusted_certificates: Optional[Sequence[str]] = None,
            use_privatelink_endpoint: Optional[bool] = None) -> ApiIntegrationGitRepositoryPrivateLink
    func GetApiIntegrationGitRepositoryPrivateLink(ctx *Context, name string, id IDInput, state *ApiIntegrationGitRepositoryPrivateLinkState, opts ...ResourceOption) (*ApiIntegrationGitRepositoryPrivateLink, error)
    public static ApiIntegrationGitRepositoryPrivateLink Get(string name, Input<string> id, ApiIntegrationGitRepositoryPrivateLinkState? state, CustomResourceOptions? opts = null)
    public static ApiIntegrationGitRepositoryPrivateLink get(String name, Output<String> id, ApiIntegrationGitRepositoryPrivateLinkState state, CustomResourceOptions options)
    resources:  _:    type: snowflake:ApiIntegrationGitRepositoryPrivateLink    get:      id: ${id}
    import {
      to = snowflake_api_integration_git_repository_private_link.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets List<string>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiAllowedPrefixes List<string>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    ApiBlockedPrefixes List<string>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    DescribeOutputs List<ApiIntegrationGitRepositoryPrivateLinkDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ShowOutputs List<ApiIntegrationGitRepositoryPrivateLinkShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    TlsTrustedCertificates List<string>
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    UsePrivatelinkEndpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets []string
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiAllowedPrefixes []string
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    ApiBlockedPrefixes []string
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    DescribeOutputs []ApiIntegrationGitRepositoryPrivateLinkDescribeOutputArgs
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ShowOutputs []ApiIntegrationGitRepositoryPrivateLinkShowOutputArgs
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    TlsTrustedCertificates []string
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    UsePrivatelinkEndpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets list(string)
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_allowed_prefixes list(string)
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    api_blocked_prefixes list(string)
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    describe_outputs list(object)
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    fully_qualified_name string
    Fully qualified name of the resource. For more information, see object name resolution.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    show_outputs list(object)
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    tls_trusted_certificates list(string)
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    use_privatelink_endpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    describeOutputs List<ApiIntegrationGitRepositoryPrivateLinkDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    showOutputs List<ApiIntegrationGitRepositoryPrivateLinkShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    tlsTrustedCertificates List<String>
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    usePrivatelinkEndpoint Boolean
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    allAllowedAuthenticationSecrets boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets string[]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes string[]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    apiBlockedPrefixes string[]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    describeOutputs ApiIntegrationGitRepositoryPrivateLinkDescribeOutput[]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled boolean
    Specifies whether this API integration is enabled or disabled.
    fullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    showOutputs ApiIntegrationGitRepositoryPrivateLinkShowOutput[]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    tlsTrustedCertificates string[]
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    usePrivatelinkEndpoint boolean
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets Sequence[str]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_allowed_prefixes Sequence[str]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    api_blocked_prefixes Sequence[str]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment str
    Specifies a comment for the integration.
    describe_outputs Sequence[ApiIntegrationGitRepositoryPrivateLinkDescribeOutputArgs]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    fully_qualified_name str
    Fully qualified name of the resource. For more information, see object name resolution.
    name str
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    show_outputs Sequence[ApiIntegrationGitRepositoryPrivateLinkShowOutputArgs]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    tls_trusted_certificates Sequence[str]
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    use_privatelink_endpoint bool
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    describeOutputs List<Property Map>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    showOutputs List<Property Map>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    tlsTrustedCertificates List<String>
    Specifies secrets containing self-signed certificates to be used when authenticating with a Git repository server over private link. Only needed when the certificate is self-signed rather than signed by a certificate authority. Each entry must be a fully-qualified name of a Snowflake secret of type generic string whose value is Base64-encoded certificate data.
    usePrivatelinkEndpoint Boolean
    Specifies whether to use the private link endpoint for the git repository. When set to true, Snowflake uses the VNet-injected endpoint for the git repository.

    Supporting Types

    ApiIntegrationGitRepositoryPrivateLinkDescribeOutput, ApiIntegrationGitRepositoryPrivateLinkDescribeOutputArgs

    ApiIntegrationGitRepositoryPrivateLinkShowOutput, ApiIntegrationGitRepositoryPrivateLinkShowOutputArgs

    ApiType string
    Category string
    Comment string
    CreatedOn string
    Enabled bool
    Name string
    ApiType string
    Category string
    Comment string
    CreatedOn string
    Enabled bool
    Name string
    api_type string
    category string
    comment string
    created_on string
    enabled bool
    name string
    apiType String
    category String
    comment String
    createdOn String
    enabled Boolean
    name String
    apiType string
    category string
    comment string
    createdOn string
    enabled boolean
    name string
    apiType String
    category String
    comment String
    createdOn String
    enabled Boolean
    name String

    Import

    $ pulumi import snowflake:index/apiIntegrationGitRepositoryPrivateLink:ApiIntegrationGitRepositoryPrivateLink example '"<name>"'
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Snowflake pulumi/pulumi-snowflake
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the snowflake Terraform Provider.
    snowflake logo
    Viewing docs for Snowflake v2.18.0
    published on Wednesday, Jul 8, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial