Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Snowflake Provider
  4. API Docs
  5. ApiIntegrationGitRepositoryToken
Viewing docs for Snowflake v2.18.0
published on Wednesday, Jul 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-snowflake

snowflake.ApiIntegrationGitRepositoryToken

snowflake logo
Viewing docs for Snowflake v2.18.0
published on Wednesday, Jul 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-snowflake

    Caution: Preview Feature This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to previewFeaturesEnabled field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.

    Resource used to manage API integration for git HTTPS API with token-based authentication. For more information, check api integration documentation.

    Example Usage

    Note Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.

    import * as pulumi from "@pulumi/pulumi";
import * as snowflake from "@pulumi/snowflake";

// basic resource - no authentication secrets (none allowed)
const basic = new snowflake.ApiIntegrationGitRepositoryToken("basic", {
    name: "git_repository_token_integration",
    noAllowedAuthenticationSecrets: true,
    apiAllowedPrefixes: ["https://github.com/my-org/"],
    enabled: true,
});
// with specific allowed secrets
const withSecrets = new snowflake.ApiIntegrationGitRepositoryToken("with_secrets", {
    name: "git_repository_token_integration_secrets",
    allowedAuthenticationSecrets: ["my_db.my_schema.my_secret"],
    apiAllowedPrefixes: ["https://github.com/my-org/"],
    enabled: true,
});
// complete resource - all secrets allowed
const complete = new snowflake.ApiIntegrationGitRepositoryToken("complete", {
    name: "git_repository_token_integration_complete",
    allAllowedAuthenticationSecrets: true,
    apiAllowedPrefixes: ["https://github.com/my-org/"],
    apiBlockedPrefixes: ["https://github.com/my-org/private-repo/"],
    enabled: true,
    comment: "Example Git Repository Token integration",
});

    import pulumi
import pulumi_snowflake as snowflake

# basic resource - no authentication secrets (none allowed)
basic = snowflake.ApiIntegrationGitRepositoryToken("basic",
    name="git_repository_token_integration",
    no_allowed_authentication_secrets=True,
    api_allowed_prefixes=["https://github.com/my-org/"],
    enabled=True)
# with specific allowed secrets
with_secrets = snowflake.ApiIntegrationGitRepositoryToken("with_secrets",
    name="git_repository_token_integration_secrets",
    allowed_authentication_secrets=["my_db.my_schema.my_secret"],
    api_allowed_prefixes=["https://github.com/my-org/"],
    enabled=True)
# complete resource - all secrets allowed
complete = snowflake.ApiIntegrationGitRepositoryToken("complete",
    name="git_repository_token_integration_complete",
    all_allowed_authentication_secrets=True,
    api_allowed_prefixes=["https://github.com/my-org/"],
    api_blocked_prefixes=["https://github.com/my-org/private-repo/"],
    enabled=True,
    comment="Example Git Repository Token integration")

    package main

import (
	"github.com/pulumi/pulumi-snowflake/sdk/v2/go/snowflake"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// basic resource - no authentication secrets (none allowed)
		_, err := snowflake.NewApiIntegrationGitRepositoryToken(ctx, "basic", &snowflake.ApiIntegrationGitRepositoryTokenArgs{
			Name:                           pulumi.String("git_repository_token_integration"),
			NoAllowedAuthenticationSecrets: pulumi.Bool(true),
			ApiAllowedPrefixes: pulumi.StringArray{
				pulumi.String("https://github.com/my-org/"),
			},
			Enabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		// with specific allowed secrets
		_, err = snowflake.NewApiIntegrationGitRepositoryToken(ctx, "with_secrets", &snowflake.ApiIntegrationGitRepositoryTokenArgs{
			Name: pulumi.String("git_repository_token_integration_secrets"),
			AllowedAuthenticationSecrets: pulumi.StringArray{
				pulumi.String("my_db.my_schema.my_secret"),
			},
			ApiAllowedPrefixes: pulumi.StringArray{
				pulumi.String("https://github.com/my-org/"),
			},
			Enabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		// complete resource - all secrets allowed
		_, err = snowflake.NewApiIntegrationGitRepositoryToken(ctx, "complete", &snowflake.ApiIntegrationGitRepositoryTokenArgs{
			Name:                            pulumi.String("git_repository_token_integration_complete"),
			AllAllowedAuthenticationSecrets: pulumi.Bool(true),
			ApiAllowedPrefixes: pulumi.StringArray{
				pulumi.String("https://github.com/my-org/"),
			},
			ApiBlockedPrefixes: pulumi.StringArray{
				pulumi.String("https://github.com/my-org/private-repo/"),
			},
			Enabled: pulumi.Bool(true),
			Comment: pulumi.String("Example Git Repository Token integration"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Snowflake = Pulumi.Snowflake;

return await Deployment.RunAsync(() => 
{
    // basic resource - no authentication secrets (none allowed)
    var basic = new Snowflake.ApiIntegrationGitRepositoryToken("basic", new()
    {
        Name = "git_repository_token_integration",
        NoAllowedAuthenticationSecrets = true,
        ApiAllowedPrefixes = new[]
        {
            "https://github.com/my-org/",
        },
        Enabled = true,
    });

    // with specific allowed secrets
    var withSecrets = new Snowflake.ApiIntegrationGitRepositoryToken("with_secrets", new()
    {
        Name = "git_repository_token_integration_secrets",
        AllowedAuthenticationSecrets = new[]
        {
            "my_db.my_schema.my_secret",
        },
        ApiAllowedPrefixes = new[]
        {
            "https://github.com/my-org/",
        },
        Enabled = true,
    });

    // complete resource - all secrets allowed
    var complete = new Snowflake.ApiIntegrationGitRepositoryToken("complete", new()
    {
        Name = "git_repository_token_integration_complete",
        AllAllowedAuthenticationSecrets = true,
        ApiAllowedPrefixes = new[]
        {
            "https://github.com/my-org/",
        },
        ApiBlockedPrefixes = new[]
        {
            "https://github.com/my-org/private-repo/",
        },
        Enabled = true,
        Comment = "Example Git Repository Token integration",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.snowflake.ApiIntegrationGitRepositoryToken;
import com.pulumi.snowflake.ApiIntegrationGitRepositoryTokenArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // basic resource - no authentication secrets (none allowed)
        var basic = new ApiIntegrationGitRepositoryToken("basic", ApiIntegrationGitRepositoryTokenArgs.builder()
            .name("git_repository_token_integration")
            .noAllowedAuthenticationSecrets(true)
            .apiAllowedPrefixes("https://github.com/my-org/")
            .enabled(true)
            .build());

        // with specific allowed secrets
        var withSecrets = new ApiIntegrationGitRepositoryToken("withSecrets", ApiIntegrationGitRepositoryTokenArgs.builder()
            .name("git_repository_token_integration_secrets")
            .allowedAuthenticationSecrets("my_db.my_schema.my_secret")
            .apiAllowedPrefixes("https://github.com/my-org/")
            .enabled(true)
            .build());

        // complete resource - all secrets allowed
        var complete = new ApiIntegrationGitRepositoryToken("complete", ApiIntegrationGitRepositoryTokenArgs.builder()
            .name("git_repository_token_integration_complete")
            .allAllowedAuthenticationSecrets(true)
            .apiAllowedPrefixes("https://github.com/my-org/")
            .apiBlockedPrefixes("https://github.com/my-org/private-repo/")
            .enabled(true)
            .comment("Example Git Repository Token integration")
            .build());

    }
}

    resources:
  # basic resource - no authentication secrets (none allowed)
  basic:
    type: snowflake:ApiIntegrationGitRepositoryToken
    properties:
      name: git_repository_token_integration
      noAllowedAuthenticationSecrets: true
      apiAllowedPrefixes:
        - https://github.com/my-org/
      enabled: true
  # with specific allowed secrets
  withSecrets:
    type: snowflake:ApiIntegrationGitRepositoryToken
    name: with_secrets
    properties:
      name: git_repository_token_integration_secrets
      allowedAuthenticationSecrets:
        - my_db.my_schema.my_secret
      apiAllowedPrefixes:
        - https://github.com/my-org/
      enabled: true
  # complete resource - all secrets allowed
  complete:
    type: snowflake:ApiIntegrationGitRepositoryToken
    properties:
      name: git_repository_token_integration_complete
      allAllowedAuthenticationSecrets: true
      apiAllowedPrefixes:
        - https://github.com/my-org/
      apiBlockedPrefixes:
        - https://github.com/my-org/private-repo/
      enabled: true
      comment: Example Git Repository Token integration

    pulumi {
  required_providers {
    snowflake = {
      source = "pulumi/snowflake"
    }
  }
}

# basic resource - no authentication secrets (none allowed)
resource "snowflake_apiintegrationgitrepositorytoken" "basic" {
  name                              = "git_repository_token_integration"
  no_allowed_authentication_secrets = true
  api_allowed_prefixes              = ["https://github.com/my-org/"]
  enabled                           = true
}
# with specific allowed secrets
resource "snowflake_apiintegrationgitrepositorytoken" "with_secrets" {
  name                           = "git_repository_token_integration_secrets"
  allowed_authentication_secrets = ["my_db.my_schema.my_secret"]
  api_allowed_prefixes           = ["https://github.com/my-org/"]
  enabled                        = true
}
# complete resource - all secrets allowed
resource "snowflake_apiintegrationgitrepositorytoken" "complete" {
  name                               = "git_repository_token_integration_complete"
  all_allowed_authentication_secrets = true
  api_allowed_prefixes               = ["https://github.com/my-org/"]
  api_blocked_prefixes               = ["https://github.com/my-org/private-repo/"]
  enabled                            = true
  comment                            = "Example Git Repository Token integration"
}

    Note If a field has a default value, it is shown next to the type in the schema.

    Create ApiIntegrationGitRepositoryToken Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ApiIntegrationGitRepositoryToken(name: string, args: ApiIntegrationGitRepositoryTokenArgs, opts?: CustomResourceOptions);
    @overload
def ApiIntegrationGitRepositoryToken(resource_name: str,
                                     args: ApiIntegrationGitRepositoryTokenArgs,
                                     opts: Optional[ResourceOptions] = None)

@overload
def ApiIntegrationGitRepositoryToken(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     api_allowed_prefixes: Optional[Sequence[str]] = None,
                                     enabled: Optional[bool] = None,
                                     all_allowed_authentication_secrets: Optional[bool] = None,
                                     allowed_authentication_secrets: Optional[Sequence[str]] = None,
                                     api_blocked_prefixes: Optional[Sequence[str]] = None,
                                     comment: Optional[str] = None,
                                     name: Optional[str] = None,
                                     no_allowed_authentication_secrets: Optional[bool] = None)
    func NewApiIntegrationGitRepositoryToken(ctx *Context, name string, args ApiIntegrationGitRepositoryTokenArgs, opts ...ResourceOption) (*ApiIntegrationGitRepositoryToken, error)
    public ApiIntegrationGitRepositoryToken(string name, ApiIntegrationGitRepositoryTokenArgs args, CustomResourceOptions? opts = null)
    public ApiIntegrationGitRepositoryToken(String name, ApiIntegrationGitRepositoryTokenArgs args)
public ApiIntegrationGitRepositoryToken(String name, ApiIntegrationGitRepositoryTokenArgs args, CustomResourceOptions options)

    type: snowflake:ApiIntegrationGitRepositoryToken
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "snowflake_apiintegrationgitrepositorytoken" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ApiIntegrationGitRepositoryTokenArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ApiIntegrationGitRepositoryTokenArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ApiIntegrationGitRepositoryTokenArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ApiIntegrationGitRepositoryTokenArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ApiIntegrationGitRepositoryTokenArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var apiIntegrationGitRepositoryTokenResource = new Snowflake.ApiIntegrationGitRepositoryToken("apiIntegrationGitRepositoryTokenResource", new()
{
    ApiAllowedPrefixes = new[]
    {
        "string",
    },
    Enabled = false,
    AllAllowedAuthenticationSecrets = false,
    AllowedAuthenticationSecrets = new[]
    {
        "string",
    },
    ApiBlockedPrefixes = new[]
    {
        "string",
    },
    Comment = "string",
    Name = "string",
    NoAllowedAuthenticationSecrets = false,
});

    example, err := snowflake.NewApiIntegrationGitRepositoryToken(ctx, "apiIntegrationGitRepositoryTokenResource", &snowflake.ApiIntegrationGitRepositoryTokenArgs{
	ApiAllowedPrefixes: pulumi.StringArray{
		pulumi.String("string"),
	},
	Enabled:                         pulumi.Bool(false),
	AllAllowedAuthenticationSecrets: pulumi.Bool(false),
	AllowedAuthenticationSecrets: pulumi.StringArray{
		pulumi.String("string"),
	},
	ApiBlockedPrefixes: pulumi.StringArray{
		pulumi.String("string"),
	},
	Comment:                        pulumi.String("string"),
	Name:                           pulumi.String("string"),
	NoAllowedAuthenticationSecrets: pulumi.Bool(false),
})

    resource "snowflake_apiintegrationgitrepositorytoken" "apiIntegrationGitRepositoryTokenResource" {
  api_allowed_prefixes               = ["string"]
  enabled                            = false
  all_allowed_authentication_secrets = false
  allowed_authentication_secrets     = ["string"]
  api_blocked_prefixes               = ["string"]
  comment                            = "string"
  name                               = "string"
  no_allowed_authentication_secrets  = false
}

    var apiIntegrationGitRepositoryTokenResource = new ApiIntegrationGitRepositoryToken("apiIntegrationGitRepositoryTokenResource", ApiIntegrationGitRepositoryTokenArgs.builder()
    .apiAllowedPrefixes("string")
    .enabled(false)
    .allAllowedAuthenticationSecrets(false)
    .allowedAuthenticationSecrets("string")
    .apiBlockedPrefixes("string")
    .comment("string")
    .name("string")
    .noAllowedAuthenticationSecrets(false)
    .build());

    api_integration_git_repository_token_resource = snowflake.ApiIntegrationGitRepositoryToken("apiIntegrationGitRepositoryTokenResource",
    api_allowed_prefixes=["string"],
    enabled=False,
    all_allowed_authentication_secrets=False,
    allowed_authentication_secrets=["string"],
    api_blocked_prefixes=["string"],
    comment="string",
    name="string",
    no_allowed_authentication_secrets=False)

    const apiIntegrationGitRepositoryTokenResource = new snowflake.ApiIntegrationGitRepositoryToken("apiIntegrationGitRepositoryTokenResource", {
    apiAllowedPrefixes: ["string"],
    enabled: false,
    allAllowedAuthenticationSecrets: false,
    allowedAuthenticationSecrets: ["string"],
    apiBlockedPrefixes: ["string"],
    comment: "string",
    name: "string",
    noAllowedAuthenticationSecrets: false,
});

    type: snowflake:ApiIntegrationGitRepositoryToken
properties:
    allAllowedAuthenticationSecrets: false
    allowedAuthenticationSecrets:
        - string
    apiAllowedPrefixes:
        - string
    apiBlockedPrefixes:
        - string
    comment: string
    enabled: false
    name: string
    noAllowedAuthenticationSecrets: false

    ApiIntegrationGitRepositoryToken Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ApiIntegrationGitRepositoryToken resource accepts the following input properties:

    ApiAllowedPrefixes List<string>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets List<string>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiBlockedPrefixes List<string>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiAllowedPrefixes []string
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets []string
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiBlockedPrefixes []string
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_allowed_prefixes list(string)
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets list(string)
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_blocked_prefixes list(string)
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes string[]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled boolean
    Specifies whether this API integration is enabled or disabled.
    allAllowedAuthenticationSecrets boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets string[]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiBlockedPrefixes string[]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_allowed_prefixes Sequence[str]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets Sequence[str]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_blocked_prefixes Sequence[str]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment str
    Specifies a comment for the integration.
    name str
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ApiIntegrationGitRepositoryToken resource produces the following output properties:

    DescribeOutputs List<ApiIntegrationGitRepositoryTokenDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Id string
    The provider-assigned unique ID for this managed resource.
    ShowOutputs List<ApiIntegrationGitRepositoryTokenShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    DescribeOutputs []ApiIntegrationGitRepositoryTokenDescribeOutput
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Id string
    The provider-assigned unique ID for this managed resource.
    ShowOutputs []ApiIntegrationGitRepositoryTokenShowOutput
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describe_outputs list(object)
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fully_qualified_name string
    Fully qualified name of the resource. For more information, see object name resolution.
    id string
    The provider-assigned unique ID for this managed resource.
    show_outputs list(object)
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describeOutputs List<ApiIntegrationGitRepositoryTokenDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    id String
    The provider-assigned unique ID for this managed resource.
    showOutputs List<ApiIntegrationGitRepositoryTokenShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describeOutputs ApiIntegrationGitRepositoryTokenDescribeOutput[]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    id string
    The provider-assigned unique ID for this managed resource.
    showOutputs ApiIntegrationGitRepositoryTokenShowOutput[]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describe_outputs Sequence[ApiIntegrationGitRepositoryTokenDescribeOutput]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fully_qualified_name str
    Fully qualified name of the resource. For more information, see object name resolution.
    id str
    The provider-assigned unique ID for this managed resource.
    show_outputs Sequence[ApiIntegrationGitRepositoryTokenShowOutput]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    describeOutputs List<Property Map>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    id String
    The provider-assigned unique ID for this managed resource.
    showOutputs List<Property Map>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.

    Look up Existing ApiIntegrationGitRepositoryToken Resource

    Get an existing ApiIntegrationGitRepositoryToken resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ApiIntegrationGitRepositoryTokenState, opts?: CustomResourceOptions): ApiIntegrationGitRepositoryToken
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        all_allowed_authentication_secrets: Optional[bool] = None,
        allowed_authentication_secrets: Optional[Sequence[str]] = None,
        api_allowed_prefixes: Optional[Sequence[str]] = None,
        api_blocked_prefixes: Optional[Sequence[str]] = None,
        comment: Optional[str] = None,
        describe_outputs: Optional[Sequence[ApiIntegrationGitRepositoryTokenDescribeOutputArgs]] = None,
        enabled: Optional[bool] = None,
        fully_qualified_name: Optional[str] = None,
        name: Optional[str] = None,
        no_allowed_authentication_secrets: Optional[bool] = None,
        show_outputs: Optional[Sequence[ApiIntegrationGitRepositoryTokenShowOutputArgs]] = None) -> ApiIntegrationGitRepositoryToken
    func GetApiIntegrationGitRepositoryToken(ctx *Context, name string, id IDInput, state *ApiIntegrationGitRepositoryTokenState, opts ...ResourceOption) (*ApiIntegrationGitRepositoryToken, error)
    public static ApiIntegrationGitRepositoryToken Get(string name, Input<string> id, ApiIntegrationGitRepositoryTokenState? state, CustomResourceOptions? opts = null)
    public static ApiIntegrationGitRepositoryToken get(String name, Output<String> id, ApiIntegrationGitRepositoryTokenState state, CustomResourceOptions options)
    resources:  _:    type: snowflake:ApiIntegrationGitRepositoryToken    get:      id: ${id}
    import {
  to = snowflake_apiintegrationgitrepositorytoken.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets List<string>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiAllowedPrefixes List<string>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    ApiBlockedPrefixes List<string>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    DescribeOutputs List<ApiIntegrationGitRepositoryTokenDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ShowOutputs List<ApiIntegrationGitRepositoryTokenShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    AllAllowedAuthenticationSecrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    AllowedAuthenticationSecrets []string
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ApiAllowedPrefixes []string
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    ApiBlockedPrefixes []string
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    Comment string
    Specifies a comment for the integration.
    DescribeOutputs []ApiIntegrationGitRepositoryTokenDescribeOutputArgs
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    Enabled bool
    Specifies whether this API integration is enabled or disabled.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    NoAllowedAuthenticationSecrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    ShowOutputs []ApiIntegrationGitRepositoryTokenShowOutputArgs
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets list(string)
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_allowed_prefixes list(string)
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    api_blocked_prefixes list(string)
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    describe_outputs list(object)
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    fully_qualified_name string
    Fully qualified name of the resource. For more information, see object name resolution.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    show_outputs list(object)
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    describeOutputs List<ApiIntegrationGitRepositoryTokenDescribeOutput>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    showOutputs List<ApiIntegrationGitRepositoryTokenShowOutput>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    allAllowedAuthenticationSecrets boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets string[]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes string[]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    apiBlockedPrefixes string[]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment string
    Specifies a comment for the integration.
    describeOutputs ApiIntegrationGitRepositoryTokenDescribeOutput[]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled boolean
    Specifies whether this API integration is enabled or disabled.
    fullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    name string
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    showOutputs ApiIntegrationGitRepositoryTokenShowOutput[]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    all_allowed_authentication_secrets bool
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowed_authentication_secrets Sequence[str]
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    api_allowed_prefixes Sequence[str]
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    api_blocked_prefixes Sequence[str]
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment str
    Specifies a comment for the integration.
    describe_outputs Sequence[ApiIntegrationGitRepositoryTokenDescribeOutputArgs]
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled bool
    Specifies whether this API integration is enabled or disabled.
    fully_qualified_name str
    Fully qualified name of the resource. For more information, see object name resolution.
    name str
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    no_allowed_authentication_secrets bool
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    show_outputs Sequence[ApiIntegrationGitRepositoryTokenShowOutputArgs]
    Outputs the result of SHOW API INTEGRATIONS for the given integration.
    allAllowedAuthenticationSecrets Boolean
    When set to true, all authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with noAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    allowedAuthenticationSecrets List<String>
    A list of fully-qualified secret identifiers (database.schema.secret) allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and noAllowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    apiAllowedPrefixes List<String>
    Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
    apiBlockedPrefixes List<String>
    Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
    comment String
    Specifies a comment for the integration.
    describeOutputs List<Property Map>
    Outputs the result of DESCRIBE API INTEGRATION for the given integration.
    enabled Boolean
    Specifies whether this API integration is enabled or disabled.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    name String
    Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    noAllowedAuthenticationSecrets Boolean
    When set to true, no authentication secrets are allowed to be used when authenticating to the git repository. Conflicts with allAllowedAuthenticationSecrets and allowedAuthenticationSecrets. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
    showOutputs List<Property Map>
    Outputs the result of SHOW API INTEGRATIONS for the given integration.

    Supporting Types

    ApiIntegrationGitRepositoryTokenDescribeOutput, ApiIntegrationGitRepositoryTokenDescribeOutputArgs

    ApiIntegrationGitRepositoryTokenShowOutput, ApiIntegrationGitRepositoryTokenShowOutputArgs

    ApiType string
    Category string
    Comment string
    CreatedOn string
    Enabled bool
    Name string
    ApiType string
    Category string
    Comment string
    CreatedOn string
    Enabled bool
    Name string
    api_type string
    category string
    comment string
    created_on string
    enabled bool
    name string
    apiType String
    category String
    comment String
    createdOn String
    enabled Boolean
    name String
    apiType string
    category string
    comment string
    createdOn string
    enabled boolean
    name string
    apiType String
    category String
    comment String
    createdOn String
    enabled Boolean
    name String

    Import

    $ pulumi import snowflake:index/apiIntegrationGitRepositoryToken:ApiIntegrationGitRepositoryToken example '"<name>"'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Snowflake pulumi/pulumi-snowflake
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the snowflake Terraform Provider.
    snowflake logo
    Viewing docs for Snowflake v2.18.0
    published on Wednesday, Jul 8, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-snowflake

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial