snowflake.getPasswordPolicies

Snowflake v2.15.0, May 9 26

Viewing docs for Snowflake v2.15.0
published on Saturday, May 9, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-snowflake

Viewing docs for Snowflake v2.15.0
published on Saturday, May 9, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-snowflake

!> Caution: Preview Feature This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to previewFeaturesEnabled field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.

!> Warning When using on.account or on.user filtering option without having any user-defined authentication policy, the data source skips the output of the Snowflake’s BUILT-IN authentication policy.

Data source used to get details of filtered password policies. Filtering is aligned with the current possibilities for SHOW PASSWORD POLICIES query. The results of SHOW and DESCRIBE are encapsulated in one output collection passwordPolicies.

Using getPasswordPolicies

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getPasswordPolicies(args: GetPasswordPoliciesArgs, opts?: InvokeOptions): Promise<GetPasswordPoliciesResult>
function getPasswordPoliciesOutput(args: GetPasswordPoliciesOutputArgs, opts?: InvokeOptions): Output<GetPasswordPoliciesResult>

def get_password_policies(in_: Optional[GetPasswordPoliciesIn] = None,
                          like: Optional[str] = None,
                          limit: Optional[GetPasswordPoliciesLimit] = None,
                          on: Optional[GetPasswordPoliciesOn] = None,
                          starts_with: Optional[str] = None,
                          with_describe: Optional[bool] = None,
                          opts: Optional[InvokeOptions] = None) -> GetPasswordPoliciesResult
def get_password_policies_output(in_: pulumi.Input[Optional[GetPasswordPoliciesInArgs]] = None,
                          like: pulumi.Input[Optional[str]] = None,
                          limit: pulumi.Input[Optional[GetPasswordPoliciesLimitArgs]] = None,
                          on: pulumi.Input[Optional[GetPasswordPoliciesOnArgs]] = None,
                          starts_with: pulumi.Input[Optional[str]] = None,
                          with_describe: pulumi.Input[Optional[bool]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetPasswordPoliciesResult]

func GetPasswordPolicies(ctx *Context, args *GetPasswordPoliciesArgs, opts ...InvokeOption) (*GetPasswordPoliciesResult, error)
func GetPasswordPoliciesOutput(ctx *Context, args *GetPasswordPoliciesOutputArgs, opts ...InvokeOption) GetPasswordPoliciesResultOutput

> Note: This function is named GetPasswordPolicies in the Go SDK.

public static class GetPasswordPolicies 
{
    public static Task<GetPasswordPoliciesResult> InvokeAsync(GetPasswordPoliciesArgs args, InvokeOptions? opts = null)
    public static Output<GetPasswordPoliciesResult> Invoke(GetPasswordPoliciesInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetPasswordPoliciesResult> getPasswordPolicies(GetPasswordPoliciesArgs args, InvokeOptions options)
public static Output<GetPasswordPoliciesResult> getPasswordPolicies(GetPasswordPoliciesArgs args, InvokeOptions options)

fn::invoke:
  function: snowflake:index/getPasswordPolicies:getPasswordPolicies
  arguments:
    # arguments dictionary

data "snowflake_getpasswordpolicies" "name" {
    # arguments
}

The following arguments are supported:

In GetPasswordPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
On GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

In GetPasswordPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
On GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

in object: IN clause to filter the list of objects
like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit object: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on object: Lists the policies that are effective on the specified object.
starts_with string: Filters the output with case-sensitive characters indicating the beginning of the object name.
with_describe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

in GetPasswordPoliciesIn: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

in GetPasswordPoliciesIn: IN clause to filter the list of objects
like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
startsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe boolean: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

in_ GetPasswordPoliciesIn: IN clause to filter the list of objects
like str: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
starts_with str: Filters the output with case-sensitive characters indicating the beginning of the object name.
with_describe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

in Property Map: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit Property Map: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on Property Map: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

getPasswordPolicies Result

The following output properties are available:

Id string: The provider-assigned unique ID for this managed resource.
PasswordPolicies List<GetPasswordPoliciesPasswordPolicy>: Holds the aggregated output of all password policy details queries.
In GetPasswordPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
On GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

Id string: The provider-assigned unique ID for this managed resource.
PasswordPolicies []GetPasswordPoliciesPasswordPolicy: Holds the aggregated output of all password policy details queries.
In GetPasswordPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
On GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

id string: The provider-assigned unique ID for this managed resource.
password_policies list(object): Holds the aggregated output of all password policy details queries.
in object: IN clause to filter the list of objects
like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit object: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on object: Lists the policies that are effective on the specified object.
starts_with string: Filters the output with case-sensitive characters indicating the beginning of the object name.
with_describe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

id String: The provider-assigned unique ID for this managed resource.
passwordPolicies List<GetPasswordPoliciesPasswordPolicy>: Holds the aggregated output of all password policy details queries.
in GetPasswordPoliciesIn: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

id string: The provider-assigned unique ID for this managed resource.
passwordPolicies GetPasswordPoliciesPasswordPolicy[]: Holds the aggregated output of all password policy details queries.
in GetPasswordPoliciesIn: IN clause to filter the list of objects
like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
startsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe boolean: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

id str: The provider-assigned unique ID for this managed resource.
password_policies Sequence[GetPasswordPoliciesPasswordPolicy]: Holds the aggregated output of all password policy details queries.
in_ GetPasswordPoliciesIn: IN clause to filter the list of objects
like str: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetPasswordPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on GetPasswordPoliciesOn: Lists the policies that are effective on the specified object.
starts_with str: Filters the output with case-sensitive characters indicating the beginning of the object name.
with_describe bool: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

id String: The provider-assigned unique ID for this managed resource.
passwordPolicies List<Property Map>: Holds the aggregated output of all password policy details queries.
in Property Map: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit Property Map: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with startsWith or like.
on Property Map: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC PASSWORD POLICY for each password policy returned by SHOW PASSWORD POLICIES. The output of describe is saved to the describeOutput field. By default this value is set to true.

Supporting Types

GetPasswordPoliciesIn

Account bool: Returns records for the entire account.
Application string: Returns records for the specified application.
ApplicationPackage string: Returns records for the specified application package.
Database string: Returns records for the current database in use or for a specified database.
Schema string: Returns records for the current schema in use or a specified schema. Use fully qualified name.

Account bool: Returns records for the entire account.
Application string: Returns records for the specified application.
ApplicationPackage string: Returns records for the specified application package.
Database string: Returns records for the current database in use or for a specified database.
Schema string: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account bool: Returns records for the entire account.
application string: Returns records for the specified application.
application_package string: Returns records for the specified application package.
database string: Returns records for the current database in use or for a specified database.
schema string: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account Boolean: Returns records for the entire account.
application String: Returns records for the specified application.
applicationPackage String: Returns records for the specified application package.
database String: Returns records for the current database in use or for a specified database.
schema String: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account boolean: Returns records for the entire account.
application string: Returns records for the specified application.
applicationPackage string: Returns records for the specified application package.
database string: Returns records for the current database in use or for a specified database.
schema string: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account bool: Returns records for the entire account.
application str: Returns records for the specified application.
application_package str: Returns records for the specified application package.
database str: Returns records for the current database in use or for a specified database.
schema str: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account Boolean: Returns records for the entire account.
application String: Returns records for the specified application.
applicationPackage String: Returns records for the specified application package.
database String: Returns records for the current database in use or for a specified database.
schema String: Returns records for the current schema in use or a specified schema. Use fully qualified name.

GetPasswordPoliciesLimit

Rows int: The maximum number of rows to return.
From string: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

Rows int: The maximum number of rows to return.
From string: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows number: The maximum number of rows to return.
from string: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows Integer: The maximum number of rows to return.
from String: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows number: The maximum number of rows to return.
from string: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows int: The maximum number of rows to return.
from_ str: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows Number: The maximum number of rows to return.
from String: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

GetPasswordPoliciesOn

Account bool: Returns records for the entire account.
User string: Returns records for the specified user.

Account bool: Returns records for the entire account.
User string: Returns records for the specified user.

account bool: Returns records for the entire account.
user string: Returns records for the specified user.

account Boolean: Returns records for the entire account.
user String: Returns records for the specified user.

account boolean: Returns records for the entire account.
user string: Returns records for the specified user.

account bool: Returns records for the entire account.
user str: Returns records for the specified user.

account Boolean: Returns records for the entire account.
user String: Returns records for the specified user.

GetPasswordPoliciesPasswordPolicy

DescribeOutputs List<GetPasswordPoliciesPasswordPolicyDescribeOutput>: Holds the output of DESCRIBE PASSWORD POLICY.
ShowOutputs List<GetPasswordPoliciesPasswordPolicyShowOutput>: Holds the output of SHOW PASSWORD POLICIES.

DescribeOutputs []GetPasswordPoliciesPasswordPolicyDescribeOutput: Holds the output of DESCRIBE PASSWORD POLICY.
ShowOutputs []GetPasswordPoliciesPasswordPolicyShowOutput: Holds the output of SHOW PASSWORD POLICIES.

describe_outputs list(object): Holds the output of DESCRIBE PASSWORD POLICY.
show_outputs list(object): Holds the output of SHOW PASSWORD POLICIES.