published on Thursday, Jun 25, 2026 by Pulumi
published on Thursday, Jun 25, 2026 by Pulumi
Caution: Preview Feature This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to
previewFeaturesEnabledfield in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as snowflake from "@pulumi/snowflake";
const snowflakePrivateLink = snowflake.getSystemGetPrivateLinkConfig({});
const snowflakePrivateLinkSecurityGroup = new aws.index.SecurityGroup("snowflake_private_link", {
vpcId: vpcId,
ingress: [
{
fromPort: 80,
toPort: 80,
cidrBlocks: vpcCidr,
protocol: "tcp",
},
{
fromPort: 443,
toPort: 443,
cidrBlocks: vpcCidr,
protocol: "tcp",
},
],
});
const snowflakePrivateLinkVpcEndpoint = new aws.index.VpcEndpoint("snowflake_private_link", {
vpcId: vpcId,
serviceName: snowflakePrivateLink.awsVpceId,
vpcEndpointType: "Interface",
securityGroupIds: [snowflakePrivateLinkSecurityGroup.id],
subnetIds: subnetIds,
privateDnsEnabled: false,
});
const snowflakePrivateLinkRoute53Zone = new aws.index.Route53Zone("snowflake_private_link", {
name: "privatelink.snowflakecomputing.com",
vpc: [{
vpcId: vpcId,
}],
});
const snowflakePrivateLinkUrl = new aws.index.Route53Record("snowflake_private_link_url", {
zoneId: snowflakePrivateLinkRoute53Zone.zoneId,
name: snowflakePrivateLink.accountUrl,
type: "CNAME",
ttl: "300",
records: [snowflakePrivateLinkVpcEndpoint.dnsEntry[0].dns_name],
});
const snowflakePrivateLinkOcspUrl = new aws.index.Route53Record("snowflake_private_link_ocsp_url", {
zoneId: snowflakePrivateLinkRoute53Zone.zoneId,
name: snowflakePrivateLink.ocspUrl,
type: "CNAME",
ttl: "300",
records: [snowflakePrivateLinkVpcEndpoint.dnsEntry[0].dns_name],
});
import pulumi
import pulumi_aws as aws
import pulumi_snowflake as snowflake
snowflake_private_link = snowflake.get_system_get_private_link_config()
snowflake_private_link_security_group = aws.SecurityGroup("snowflake_private_link",
vpc_id=vpc_id,
ingress=[
{
fromPort: 80,
toPort: 80,
cidrBlocks: vpc_cidr,
protocol: tcp,
},
{
fromPort: 443,
toPort: 443,
cidrBlocks: vpc_cidr,
protocol: tcp,
},
])
snowflake_private_link_vpc_endpoint = aws.VpcEndpoint("snowflake_private_link",
vpc_id=vpc_id,
service_name=snowflake_private_link.aws_vpce_id,
vpc_endpoint_type=Interface,
security_group_ids=[snowflake_private_link_security_group.id],
subnet_ids=subnet_ids,
private_dns_enabled=False)
snowflake_private_link_route53_zone = aws.Route53Zone("snowflake_private_link",
name=privatelink.snowflakecomputing.com,
vpc=[{
vpcId: vpc_id,
}])
snowflake_private_link_url = aws.Route53Record("snowflake_private_link_url",
zone_id=snowflake_private_link_route53_zone.zone_id,
name=snowflake_private_link.account_url,
type=CNAME,
ttl=300,
records=[snowflake_private_link_vpc_endpoint.dns_entry[0].dns_name])
snowflake_private_link_ocsp_url = aws.Route53Record("snowflake_private_link_ocsp_url",
zone_id=snowflake_private_link_route53_zone.zone_id,
name=snowflake_private_link.ocsp_url,
type=CNAME,
ttl=300,
records=[snowflake_private_link_vpc_endpoint.dns_entry[0].dns_name])
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws"
"github.com/pulumi/pulumi-snowflake/sdk/v2/go/snowflake"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
snowflakePrivateLink, err := snowflake.GetSystemGetPrivateLinkConfig(ctx, map[string]interface{}{}, nil)
if err != nil {
return err
}
snowflakePrivateLinkSecurityGroup, err := aws.NewSecurityGroup(ctx, "snowflake_private_link", &aws.SecurityGroupArgs{
VpcId: vpcId,
Ingress: []interface{}{
map[string]interface{}{
"fromPort": 80,
"toPort": 80,
"cidrBlocks": vpcCidr,
"protocol": "tcp",
},
map[string]interface{}{
"fromPort": 443,
"toPort": 443,
"cidrBlocks": vpcCidr,
"protocol": "tcp",
},
},
})
if err != nil {
return err
}
snowflakePrivateLinkVpcEndpoint, err := aws.NewVpcEndpoint(ctx, "snowflake_private_link", &aws.VpcEndpointArgs{
VpcId: vpcId,
ServiceName: snowflakePrivateLink.AwsVpceId,
VpcEndpointType: "Interface",
SecurityGroupIds: []interface{}{
snowflakePrivateLinkSecurityGroup.Id,
},
SubnetIds: subnetIds,
PrivateDnsEnabled: false,
})
if err != nil {
return err
}
snowflakePrivateLinkRoute53Zone, err := aws.NewRoute53Zone(ctx, "snowflake_private_link", &aws.Route53ZoneArgs{
Name: "privatelink.snowflakecomputing.com",
Vpc: []map[string]interface{}{
map[string]interface{}{
"vpcId": vpcId,
},
},
})
if err != nil {
return err
}
_, err = aws.NewRoute53Record(ctx, "snowflake_private_link_url", &aws.Route53RecordArgs{
ZoneId: snowflakePrivateLinkRoute53Zone.ZoneId,
Name: snowflakePrivateLink.AccountUrl,
Type: "CNAME",
Ttl: "300",
Records: []interface{}{
snowflakePrivateLinkVpcEndpoint.DnsEntry[0].Dns_name,
},
})
if err != nil {
return err
}
_, err = aws.NewRoute53Record(ctx, "snowflake_private_link_ocsp_url", &aws.Route53RecordArgs{
ZoneId: snowflakePrivateLinkRoute53Zone.ZoneId,
Name: snowflakePrivateLink.OcspUrl,
Type: "CNAME",
Ttl: "300",
Records: []interface{}{
snowflakePrivateLinkVpcEndpoint.DnsEntry[0].Dns_name,
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
using Snowflake = Pulumi.Snowflake;
return await Deployment.RunAsync(() =>
{
var snowflakePrivateLink = Snowflake.GetSystemGetPrivateLinkConfig.Invoke();
var snowflakePrivateLinkSecurityGroup = new Aws.SecurityGroup("snowflake_private_link", new()
{
VpcId = vpcId,
Ingress = new[]
{
{
{ "fromPort", 80 },
{ "toPort", 80 },
{ "cidrBlocks", vpcCidr },
{ "protocol", "tcp" },
},
{
{ "fromPort", 443 },
{ "toPort", 443 },
{ "cidrBlocks", vpcCidr },
{ "protocol", "tcp" },
},
},
});
var snowflakePrivateLinkVpcEndpoint = new Aws.VpcEndpoint("snowflake_private_link", new()
{
VpcId = vpcId,
ServiceName = snowflakePrivateLink.Apply(getSystemGetPrivateLinkConfigResult => getSystemGetPrivateLinkConfigResult.AwsVpceId),
VpcEndpointType = "Interface",
SecurityGroupIds = new[]
{
snowflakePrivateLinkSecurityGroup.Id,
},
SubnetIds = subnetIds,
PrivateDnsEnabled = false,
});
var snowflakePrivateLinkRoute53Zone = new Aws.Route53Zone("snowflake_private_link", new()
{
Name = "privatelink.snowflakecomputing.com",
Vpc = new[]
{
{
{ "vpcId", vpcId },
},
},
});
var snowflakePrivateLinkUrl = new Aws.Route53Record("snowflake_private_link_url", new()
{
ZoneId = snowflakePrivateLinkRoute53Zone.ZoneId,
Name = snowflakePrivateLink.Apply(getSystemGetPrivateLinkConfigResult => getSystemGetPrivateLinkConfigResult.AccountUrl),
Type = "CNAME",
Ttl = "300",
Records = new[]
{
snowflakePrivateLinkVpcEndpoint.DnsEntry[0].Dns_name,
},
});
var snowflakePrivateLinkOcspUrl = new Aws.Route53Record("snowflake_private_link_ocsp_url", new()
{
ZoneId = snowflakePrivateLinkRoute53Zone.ZoneId,
Name = snowflakePrivateLink.Apply(getSystemGetPrivateLinkConfigResult => getSystemGetPrivateLinkConfigResult.OcspUrl),
Type = "CNAME",
Ttl = "300",
Records = new[]
{
snowflakePrivateLinkVpcEndpoint.DnsEntry[0].Dns_name,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.snowflake.SnowflakeFunctions;
import com.pulumi.aws.SecurityGroup;
import com.pulumi.aws.SecurityGroupArgs;
import com.pulumi.aws.VpcEndpoint;
import com.pulumi.aws.VpcEndpointArgs;
import com.pulumi.aws.Route53Zone;
import com.pulumi.aws.Route53ZoneArgs;
import com.pulumi.aws.Route53Record;
import com.pulumi.aws.Route53RecordArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var snowflakePrivateLink = SnowflakeFunctions.getSystemGetPrivateLinkConfig(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference);
var snowflakePrivateLinkSecurityGroup = new SecurityGroup("snowflakePrivateLinkSecurityGroup", SecurityGroupArgs.builder()
.vpcId(vpcId)
.ingress(Arrays.asList(
Map.ofEntries(
Map.entry("fromPort", 80),
Map.entry("toPort", 80),
Map.entry("cidrBlocks", vpcCidr),
Map.entry("protocol", "tcp")
),
Map.ofEntries(
Map.entry("fromPort", 443),
Map.entry("toPort", 443),
Map.entry("cidrBlocks", vpcCidr),
Map.entry("protocol", "tcp")
)))
.build());
var snowflakePrivateLinkVpcEndpoint = new VpcEndpoint("snowflakePrivateLinkVpcEndpoint", VpcEndpointArgs.builder()
.vpcId(vpcId)
.serviceName(snowflakePrivateLink.awsVpceId())
.vpcEndpointType("Interface")
.securityGroupIds(Arrays.asList(snowflakePrivateLinkSecurityGroup.id()))
.subnetIds(subnetIds)
.privateDnsEnabled(false)
.build());
var snowflakePrivateLinkRoute53Zone = new Route53Zone("snowflakePrivateLinkRoute53Zone", Route53ZoneArgs.builder()
.name("privatelink.snowflakecomputing.com")
.vpc(Arrays.asList(Map.of("vpcId", vpcId)))
.build());
var snowflakePrivateLinkUrl = new Route53Record("snowflakePrivateLinkUrl", Route53RecordArgs.builder()
.zoneId(snowflakePrivateLinkRoute53Zone.zoneId())
.name(snowflakePrivateLink.accountUrl())
.type("CNAME")
.ttl("300")
.records(Arrays.asList(snowflakePrivateLinkVpcEndpoint.dnsEntry()[0].dns_name()))
.build());
var snowflakePrivateLinkOcspUrl = new Route53Record("snowflakePrivateLinkOcspUrl", Route53RecordArgs.builder()
.zoneId(snowflakePrivateLinkRoute53Zone.zoneId())
.name(snowflakePrivateLink.ocspUrl())
.type("CNAME")
.ttl("300")
.records(Arrays.asList(snowflakePrivateLinkVpcEndpoint.dnsEntry()[0].dns_name()))
.build());
}
}
resources:
snowflakePrivateLinkSecurityGroup:
type: aws:SecurityGroup
name: snowflake_private_link
properties:
vpcId: ${vpcId}
ingress:
- fromPort: 80
toPort: 80
cidrBlocks: ${vpcCidr}
protocol: tcp
- fromPort: 443
toPort: 443
cidrBlocks: ${vpcCidr}
protocol: tcp
snowflakePrivateLinkVpcEndpoint:
type: aws:VpcEndpoint
name: snowflake_private_link
properties:
vpcId: ${vpcId}
serviceName: ${snowflakePrivateLink.awsVpceId}
vpcEndpointType: Interface
securityGroupIds:
- ${snowflakePrivateLinkSecurityGroup.id}
subnetIds: ${subnetIds}
privateDnsEnabled: false
snowflakePrivateLinkRoute53Zone:
type: aws:Route53Zone
name: snowflake_private_link
properties:
name: privatelink.snowflakecomputing.com
vpc:
- vpcId: ${vpcId}
snowflakePrivateLinkUrl:
type: aws:Route53Record
name: snowflake_private_link_url
properties:
zoneId: ${snowflakePrivateLinkRoute53Zone.zoneId}
name: ${snowflakePrivateLink.accountUrl}
type: CNAME
ttl: '300'
records:
- ${snowflakePrivateLinkVpcEndpoint.dnsEntry[0]["dns_name"]}
snowflakePrivateLinkOcspUrl:
type: aws:Route53Record
name: snowflake_private_link_ocsp_url
properties:
zoneId: ${snowflakePrivateLinkRoute53Zone.zoneId}
name: ${snowflakePrivateLink.ocspUrl}
type: CNAME
ttl: '300'
records:
- ${snowflakePrivateLinkVpcEndpoint.dnsEntry[0]["dns_name"]}
variables:
snowflakePrivateLink:
fn::invoke:
function: snowflake:getSystemGetPrivateLinkConfig
arguments: {}
pulumi {
required_providers {
aws = {
source = "pulumi/aws"
}
snowflake = {
source = "pulumi/snowflake"
}
}
}
data "snowflake_getsystemgetprivatelinkconfig" "snowflakePrivateLink" {
}
resource "aws_securitygroup" "snowflake_private_link" {
vpc_id = vpcId
ingress = [{
"fromPort" = 80
"toPort" = 80
"cidrBlocks" = vpcCidr
"protocol" = "tcp"
}, {
"fromPort" = 443
"toPort" = 443
"cidrBlocks" = vpcCidr
"protocol" = "tcp"
}]
}
resource "aws_vpcendpoint" "snowflake_private_link" {
vpc_id = vpcId
service_name = data.snowflake_getsystemgetprivatelinkconfig.snowflakePrivateLink.aws_vpce_id
vpc_endpoint_type = "Interface"
security_group_ids = [aws_securitygroup.snowflake_private_link.id]
subnet_ids = subnetIds
private_dns_enabled = false
}
resource "aws_route53zone" "snowflake_private_link" {
name = "privatelink.snowflakecomputing.com"
vpc = [{
"vpcId" = vpcId
}]
}
resource "aws_route53record" "snowflake_private_link_url" {
zone_id = aws_route53zone.snowflake_private_link.zoneId
name = data.snowflake_getsystemgetprivatelinkconfig.snowflakePrivateLink.account_url
type = "CNAME"
ttl = "300"
records = [aws_vpcendpoint.snowflake_private_link.dnsEntry[0]["dns_name"]]
}
resource "aws_route53record" "snowflake_private_link_ocsp_url" {
zone_id = aws_route53zone.snowflake_private_link.zoneId
name = data.snowflake_getsystemgetprivatelinkconfig.snowflakePrivateLink.ocsp_url
type = "CNAME"
ttl = "300"
records = [aws_vpcendpoint.snowflake_private_link.dnsEntry[0]["dns_name"]]
}
Note If a field has a default value, it is shown next to the type in the schema.
Using getSystemGetPrivateLinkConfig
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getSystemGetPrivateLinkConfig(opts?: InvokeOptions): Promise<GetSystemGetPrivateLinkConfigResult>
function getSystemGetPrivateLinkConfigOutput(opts?: InvokeOptions): Output<GetSystemGetPrivateLinkConfigResult>def get_system_get_private_link_config(opts: Optional[InvokeOptions] = None) -> GetSystemGetPrivateLinkConfigResult
def get_system_get_private_link_config_output(opts: Optional[InvokeOptions] = None) -> Output[GetSystemGetPrivateLinkConfigResult]func GetSystemGetPrivateLinkConfig(ctx *Context, opts ...InvokeOption) (*GetSystemGetPrivateLinkConfigResult, error)
func GetSystemGetPrivateLinkConfigOutput(ctx *Context, opts ...InvokeOption) GetSystemGetPrivateLinkConfigResultOutput> Note: This function is named GetSystemGetPrivateLinkConfig in the Go SDK.
public static class GetSystemGetPrivateLinkConfig
{
public static Task<GetSystemGetPrivateLinkConfigResult> InvokeAsync(InvokeOptions? opts = null)
public static Output<GetSystemGetPrivateLinkConfigResult> Invoke(InvokeOptions? opts = null)
}public static CompletableFuture<GetSystemGetPrivateLinkConfigResult> getSystemGetPrivateLinkConfig(InvokeOptions options)
public static Output<GetSystemGetPrivateLinkConfigResult> getSystemGetPrivateLinkConfig(InvokeOptions options)
fn::invoke:
function: snowflake:index/getSystemGetPrivateLinkConfig:getSystemGetPrivateLinkConfig
arguments:
# arguments dictionarydata "snowflake_getsystemgetprivatelinkconfig" "name" {
# arguments
}getSystemGetPrivateLinkConfig Result
The following output properties are available:
- Account
Name string - The name of your Snowflake account.
- Account
Url string - The URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- App
Service stringPrivatelink Url - The PrivateLink endpoint URL used to route traffic to Snowflake-hosted app services, such as Streamlit or Notebooks.
- Aws
Vpce stringId - The AWS VPCE ID for your account.
- Azure
Pls stringId - The Microsoft Azure Private Link Service ID for your account identifier in the format of an alias.
- Id string
- The provider-assigned unique ID for this managed resource.
- Internal
Stage string - The endpoint to connect to your Snowflake internal stage using AWS PrivateLink or Azure Private Link.
- Ocsp
Url string - The OCSP URL corresponding to your Snowflake account identifier.
- Privatelink
Account stringPrincipal - The AWS principal ARN to allow for outbound private connections to your VPC endpoint services.
- Privatelink
Connection stringOcsp Urls - The list of OCSP URLs for use with redirecting client connections when using client redirect.
- Privatelink
Connection stringUrls - The private connectivity connection URLs for your account when using client redirect.
- Privatelink
Dashed stringUrls For Duo - The list of dashed variant URLs for Duo Multi-Factor Authentication, shown only when the hostname contains an underscore.
- Privatelink
Gcp stringService Attachment - The endpoint for the Snowflake service when using Google Cloud Private Service Connect.
- Privatelink
Snowflake stringManaged Storage Volume Fs - The endpoint for failsafe Snowflake-managed storage volumes when using Azure Private Link.
- Privatelink
Snowflake stringManaged Storage Volume Nfs - The endpoint for non-failsafe Snowflake-managed storage volumes when using Azure Private Link.
- Regionless
Account stringUrl - The regionless URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- Regionless
Privatelink stringOcsp Url - The regionless OCSP URL to connect to Snowflake OCSP using private connectivity.
- Regionless
Snowsight stringUrl - The URL for your organization to access Snowsight using Private Connectivity to the Snowflake Service.
- Snowsight
Url string - The URL containing the cloud region to access Snowsight and the Snowflake Marketplace using Private Connectivity to the Snowflake Service.
- Account
Name string - The name of your Snowflake account.
- Account
Url string - The URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- App
Service stringPrivatelink Url - The PrivateLink endpoint URL used to route traffic to Snowflake-hosted app services, such as Streamlit or Notebooks.
- Aws
Vpce stringId - The AWS VPCE ID for your account.
- Azure
Pls stringId - The Microsoft Azure Private Link Service ID for your account identifier in the format of an alias.
- Id string
- The provider-assigned unique ID for this managed resource.
- Internal
Stage string - The endpoint to connect to your Snowflake internal stage using AWS PrivateLink or Azure Private Link.
- Ocsp
Url string - The OCSP URL corresponding to your Snowflake account identifier.
- Privatelink
Account stringPrincipal - The AWS principal ARN to allow for outbound private connections to your VPC endpoint services.
- Privatelink
Connection stringOcsp Urls - The list of OCSP URLs for use with redirecting client connections when using client redirect.
- Privatelink
Connection stringUrls - The private connectivity connection URLs for your account when using client redirect.
- Privatelink
Dashed stringUrls For Duo - The list of dashed variant URLs for Duo Multi-Factor Authentication, shown only when the hostname contains an underscore.
- Privatelink
Gcp stringService Attachment - The endpoint for the Snowflake service when using Google Cloud Private Service Connect.
- Privatelink
Snowflake stringManaged Storage Volume Fs - The endpoint for failsafe Snowflake-managed storage volumes when using Azure Private Link.
- Privatelink
Snowflake stringManaged Storage Volume Nfs - The endpoint for non-failsafe Snowflake-managed storage volumes when using Azure Private Link.
- Regionless
Account stringUrl - The regionless URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- Regionless
Privatelink stringOcsp Url - The regionless OCSP URL to connect to Snowflake OCSP using private connectivity.
- Regionless
Snowsight stringUrl - The URL for your organization to access Snowsight using Private Connectivity to the Snowflake Service.
- Snowsight
Url string - The URL containing the cloud region to access Snowsight and the Snowflake Marketplace using Private Connectivity to the Snowflake Service.
- account_
name string - The name of your Snowflake account.
- account_
url string - The URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- app_
service_ stringprivatelink_ url - The PrivateLink endpoint URL used to route traffic to Snowflake-hosted app services, such as Streamlit or Notebooks.
- aws_
vpce_ stringid - The AWS VPCE ID for your account.
- azure_
pls_ stringid - The Microsoft Azure Private Link Service ID for your account identifier in the format of an alias.
- id string
- The provider-assigned unique ID for this managed resource.
- internal_
stage string - The endpoint to connect to your Snowflake internal stage using AWS PrivateLink or Azure Private Link.
- ocsp_
url string - The OCSP URL corresponding to your Snowflake account identifier.
- privatelink_
account_ stringprincipal - The AWS principal ARN to allow for outbound private connections to your VPC endpoint services.
- privatelink_
connection_ stringocsp_ urls - The list of OCSP URLs for use with redirecting client connections when using client redirect.
- privatelink_
connection_ stringurls - The private connectivity connection URLs for your account when using client redirect.
- privatelink_
dashed_ stringurls_ for_ duo - The list of dashed variant URLs for Duo Multi-Factor Authentication, shown only when the hostname contains an underscore.
- privatelink_
gcp_ stringservice_ attachment - The endpoint for the Snowflake service when using Google Cloud Private Service Connect.
- privatelink_
snowflake_ stringmanaged_ storage_ volume_ fs - The endpoint for failsafe Snowflake-managed storage volumes when using Azure Private Link.
- privatelink_
snowflake_ stringmanaged_ storage_ volume_ nfs - The endpoint for non-failsafe Snowflake-managed storage volumes when using Azure Private Link.
- regionless_
account_ stringurl - The regionless URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- regionless_
privatelink_ stringocsp_ url - The regionless OCSP URL to connect to Snowflake OCSP using private connectivity.
- regionless_
snowsight_ stringurl - The URL for your organization to access Snowsight using Private Connectivity to the Snowflake Service.
- snowsight_
url string - The URL containing the cloud region to access Snowsight and the Snowflake Marketplace using Private Connectivity to the Snowflake Service.
- account
Name String - The name of your Snowflake account.
- account
Url String - The URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- app
Service StringPrivatelink Url - The PrivateLink endpoint URL used to route traffic to Snowflake-hosted app services, such as Streamlit or Notebooks.
- aws
Vpce StringId - The AWS VPCE ID for your account.
- azure
Pls StringId - The Microsoft Azure Private Link Service ID for your account identifier in the format of an alias.
- id String
- The provider-assigned unique ID for this managed resource.
- internal
Stage String - The endpoint to connect to your Snowflake internal stage using AWS PrivateLink or Azure Private Link.
- ocsp
Url String - The OCSP URL corresponding to your Snowflake account identifier.
- privatelink
Account StringPrincipal - The AWS principal ARN to allow for outbound private connections to your VPC endpoint services.
- privatelink
Connection StringOcsp Urls - The list of OCSP URLs for use with redirecting client connections when using client redirect.
- privatelink
Connection StringUrls - The private connectivity connection URLs for your account when using client redirect.
- privatelink
Dashed StringUrls For Duo - The list of dashed variant URLs for Duo Multi-Factor Authentication, shown only when the hostname contains an underscore.
- privatelink
Gcp StringService Attachment - The endpoint for the Snowflake service when using Google Cloud Private Service Connect.
- privatelink
Snowflake StringManaged Storage Volume Fs - The endpoint for failsafe Snowflake-managed storage volumes when using Azure Private Link.
- privatelink
Snowflake StringManaged Storage Volume Nfs - The endpoint for non-failsafe Snowflake-managed storage volumes when using Azure Private Link.
- regionless
Account StringUrl - The regionless URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- regionless
Privatelink StringOcsp Url - The regionless OCSP URL to connect to Snowflake OCSP using private connectivity.
- regionless
Snowsight StringUrl - The URL for your organization to access Snowsight using Private Connectivity to the Snowflake Service.
- snowsight
Url String - The URL containing the cloud region to access Snowsight and the Snowflake Marketplace using Private Connectivity to the Snowflake Service.
- account
Name string - The name of your Snowflake account.
- account
Url string - The URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- app
Service stringPrivatelink Url - The PrivateLink endpoint URL used to route traffic to Snowflake-hosted app services, such as Streamlit or Notebooks.
- aws
Vpce stringId - The AWS VPCE ID for your account.
- azure
Pls stringId - The Microsoft Azure Private Link Service ID for your account identifier in the format of an alias.
- id string
- The provider-assigned unique ID for this managed resource.
- internal
Stage string - The endpoint to connect to your Snowflake internal stage using AWS PrivateLink or Azure Private Link.
- ocsp
Url string - The OCSP URL corresponding to your Snowflake account identifier.
- privatelink
Account stringPrincipal - The AWS principal ARN to allow for outbound private connections to your VPC endpoint services.
- privatelink
Connection stringOcsp Urls - The list of OCSP URLs for use with redirecting client connections when using client redirect.
- privatelink
Connection stringUrls - The private connectivity connection URLs for your account when using client redirect.
- privatelink
Dashed stringUrls For Duo - The list of dashed variant URLs for Duo Multi-Factor Authentication, shown only when the hostname contains an underscore.
- privatelink
Gcp stringService Attachment - The endpoint for the Snowflake service when using Google Cloud Private Service Connect.
- privatelink
Snowflake stringManaged Storage Volume Fs - The endpoint for failsafe Snowflake-managed storage volumes when using Azure Private Link.
- privatelink
Snowflake stringManaged Storage Volume Nfs - The endpoint for non-failsafe Snowflake-managed storage volumes when using Azure Private Link.
- regionless
Account stringUrl - The regionless URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- regionless
Privatelink stringOcsp Url - The regionless OCSP URL to connect to Snowflake OCSP using private connectivity.
- regionless
Snowsight stringUrl - The URL for your organization to access Snowsight using Private Connectivity to the Snowflake Service.
- snowsight
Url string - The URL containing the cloud region to access Snowsight and the Snowflake Marketplace using Private Connectivity to the Snowflake Service.
- account_
name str - The name of your Snowflake account.
- account_
url str - The URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- app_
service_ strprivatelink_ url - The PrivateLink endpoint URL used to route traffic to Snowflake-hosted app services, such as Streamlit or Notebooks.
- aws_
vpce_ strid - The AWS VPCE ID for your account.
- azure_
pls_ strid - The Microsoft Azure Private Link Service ID for your account identifier in the format of an alias.
- id str
- The provider-assigned unique ID for this managed resource.
- internal_
stage str - The endpoint to connect to your Snowflake internal stage using AWS PrivateLink or Azure Private Link.
- ocsp_
url str - The OCSP URL corresponding to your Snowflake account identifier.
- privatelink_
account_ strprincipal - The AWS principal ARN to allow for outbound private connections to your VPC endpoint services.
- privatelink_
connection_ strocsp_ urls - The list of OCSP URLs for use with redirecting client connections when using client redirect.
- privatelink_
connection_ strurls - The private connectivity connection URLs for your account when using client redirect.
- privatelink_
dashed_ strurls_ for_ duo - The list of dashed variant URLs for Duo Multi-Factor Authentication, shown only when the hostname contains an underscore.
- privatelink_
gcp_ strservice_ attachment - The endpoint for the Snowflake service when using Google Cloud Private Service Connect.
- privatelink_
snowflake_ strmanaged_ storage_ volume_ fs - The endpoint for failsafe Snowflake-managed storage volumes when using Azure Private Link.
- privatelink_
snowflake_ strmanaged_ storage_ volume_ nfs - The endpoint for non-failsafe Snowflake-managed storage volumes when using Azure Private Link.
- regionless_
account_ strurl - The regionless URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- regionless_
privatelink_ strocsp_ url - The regionless OCSP URL to connect to Snowflake OCSP using private connectivity.
- regionless_
snowsight_ strurl - The URL for your organization to access Snowsight using Private Connectivity to the Snowflake Service.
- snowsight_
url str - The URL containing the cloud region to access Snowsight and the Snowflake Marketplace using Private Connectivity to the Snowflake Service.
- account
Name String - The name of your Snowflake account.
- account
Url String - The URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- app
Service StringPrivatelink Url - The PrivateLink endpoint URL used to route traffic to Snowflake-hosted app services, such as Streamlit or Notebooks.
- aws
Vpce StringId - The AWS VPCE ID for your account.
- azure
Pls StringId - The Microsoft Azure Private Link Service ID for your account identifier in the format of an alias.
- id String
- The provider-assigned unique ID for this managed resource.
- internal
Stage String - The endpoint to connect to your Snowflake internal stage using AWS PrivateLink or Azure Private Link.
- ocsp
Url String - The OCSP URL corresponding to your Snowflake account identifier.
- privatelink
Account StringPrincipal - The AWS principal ARN to allow for outbound private connections to your VPC endpoint services.
- privatelink
Connection StringOcsp Urls - The list of OCSP URLs for use with redirecting client connections when using client redirect.
- privatelink
Connection StringUrls - The private connectivity connection URLs for your account when using client redirect.
- privatelink
Dashed StringUrls For Duo - The list of dashed variant URLs for Duo Multi-Factor Authentication, shown only when the hostname contains an underscore.
- privatelink
Gcp StringService Attachment - The endpoint for the Snowflake service when using Google Cloud Private Service Connect.
- privatelink
Snowflake StringManaged Storage Volume Fs - The endpoint for failsafe Snowflake-managed storage volumes when using Azure Private Link.
- privatelink
Snowflake StringManaged Storage Volume Nfs - The endpoint for non-failsafe Snowflake-managed storage volumes when using Azure Private Link.
- regionless
Account StringUrl - The regionless URL to connect to your Snowflake account using AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect.
- regionless
Privatelink StringOcsp Url - The regionless OCSP URL to connect to Snowflake OCSP using private connectivity.
- regionless
Snowsight StringUrl - The URL for your organization to access Snowsight using Private Connectivity to the Snowflake Service.
- snowsight
Url String - The URL containing the cloud region to access Snowsight and the Snowflake Marketplace using Private Connectivity to the Snowflake Service.
Package Details
- Repository
- Snowflake pulumi/pulumi-snowflake
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
snowflakeTerraform Provider.
published on Thursday, Jun 25, 2026 by Pulumi