PasswordPolicy

Snowflake v2.15.0, May 9 26

Viewing docs for Snowflake v2.15.0
published on Saturday, May 9, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-snowflake

Viewing docs for Snowflake v2.15.0
published on Saturday, May 9, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-snowflake

!> Caution: Preview Feature This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to previewFeaturesEnabled field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.

!> Note According to Snowflake docs, a password policy cannot be dropped successfully if it is currently assigned to another object. Currently, the provider does not unassign such objects automatically. Before dropping the resource, first unassign the policy from the relevant objects. See guide for more details.

A password policy specifies the requirements that must be met to create and reset a password to authenticate to Snowflake.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as snowflake from "@pulumi/snowflake";

//# Minimal
const basic = new snowflake.PasswordPolicy("basic", {
    database: "database_name",
    schema: "schema_name",
    name: "password_policy_name",
});
//# Complete (with every optional set)
const complete = new snowflake.PasswordPolicy("complete", {
    database: "database_name",
    schema: "schema_name",
    name: "password_policy_name",
    minLength: 10,
    maxLength: 30,
    minUpperCaseChars: 2,
    minLowerCaseChars: 3,
    minNumericChars: 4,
    minSpecialChars: 5,
    minAgeDays: 1,
    maxAgeDays: 30,
    maxRetries: 3,
    lockoutTimeMins: 30,
    history: 5,
    comment: "My password policy",
});

import pulumi
import pulumi_snowflake as snowflake

## Minimal
basic = snowflake.PasswordPolicy("basic",
    database="database_name",
    schema="schema_name",
    name="password_policy_name")
## Complete (with every optional set)
complete = snowflake.PasswordPolicy("complete",
    database="database_name",
    schema="schema_name",
    name="password_policy_name",
    min_length=10,
    max_length=30,
    min_upper_case_chars=2,
    min_lower_case_chars=3,
    min_numeric_chars=4,
    min_special_chars=5,
    min_age_days=1,
    max_age_days=30,
    max_retries=3,
    lockout_time_mins=30,
    history=5,
    comment="My password policy")

package main

import (
	"github.com/pulumi/pulumi-snowflake/sdk/v2/go/snowflake"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// # Minimal
		_, err := snowflake.NewPasswordPolicy(ctx, "basic", &snowflake.PasswordPolicyArgs{
			Database: pulumi.String("database_name"),
			Schema:   pulumi.String("schema_name"),
			Name:     pulumi.String("password_policy_name"),
		})
		if err != nil {
			return err
		}
		// # Complete (with every optional set)
		_, err = snowflake.NewPasswordPolicy(ctx, "complete", &snowflake.PasswordPolicyArgs{
			Database:          pulumi.String("database_name"),
			Schema:            pulumi.String("schema_name"),
			Name:              pulumi.String("password_policy_name"),
			MinLength:         pulumi.Int(10),
			MaxLength:         pulumi.Int(30),
			MinUpperCaseChars: pulumi.Int(2),
			MinLowerCaseChars: pulumi.Int(3),
			MinNumericChars:   pulumi.Int(4),
			MinSpecialChars:   pulumi.Int(5),
			MinAgeDays:        pulumi.Int(1),
			MaxAgeDays:        pulumi.Int(30),
			MaxRetries:        pulumi.Int(3),
			LockoutTimeMins:   pulumi.Int(30),
			History:           pulumi.Int(5),
			Comment:           pulumi.String("My password policy"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Snowflake = Pulumi.Snowflake;

return await Deployment.RunAsync(() => 
{
    //# Minimal
    var basic = new Snowflake.PasswordPolicy("basic", new()
    {
        Database = "database_name",
        Schema = "schema_name",
        Name = "password_policy_name",
    });

    //# Complete (with every optional set)
    var complete = new Snowflake.PasswordPolicy("complete", new()
    {
        Database = "database_name",
        Schema = "schema_name",
        Name = "password_policy_name",
        MinLength = 10,
        MaxLength = 30,
        MinUpperCaseChars = 2,
        MinLowerCaseChars = 3,
        MinNumericChars = 4,
        MinSpecialChars = 5,
        MinAgeDays = 1,
        MaxAgeDays = 30,
        MaxRetries = 3,
        LockoutTimeMins = 30,
        History = 5,
        Comment = "My password policy",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.snowflake.PasswordPolicy;
import com.pulumi.snowflake.PasswordPolicyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        //# Minimal
        var basic = new PasswordPolicy("basic", PasswordPolicyArgs.builder()
            .database("database_name")
            .schema("schema_name")
            .name("password_policy_name")
            .build());

        //# Complete (with every optional set)
        var complete = new PasswordPolicy("complete", PasswordPolicyArgs.builder()
            .database("database_name")
            .schema("schema_name")
            .name("password_policy_name")
            .minLength(10)
            .maxLength(30)
            .minUpperCaseChars(2)
            .minLowerCaseChars(3)
            .minNumericChars(4)
            .minSpecialChars(5)
            .minAgeDays(1)
            .maxAgeDays(30)
            .maxRetries(3)
            .lockoutTimeMins(30)
            .history(5)
            .comment("My password policy")
            .build());

    }
}

resources:
  ## Minimal
  basic:
    type: snowflake:PasswordPolicy
    properties:
      database: database_name
      schema: schema_name
      name: password_policy_name
  ## Complete (with every optional set)
  complete:
    type: snowflake:PasswordPolicy
    properties:
      database: database_name
      schema: schema_name
      name: password_policy_name
      minLength: 10
      maxLength: 30
      minUpperCaseChars: 2
      minLowerCaseChars: 3
      minNumericChars: 4
      minSpecialChars: 5
      minAgeDays: 1
      maxAgeDays: 30
      maxRetries: 3
      lockoutTimeMins: 30
      history: 5
      comment: My password policy

Example coming soon!

Note Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.

Note If a field has a default value, it is shown next to the type in the schema.

Create PasswordPolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PasswordPolicy(name: string, args: PasswordPolicyArgs, opts?: CustomResourceOptions);

@overload
def PasswordPolicy(resource_name: str,
                   args: PasswordPolicyArgs,
                   opts: Optional[ResourceOptions] = None)

@overload
def PasswordPolicy(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   schema: Optional[str] = None,
                   database: Optional[str] = None,
                   min_age_days: Optional[int] = None,
                   min_length: Optional[int] = None,
                   lockout_time_mins: Optional[int] = None,
                   max_age_days: Optional[int] = None,
                   max_length: Optional[int] = None,
                   max_retries: Optional[int] = None,
                   comment: Optional[str] = None,
                   if_not_exists: Optional[bool] = None,
                   min_lower_case_chars: Optional[int] = None,
                   min_numeric_chars: Optional[int] = None,
                   min_special_chars: Optional[int] = None,
                   min_upper_case_chars: Optional[int] = None,
                   name: Optional[str] = None,
                   or_replace: Optional[bool] = None,
                   history: Optional[int] = None)

func NewPasswordPolicy(ctx *Context, name string, args PasswordPolicyArgs, opts ...ResourceOption) (*PasswordPolicy, error)

public PasswordPolicy(string name, PasswordPolicyArgs args, CustomResourceOptions? opts = null)

public PasswordPolicy(String name, PasswordPolicyArgs args)
public PasswordPolicy(String name, PasswordPolicyArgs args, CustomResourceOptions options)

type: snowflake:PasswordPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "snowflake_passwordpolicy" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args PasswordPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PasswordPolicyArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PasswordPolicyArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PasswordPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PasswordPolicyArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var passwordPolicyResource = new Snowflake.PasswordPolicy("passwordPolicyResource", new()
{
    Schema = "string",
    Database = "string",
    MinAgeDays = 0,
    MinLength = 0,
    LockoutTimeMins = 0,
    MaxAgeDays = 0,
    MaxLength = 0,
    MaxRetries = 0,
    Comment = "string",
    MinLowerCaseChars = 0,
    MinNumericChars = 0,
    MinSpecialChars = 0,
    MinUpperCaseChars = 0,
    Name = "string",
    History = 0,
});

example, err := snowflake.NewPasswordPolicy(ctx, "passwordPolicyResource", &snowflake.PasswordPolicyArgs{
	Schema:            pulumi.String("string"),
	Database:          pulumi.String("string"),
	MinAgeDays:        pulumi.Int(0),
	MinLength:         pulumi.Int(0),
	LockoutTimeMins:   pulumi.Int(0),
	MaxAgeDays:        pulumi.Int(0),
	MaxLength:         pulumi.Int(0),
	MaxRetries:        pulumi.Int(0),
	Comment:           pulumi.String("string"),
	MinLowerCaseChars: pulumi.Int(0),
	MinNumericChars:   pulumi.Int(0),
	MinSpecialChars:   pulumi.Int(0),
	MinUpperCaseChars: pulumi.Int(0),
	Name:              pulumi.String("string"),
	History:           pulumi.Int(0),
})

resource "snowflake_passwordpolicy" "passwordPolicyResource" {
  schema               = "string"
  database             = "string"
  min_age_days         = 0
  min_length           = 0
  lockout_time_mins    = 0
  max_age_days         = 0
  max_length           = 0
  max_retries          = 0
  comment              = "string"
  min_lower_case_chars = 0
  min_numeric_chars    = 0
  min_special_chars    = 0
  min_upper_case_chars = 0
  name                 = "string"
  history              = 0
}

var passwordPolicyResource = new PasswordPolicy("passwordPolicyResource", PasswordPolicyArgs.builder()
    .schema("string")
    .database("string")
    .minAgeDays(0)
    .minLength(0)
    .lockoutTimeMins(0)
    .maxAgeDays(0)
    .maxLength(0)
    .maxRetries(0)
    .comment("string")
    .minLowerCaseChars(0)
    .minNumericChars(0)
    .minSpecialChars(0)
    .minUpperCaseChars(0)
    .name("string")
    .history(0)
    .build());

password_policy_resource = snowflake.PasswordPolicy("passwordPolicyResource",
    schema="string",
    database="string",
    min_age_days=0,
    min_length=0,
    lockout_time_mins=0,
    max_age_days=0,
    max_length=0,
    max_retries=0,
    comment="string",
    min_lower_case_chars=0,
    min_numeric_chars=0,
    min_special_chars=0,
    min_upper_case_chars=0,
    name="string",
    history=0)

const passwordPolicyResource = new snowflake.PasswordPolicy("passwordPolicyResource", {
    schema: "string",
    database: "string",
    minAgeDays: 0,
    minLength: 0,
    lockoutTimeMins: 0,
    maxAgeDays: 0,
    maxLength: 0,
    maxRetries: 0,
    comment: "string",
    minLowerCaseChars: 0,
    minNumericChars: 0,
    minSpecialChars: 0,
    minUpperCaseChars: 0,
    name: "string",
    history: 0,
});

type: snowflake:PasswordPolicy
properties:
    comment: string
    database: string
    history: 0
    lockoutTimeMins: 0
    maxAgeDays: 0
    maxLength: 0
    maxRetries: 0
    minAgeDays: 0
    minLength: 0
    minLowerCaseChars: 0
    minNumericChars: 0
    minSpecialChars: 0
    minUpperCaseChars: 0
    name: string
    schema: string

PasswordPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PasswordPolicy resource accepts the following input properties:

Database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
Schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
Comment string: Adds a comment or overwrites an existing comment for the password policy.
History int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
IfNotExists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
LockoutTimeMins int: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
MaxAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
MaxLength int: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
MaxRetries int: Specifies the maximum number of attempts to enter a password before being locked out.
MinAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
MinLength int: Specifies the minimum number of characters the password must contain.
MinLowerCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
MinNumericChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
MinSpecialChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
MinUpperCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
Name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
OrReplace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.

Database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
Schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
Comment string: Adds a comment or overwrites an existing comment for the password policy.
History int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
IfNotExists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
LockoutTimeMins int: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
MaxAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
MaxLength int: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
MaxRetries int: Specifies the maximum number of attempts to enter a password before being locked out.
MinAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
MinLength int: Specifies the minimum number of characters the password must contain.
MinLowerCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
MinNumericChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
MinSpecialChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
MinUpperCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
Name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
OrReplace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.

database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
comment string: Adds a comment or overwrites an existing comment for the password policy.
history number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
if_not_exists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockout_time_mins number: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
max_age_days number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
max_length number: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
max_retries number: Specifies the maximum number of attempts to enter a password before being locked out.
min_age_days number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
min_length number: Specifies the minimum number of characters the password must contain.
min_lower_case_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
min_numeric_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
min_special_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
min_upper_case_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
or_replace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.

database String: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
schema String: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
comment String: Adds a comment or overwrites an existing comment for the password policy.
history Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
ifNotExists Boolean: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockoutTimeMins Integer: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
maxAgeDays Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
maxLength Integer: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
maxRetries Integer: Specifies the maximum number of attempts to enter a password before being locked out.
minAgeDays Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
minLength Integer: Specifies the minimum number of characters the password must contain.
minLowerCaseChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
minNumericChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
minSpecialChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
minUpperCaseChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name String: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
orReplace Boolean: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.

database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
comment string: Adds a comment or overwrites an existing comment for the password policy.
history number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
ifNotExists boolean: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockoutTimeMins number: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
maxAgeDays number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
maxLength number: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
maxRetries number: Specifies the maximum number of attempts to enter a password before being locked out.
minAgeDays number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
minLength number: Specifies the minimum number of characters the password must contain.
minLowerCaseChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
minNumericChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
minSpecialChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
minUpperCaseChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
orReplace boolean: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.

database str: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
schema str: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
comment str: Adds a comment or overwrites an existing comment for the password policy.
history int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
if_not_exists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockout_time_mins int: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
max_age_days int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
max_length int: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
max_retries int: Specifies the maximum number of attempts to enter a password before being locked out.
min_age_days int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
min_length int: Specifies the minimum number of characters the password must contain.
min_lower_case_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
min_numeric_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
min_special_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
min_upper_case_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name str: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
or_replace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.

database String: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
schema String: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
comment String: Adds a comment or overwrites an existing comment for the password policy.
history Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
ifNotExists Boolean: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockoutTimeMins Number: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
maxAgeDays Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
maxLength Number: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
maxRetries Number: Specifies the maximum number of attempts to enter a password before being locked out.
minAgeDays Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
minLength Number: Specifies the minimum number of characters the password must contain.
minLowerCaseChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
minNumericChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
minSpecialChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
minUpperCaseChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name String: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
orReplace Boolean: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.

Outputs

All input properties are implicitly available as output properties. Additionally, the PasswordPolicy resource produces the following output properties:

DescribeOutputs List<PasswordPolicyDescribeOutput>: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
Id string: The provider-assigned unique ID for this managed resource.
ShowOutputs List<PasswordPolicyShowOutput>: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

DescribeOutputs []PasswordPolicyDescribeOutput: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
Id string: The provider-assigned unique ID for this managed resource.
ShowOutputs []PasswordPolicyShowOutput: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

describe_outputs list(object): Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fully_qualified_name string: Fully qualified name of the resource. For more information, see object name resolution.
id string: The provider-assigned unique ID for this managed resource.
show_outputs list(object): Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

describeOutputs List<PasswordPolicyDescribeOutput>: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
id String: The provider-assigned unique ID for this managed resource.
showOutputs List<PasswordPolicyShowOutput>: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

describeOutputs PasswordPolicyDescribeOutput[]: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
id string: The provider-assigned unique ID for this managed resource.
showOutputs PasswordPolicyShowOutput[]: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

describe_outputs Sequence[PasswordPolicyDescribeOutput]: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fully_qualified_name str: Fully qualified name of the resource. For more information, see object name resolution.
id str: The provider-assigned unique ID for this managed resource.
show_outputs Sequence[PasswordPolicyShowOutput]: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

describeOutputs List<Property Map>: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
id String: The provider-assigned unique ID for this managed resource.
showOutputs List<Property Map>: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

Look up Existing PasswordPolicy Resource

Get an existing PasswordPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PasswordPolicyState, opts?: CustomResourceOptions): PasswordPolicy

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        comment: Optional[str] = None,
        database: Optional[str] = None,
        describe_outputs: Optional[Sequence[PasswordPolicyDescribeOutputArgs]] = None,
        fully_qualified_name: Optional[str] = None,
        history: Optional[int] = None,
        if_not_exists: Optional[bool] = None,
        lockout_time_mins: Optional[int] = None,
        max_age_days: Optional[int] = None,
        max_length: Optional[int] = None,
        max_retries: Optional[int] = None,
        min_age_days: Optional[int] = None,
        min_length: Optional[int] = None,
        min_lower_case_chars: Optional[int] = None,
        min_numeric_chars: Optional[int] = None,
        min_special_chars: Optional[int] = None,
        min_upper_case_chars: Optional[int] = None,
        name: Optional[str] = None,
        or_replace: Optional[bool] = None,
        schema: Optional[str] = None,
        show_outputs: Optional[Sequence[PasswordPolicyShowOutputArgs]] = None) -> PasswordPolicy

func GetPasswordPolicy(ctx *Context, name string, id IDInput, state *PasswordPolicyState, opts ...ResourceOption) (*PasswordPolicy, error)

public static PasswordPolicy Get(string name, Input<string> id, PasswordPolicyState? state, CustomResourceOptions? opts = null)

public static PasswordPolicy get(String name, Output<String> id, PasswordPolicyState state, CustomResourceOptions options)

resources:  _:    type: snowflake:PasswordPolicy    get:      id: ${id}

import {
  to = snowflake_passwordpolicy.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Comment string: Adds a comment or overwrites an existing comment for the password policy.
Database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
DescribeOutputs List<PasswordPolicyDescribeOutput>: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
History int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
IfNotExists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
LockoutTimeMins int: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
MaxAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
MaxLength int: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
MaxRetries int: Specifies the maximum number of attempts to enter a password before being locked out.
MinAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
MinLength int: Specifies the minimum number of characters the password must contain.
MinLowerCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
MinNumericChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
MinSpecialChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
MinUpperCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
Name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
OrReplace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
Schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
ShowOutputs List<PasswordPolicyShowOutput>: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

Comment string: Adds a comment or overwrites an existing comment for the password policy.
Database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
DescribeOutputs []PasswordPolicyDescribeOutputArgs: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
FullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
History int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
IfNotExists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
LockoutTimeMins int: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
MaxAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
MaxLength int: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
MaxRetries int: Specifies the maximum number of attempts to enter a password before being locked out.
MinAgeDays int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
MinLength int: Specifies the minimum number of characters the password must contain.
MinLowerCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
MinNumericChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
MinSpecialChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
MinUpperCaseChars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
Name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
OrReplace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
Schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
ShowOutputs []PasswordPolicyShowOutputArgs: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

comment string: Adds a comment or overwrites an existing comment for the password policy.
database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
describe_outputs list(object): Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fully_qualified_name string: Fully qualified name of the resource. For more information, see object name resolution.
history number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
if_not_exists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockout_time_mins number: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
max_age_days number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
max_length number: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
max_retries number: Specifies the maximum number of attempts to enter a password before being locked out.
min_age_days number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
min_length number: Specifies the minimum number of characters the password must contain.
min_lower_case_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
min_numeric_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
min_special_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
min_upper_case_chars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
or_replace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
show_outputs list(object): Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

comment String: Adds a comment or overwrites an existing comment for the password policy.
database String: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
describeOutputs List<PasswordPolicyDescribeOutput>: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
history Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
ifNotExists Boolean: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockoutTimeMins Integer: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
maxAgeDays Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
maxLength Integer: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
maxRetries Integer: Specifies the maximum number of attempts to enter a password before being locked out.
minAgeDays Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
minLength Integer: Specifies the minimum number of characters the password must contain.
minLowerCaseChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
minNumericChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
minSpecialChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
minUpperCaseChars Integer: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name String: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
orReplace Boolean: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
schema String: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
showOutputs List<PasswordPolicyShowOutput>: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

comment string: Adds a comment or overwrites an existing comment for the password policy.
database string: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
describeOutputs PasswordPolicyDescribeOutput[]: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fullyQualifiedName string: Fully qualified name of the resource. For more information, see object name resolution.
history number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
ifNotExists boolean: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockoutTimeMins number: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
maxAgeDays number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
maxLength number: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
maxRetries number: Specifies the maximum number of attempts to enter a password before being locked out.
minAgeDays number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
minLength number: Specifies the minimum number of characters the password must contain.
minLowerCaseChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
minNumericChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
minSpecialChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
minUpperCaseChars number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name string: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
orReplace boolean: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
schema string: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
showOutputs PasswordPolicyShowOutput[]: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

comment str: Adds a comment or overwrites an existing comment for the password policy.
database str: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
describe_outputs Sequence[PasswordPolicyDescribeOutputArgs]: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fully_qualified_name str: Fully qualified name of the resource. For more information, see object name resolution.
history int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
if_not_exists bool: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockout_time_mins int: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
max_age_days int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
max_length int: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
max_retries int: Specifies the maximum number of attempts to enter a password before being locked out.
min_age_days int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
min_length int: Specifies the minimum number of characters the password must contain.
min_lower_case_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
min_numeric_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
min_special_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
min_upper_case_chars int: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name str: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
or_replace bool: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
schema str: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
show_outputs Sequence[PasswordPolicyShowOutputArgs]: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

comment String: Adds a comment or overwrites an existing comment for the password policy.
database String: The database this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
describeOutputs List<Property Map>: Outputs the result of DESCRIBE PASSWORD POLICY for the given password policy.
fullyQualifiedName String: Fully qualified name of the resource. For more information, see object name resolution.
history Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history.
ifNotExists Boolean: (Default: false) Prevent overwriting a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
lockoutTimeMins Number: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORDMAXRETRIES).
maxAgeDays Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the maximum number of days before the password must be changed. A value of zero (i.e. 0) indicates that the password does not need to be changed.
maxLength Number: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORDMINLENGTH, PASSWORDMINUPPERCASECHARS, and PASSWORDMINLOWERCASECHARS.
maxRetries Number: Specifies the maximum number of attempts to enter a password before being locked out.
minAgeDays Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the number of days the user must wait before a recently changed password can be changed again.
minLength Number: Specifies the minimum number of characters the password must contain.
minLowerCaseChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of lowercase characters the password must contain.
minNumericChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of numeric characters the password must contain.
minSpecialChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of special characters the password must contain.
minUpperCaseChars Number: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (-1)) Specifies the minimum number of uppercase characters the password must contain.
name String: Identifier for the password policy; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
orReplace Boolean: (Default: false) Whether to override a previous password policy with the same name.
Deprecated: This field is a noop and will be removed in a future version of the provider.
schema String: The schema this password policy belongs to. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
showOutputs List<Property Map>: Outputs the result of SHOW PASSWORD POLICIES for the given password policy.

Supporting Types

PasswordPolicyDescribeOutput, PasswordPolicyDescribeOutputArgs

Comment string
Name string
Owner string
PasswordHistory int
PasswordLockoutTimeMins int
PasswordMaxAgeDays int
PasswordMaxLength int
PasswordMaxRetries int
PasswordMinAgeDays int
PasswordMinLength int
PasswordMinLowerCaseChars int
PasswordMinNumericChars int
PasswordMinSpecialChars int
PasswordMinUpperCaseChars int

Comment string
Name string
Owner string
PasswordHistory int
PasswordLockoutTimeMins int
PasswordMaxAgeDays int
PasswordMaxLength int
PasswordMaxRetries int
PasswordMinAgeDays int
PasswordMinLength int
PasswordMinLowerCaseChars int
PasswordMinNumericChars int
PasswordMinSpecialChars int
PasswordMinUpperCaseChars int

comment string
name string
owner string
password_history number
password_lockout_time_mins number
password_max_age_days number
password_max_length number
password_max_retries number
password_min_age_days number
password_min_length number
password_min_lower_case_chars number
password_min_numeric_chars number
password_min_special_chars number
password_min_upper_case_chars number

comment String
name String
owner String
passwordHistory Integer
passwordLockoutTimeMins Integer
passwordMaxAgeDays Integer
passwordMaxLength Integer
passwordMaxRetries Integer
passwordMinAgeDays Integer
passwordMinLength Integer
passwordMinLowerCaseChars Integer
passwordMinNumericChars Integer
passwordMinSpecialChars Integer
passwordMinUpperCaseChars Integer

comment string
name string
owner string
passwordHistory number
passwordLockoutTimeMins number
passwordMaxAgeDays number
passwordMaxLength number
passwordMaxRetries number
passwordMinAgeDays number
passwordMinLength number
passwordMinLowerCaseChars number
passwordMinNumericChars number
passwordMinSpecialChars number
passwordMinUpperCaseChars number

comment str
name str
owner str
password_history int
password_lockout_time_mins int
password_max_age_days int
password_max_length int
password_max_retries int
password_min_age_days int
password_min_length int
password_min_lower_case_chars int
password_min_numeric_chars int
password_min_special_chars int
password_min_upper_case_chars int

comment String
name String
owner String
passwordHistory Number
passwordLockoutTimeMins Number
passwordMaxAgeDays Number
passwordMaxLength Number
passwordMaxRetries Number
passwordMinAgeDays Number
passwordMinLength Number
passwordMinLowerCaseChars Number
passwordMinNumericChars Number
passwordMinSpecialChars Number
passwordMinUpperCaseChars Number

PasswordPolicyShowOutput, PasswordPolicyShowOutputArgs

Comment string
CreatedOn string
DatabaseName string
Kind string
Name string
Options string
Owner string
OwnerRoleType string
SchemaName string

Comment string
CreatedOn string
DatabaseName string
Kind string
Name string
Options string
Owner string
OwnerRoleType string
SchemaName string

comment string
created_on string
database_name string
kind string
name string
options string
owner string
owner_role_type string
schema_name string

comment String
createdOn String
databaseName String
kind String
name String
options String
owner String
ownerRoleType String
schemaName String

comment string
createdOn string
databaseName string
kind string
name string
options string
owner string
ownerRoleType string
schemaName string

comment str
created_on str
database_name str
kind str
name str
options str
owner str
owner_role_type str
schema_name str

comment String
createdOn String
databaseName String
kind String
name String
options String
owner String
ownerRoleType String
schemaName String

Import

$ pulumi import snowflake:index/passwordPolicy:PasswordPolicy example '"<database_name>"."<schema_name>"."<password_policy_name>"'

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Snowflake pulumi/pulumi-snowflake
License: Apache-2.0
Notes: This Pulumi package is based on the snowflake Terraform Provider.

Viewing docs for Snowflake v2.15.0
published on Saturday, May 9, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-snowflake

snowflake.PasswordPolicy

On this page

On this page

Example Usage

Create PasswordPolicy Resource

Constructor syntax

Parameters

Constructor example

PasswordPolicy Resource Properties

Inputs

Outputs

Look up Existing PasswordPolicy Resource

Supporting Types

PasswordPolicyDescribeOutput, PasswordPolicyDescribeOutputArgs

PasswordPolicyShowOutput, PasswordPolicyShowOutputArgs

Import

Package Details

On this page

On this page