Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Snowflake Provider
  4. API Docs
  5. SecretWithClientCredentials
Viewing docs for Snowflake v2.21.0
published on Friday, Sep 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-snowflake

snowflake.SecretWithClientCredentials

snowflake logo
Viewing docs for Snowflake v2.21.0
published on Friday, Sep 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-snowflake

    Resource used to manage secret objects with OAuth Client Credentials. For more information, check secret documentation.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as snowflake from "@pulumi/snowflake";

// basic resource (without oauth_scopes — scopes are inherited from the security integration)
const basic = new snowflake.SecretWithClientCredentials("basic", {
    name: "EXAMPLE_SECRET",
    database: "EXAMPLE_DB",
    schema: "EXAMPLE_SCHEMA",
    apiAuthentication: example.fullyQualifiedName,
});
// resource with explicit oauth_scopes
const withScopes = new snowflake.SecretWithClientCredentials("with_scopes", {
    name: "EXAMPLE_SECRET",
    database: "EXAMPLE_DB",
    schema: "EXAMPLE_SCHEMA",
    apiAuthentication: example.fullyQualifiedName,
    oauthScopes: [
        "useraccount",
        "testscope",
    ],
});
// resource with all fields set
const complete = new snowflake.SecretWithClientCredentials("complete", {
    name: "EXAMPLE_SECRET",
    database: "EXAMPLE_DB",
    schema: "EXAMPLE_SCHEMA",
    apiAuthentication: example.fullyQualifiedName,
    oauthScopes: [
        "useraccount",
        "testscope",
    ],
    comment: "EXAMPLE_COMMENT",
});

    import pulumi
import pulumi_snowflake as snowflake

# basic resource (without oauth_scopes — scopes are inherited from the security integration)
basic = snowflake.SecretWithClientCredentials("basic",
    name="EXAMPLE_SECRET",
    database="EXAMPLE_DB",
    schema="EXAMPLE_SCHEMA",
    api_authentication=example["fullyQualifiedName"])
# resource with explicit oauth_scopes
with_scopes = snowflake.SecretWithClientCredentials("with_scopes",
    name="EXAMPLE_SECRET",
    database="EXAMPLE_DB",
    schema="EXAMPLE_SCHEMA",
    api_authentication=example["fullyQualifiedName"],
    oauth_scopes=[
        "useraccount",
        "testscope",
    ])
# resource with all fields set
complete = snowflake.SecretWithClientCredentials("complete",
    name="EXAMPLE_SECRET",
    database="EXAMPLE_DB",
    schema="EXAMPLE_SCHEMA",
    api_authentication=example["fullyQualifiedName"],
    oauth_scopes=[
        "useraccount",
        "testscope",
    ],
    comment="EXAMPLE_COMMENT")

    package main

import (
	"github.com/pulumi/pulumi-snowflake/sdk/v2/go/snowflake"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// basic resource (without oauth_scopes — scopes are inherited from the security integration)
		_, err := snowflake.NewSecretWithClientCredentials(ctx, "basic", &snowflake.SecretWithClientCredentialsArgs{
			Name:              pulumi.String("EXAMPLE_SECRET"),
			Database:          pulumi.String("EXAMPLE_DB"),
			Schema:            pulumi.String("EXAMPLE_SCHEMA"),
			ApiAuthentication: pulumi.Any(example.FullyQualifiedName),
		})
		if err != nil {
			return err
		}
		// resource with explicit oauth_scopes
		_, err = snowflake.NewSecretWithClientCredentials(ctx, "with_scopes", &snowflake.SecretWithClientCredentialsArgs{
			Name:              pulumi.String("EXAMPLE_SECRET"),
			Database:          pulumi.String("EXAMPLE_DB"),
			Schema:            pulumi.String("EXAMPLE_SCHEMA"),
			ApiAuthentication: pulumi.Any(example.FullyQualifiedName),
			OauthScopes: pulumi.StringArray{
				pulumi.String("useraccount"),
				pulumi.String("testscope"),
			},
		})
		if err != nil {
			return err
		}
		// resource with all fields set
		_, err = snowflake.NewSecretWithClientCredentials(ctx, "complete", &snowflake.SecretWithClientCredentialsArgs{
			Name:              pulumi.String("EXAMPLE_SECRET"),
			Database:          pulumi.String("EXAMPLE_DB"),
			Schema:            pulumi.String("EXAMPLE_SCHEMA"),
			ApiAuthentication: pulumi.Any(example.FullyQualifiedName),
			OauthScopes: pulumi.StringArray{
				pulumi.String("useraccount"),
				pulumi.String("testscope"),
			},
			Comment: pulumi.String("EXAMPLE_COMMENT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Snowflake = Pulumi.Snowflake;

return await Deployment.RunAsync(() => 
{
    // basic resource (without oauth_scopes — scopes are inherited from the security integration)
    var basic = new Snowflake.SecretWithClientCredentials("basic", new()
    {
        Name = "EXAMPLE_SECRET",
        Database = "EXAMPLE_DB",
        Schema = "EXAMPLE_SCHEMA",
        ApiAuthentication = example.FullyQualifiedName,
    });

    // resource with explicit oauth_scopes
    var withScopes = new Snowflake.SecretWithClientCredentials("with_scopes", new()
    {
        Name = "EXAMPLE_SECRET",
        Database = "EXAMPLE_DB",
        Schema = "EXAMPLE_SCHEMA",
        ApiAuthentication = example.FullyQualifiedName,
        OauthScopes = new[]
        {
            "useraccount",
            "testscope",
        },
    });

    // resource with all fields set
    var complete = new Snowflake.SecretWithClientCredentials("complete", new()
    {
        Name = "EXAMPLE_SECRET",
        Database = "EXAMPLE_DB",
        Schema = "EXAMPLE_SCHEMA",
        ApiAuthentication = example.FullyQualifiedName,
        OauthScopes = new[]
        {
            "useraccount",
            "testscope",
        },
        Comment = "EXAMPLE_COMMENT",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.snowflake.SecretWithClientCredentials;
import com.pulumi.snowflake.SecretWithClientCredentialsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // basic resource (without oauth_scopes — scopes are inherited from the security integration)
        var basic = new SecretWithClientCredentials("basic", SecretWithClientCredentialsArgs.builder()
            .name("EXAMPLE_SECRET")
            .database("EXAMPLE_DB")
            .schema("EXAMPLE_SCHEMA")
            .apiAuthentication(example.fullyQualifiedName())
            .build());

        // resource with explicit oauth_scopes
        var withScopes = new SecretWithClientCredentials("withScopes", SecretWithClientCredentialsArgs.builder()
            .name("EXAMPLE_SECRET")
            .database("EXAMPLE_DB")
            .schema("EXAMPLE_SCHEMA")
            .apiAuthentication(example.fullyQualifiedName())
            .oauthScopes(            
                "useraccount",
                "testscope")
            .build());

        // resource with all fields set
        var complete = new SecretWithClientCredentials("complete", SecretWithClientCredentialsArgs.builder()
            .name("EXAMPLE_SECRET")
            .database("EXAMPLE_DB")
            .schema("EXAMPLE_SCHEMA")
            .apiAuthentication(example.fullyQualifiedName())
            .oauthScopes(            
                "useraccount",
                "testscope")
            .comment("EXAMPLE_COMMENT")
            .build());

    }
}

    resources:
  # basic resource (without oauth_scopes — scopes are inherited from the security integration)
  basic:
    type: snowflake:SecretWithClientCredentials
    properties:
      name: EXAMPLE_SECRET
      database: EXAMPLE_DB
      schema: EXAMPLE_SCHEMA
      apiAuthentication: ${example.fullyQualifiedName}
  # resource with explicit oauth_scopes
  withScopes:
    type: snowflake:SecretWithClientCredentials
    name: with_scopes
    properties:
      name: EXAMPLE_SECRET
      database: EXAMPLE_DB
      schema: EXAMPLE_SCHEMA
      apiAuthentication: ${example.fullyQualifiedName}
      oauthScopes:
        - useraccount
        - testscope
  # resource with all fields set
  complete:
    type: snowflake:SecretWithClientCredentials
    properties:
      name: EXAMPLE_SECRET
      database: EXAMPLE_DB
      schema: EXAMPLE_SCHEMA
      apiAuthentication: ${example.fullyQualifiedName}
      oauthScopes:
        - useraccount
        - testscope
      comment: EXAMPLE_COMMENT

    pulumi {
  required_providers {
    snowflake = {
      source = "pulumi/snowflake"
    }
  }
}

# basic resource (without oauth_scopes — scopes are inherited from the security integration)
resource "snowflake_secretwithclientcredentials" "basic" {
  name               = "EXAMPLE_SECRET"
  database           = "EXAMPLE_DB"
  schema             = "EXAMPLE_SCHEMA"
  api_authentication = example.fullyQualifiedName
}
# resource with explicit oauth_scopes
resource "snowflake_secretwithclientcredentials" "with_scopes" {
  name               = "EXAMPLE_SECRET"
  database           = "EXAMPLE_DB"
  schema             = "EXAMPLE_SCHEMA"
  api_authentication = example.fullyQualifiedName
  oauth_scopes       = ["useraccount", "testscope"]
}
# resource with all fields set
resource "snowflake_secretwithclientcredentials" "complete" {
  name               = "EXAMPLE_SECRET"
  database           = "EXAMPLE_DB"
  schema             = "EXAMPLE_SCHEMA"
  api_authentication = example.fullyQualifiedName
  oauth_scopes       = ["useraccount", "testscope"]
  comment            = "EXAMPLE_COMMENT"
}

    Note Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.

    Note If a field has a default value, it is shown next to the type in the schema.

    Create SecretWithClientCredentials Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SecretWithClientCredentials(name: string, args: SecretWithClientCredentialsArgs, opts?: CustomResourceOptions);
    @overload
def SecretWithClientCredentials(resource_name: str,
                                args: SecretWithClientCredentialsArgs,
                                opts: Optional[ResourceOptions] = None)

@overload
def SecretWithClientCredentials(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                api_authentication: Optional[str] = None,
                                database: Optional[str] = None,
                                schema: Optional[str] = None,
                                comment: Optional[str] = None,
                                name: Optional[str] = None,
                                oauth_scopes: Optional[Sequence[str]] = None)
    func NewSecretWithClientCredentials(ctx *Context, name string, args SecretWithClientCredentialsArgs, opts ...ResourceOption) (*SecretWithClientCredentials, error)
    public SecretWithClientCredentials(string name, SecretWithClientCredentialsArgs args, CustomResourceOptions? opts = null)
    public SecretWithClientCredentials(String name, SecretWithClientCredentialsArgs args)
public SecretWithClientCredentials(String name, SecretWithClientCredentialsArgs args, CustomResourceOptions options)

    type: snowflake:SecretWithClientCredentials
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "snowflake_secret_with_client_credentials" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args SecretWithClientCredentialsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SecretWithClientCredentialsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SecretWithClientCredentialsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SecretWithClientCredentialsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SecretWithClientCredentialsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var secretWithClientCredentialsResource = new Snowflake.SecretWithClientCredentials("secretWithClientCredentialsResource", new()
{
    ApiAuthentication = "string",
    Database = "string",
    Schema = "string",
    Comment = "string",
    Name = "string",
    OauthScopes = new[]
    {
        "string",
    },
});

    example, err := snowflake.NewSecretWithClientCredentials(ctx, "secretWithClientCredentialsResource", &snowflake.SecretWithClientCredentialsArgs{
	ApiAuthentication: pulumi.String("string"),
	Database:          pulumi.String("string"),
	Schema:            pulumi.String("string"),
	Comment:           pulumi.String("string"),
	Name:              pulumi.String("string"),
	OauthScopes: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    resource "snowflake_secret_with_client_credentials" "secretWithClientCredentialsResource" {
  lifecycle {
    create_before_destroy = true
  }
  api_authentication = "string"
  database           = "string"
  schema             = "string"
  comment            = "string"
  name               = "string"
  oauth_scopes       = ["string"]
}

    var secretWithClientCredentialsResource = new SecretWithClientCredentials("secretWithClientCredentialsResource", SecretWithClientCredentialsArgs.builder()
    .apiAuthentication("string")
    .database("string")
    .schema("string")
    .comment("string")
    .name("string")
    .oauthScopes("string")
    .build());

    secret_with_client_credentials_resource = snowflake.SecretWithClientCredentials("secretWithClientCredentialsResource",
    api_authentication="string",
    database="string",
    schema="string",
    comment="string",
    name="string",
    oauth_scopes=["string"])

    const secretWithClientCredentialsResource = new snowflake.SecretWithClientCredentials("secretWithClientCredentialsResource", {
    apiAuthentication: "string",
    database: "string",
    schema: "string",
    comment: "string",
    name: "string",
    oauthScopes: ["string"],
});

    type: snowflake:SecretWithClientCredentials
properties:
    apiAuthentication: string
    comment: string
    database: string
    name: string
    oauthScopes:
        - string
    schema: string

    SecretWithClientCredentials Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SecretWithClientCredentials resource accepts the following input properties:

    ApiAuthentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    Database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    Schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    Comment string
    Specifies a comment for the secret.
    Name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    OauthScopes List<string>
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    ApiAuthentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    Database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    Schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    Comment string
    Specifies a comment for the secret.
    Name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    OauthScopes []string
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    api_authentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    comment string
    Specifies a comment for the secret.
    name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauth_scopes list(string)
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    apiAuthentication String
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    database String
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    schema String
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    comment String
    Specifies a comment for the secret.
    name String
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauthScopes List<String>
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    apiAuthentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    comment string
    Specifies a comment for the secret.
    name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauthScopes string[]
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    api_authentication str
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    database str
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    schema str
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    comment str
    Specifies a comment for the secret.
    name str
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauth_scopes Sequence[str]
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    apiAuthentication String
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    database String
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    schema String
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    comment String
    Specifies a comment for the secret.
    name String
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauthScopes List<String>
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SecretWithClientCredentials resource produces the following output properties:

    DescribeOutputs List<SecretWithClientCredentialsDescribeOutput>
    Outputs the result of DESCRIBE SECRET for the given secret.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Id string
    The provider-assigned unique ID for this managed resource.
    SecretType string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    ShowOutputs List<SecretWithClientCredentialsShowOutput>
    Outputs the result of SHOW SECRETS for the given secret.
    DescribeOutputs []SecretWithClientCredentialsDescribeOutput
    Outputs the result of DESCRIBE SECRET for the given secret.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Id string
    The provider-assigned unique ID for this managed resource.
    SecretType string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    ShowOutputs []SecretWithClientCredentialsShowOutput
    Outputs the result of SHOW SECRETS for the given secret.
    describe_outputs list(object)
    Outputs the result of DESCRIBE SECRET for the given secret.
    fully_qualified_name string
    Fully qualified name of the resource. For more information, see object name resolution.
    id string
    The provider-assigned unique ID for this managed resource.
    secret_type string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    show_outputs list(object)
    Outputs the result of SHOW SECRETS for the given secret.
    describeOutputs List<SecretWithClientCredentialsDescribeOutput>
    Outputs the result of DESCRIBE SECRET for the given secret.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    id String
    The provider-assigned unique ID for this managed resource.
    secretType String
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    showOutputs List<SecretWithClientCredentialsShowOutput>
    Outputs the result of SHOW SECRETS for the given secret.
    describeOutputs SecretWithClientCredentialsDescribeOutput[]
    Outputs the result of DESCRIBE SECRET for the given secret.
    fullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    id string
    The provider-assigned unique ID for this managed resource.
    secretType string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    showOutputs SecretWithClientCredentialsShowOutput[]
    Outputs the result of SHOW SECRETS for the given secret.
    describe_outputs Sequence[SecretWithClientCredentialsDescribeOutput]
    Outputs the result of DESCRIBE SECRET for the given secret.
    fully_qualified_name str
    Fully qualified name of the resource. For more information, see object name resolution.
    id str
    The provider-assigned unique ID for this managed resource.
    secret_type str
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    show_outputs Sequence[SecretWithClientCredentialsShowOutput]
    Outputs the result of SHOW SECRETS for the given secret.
    describeOutputs List<Property Map>
    Outputs the result of DESCRIBE SECRET for the given secret.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    id String
    The provider-assigned unique ID for this managed resource.
    secretType String
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    showOutputs List<Property Map>
    Outputs the result of SHOW SECRETS for the given secret.

    Look up Existing SecretWithClientCredentials Resource

    Get an existing SecretWithClientCredentials resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SecretWithClientCredentialsState, opts?: CustomResourceOptions): SecretWithClientCredentials
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        api_authentication: Optional[str] = None,
        comment: Optional[str] = None,
        database: Optional[str] = None,
        describe_outputs: Optional[Sequence[SecretWithClientCredentialsDescribeOutputArgs]] = None,
        fully_qualified_name: Optional[str] = None,
        name: Optional[str] = None,
        oauth_scopes: Optional[Sequence[str]] = None,
        schema: Optional[str] = None,
        secret_type: Optional[str] = None,
        show_outputs: Optional[Sequence[SecretWithClientCredentialsShowOutputArgs]] = None) -> SecretWithClientCredentials
    func GetSecretWithClientCredentials(ctx *Context, name string, id IDInput, state *SecretWithClientCredentialsState, opts ...ResourceOption) (*SecretWithClientCredentials, error)
    public static SecretWithClientCredentials Get(string name, Input<string> id, SecretWithClientCredentialsState? state, CustomResourceOptions? opts = null)
    public static SecretWithClientCredentials get(String name, Output<String> id, SecretWithClientCredentialsState state, CustomResourceOptions options)
    resources:  _:    type: snowflake:SecretWithClientCredentials    get:      id: ${id}
    import {
  to = snowflake_secret_with_client_credentials.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApiAuthentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    Comment string
    Specifies a comment for the secret.
    Database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    DescribeOutputs List<SecretWithClientCredentialsDescribeOutput>
    Outputs the result of DESCRIBE SECRET for the given secret.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    OauthScopes List<string>
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    Schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    SecretType string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    ShowOutputs List<SecretWithClientCredentialsShowOutput>
    Outputs the result of SHOW SECRETS for the given secret.
    ApiAuthentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    Comment string
    Specifies a comment for the secret.
    Database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    DescribeOutputs []SecretWithClientCredentialsDescribeOutputArgs
    Outputs the result of DESCRIBE SECRET for the given secret.
    FullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    Name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    OauthScopes []string
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    Schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    SecretType string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    ShowOutputs []SecretWithClientCredentialsShowOutputArgs
    Outputs the result of SHOW SECRETS for the given secret.
    api_authentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    comment string
    Specifies a comment for the secret.
    database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    describe_outputs list(object)
    Outputs the result of DESCRIBE SECRET for the given secret.
    fully_qualified_name string
    Fully qualified name of the resource. For more information, see object name resolution.
    name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauth_scopes list(string)
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    secret_type string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    show_outputs list(object)
    Outputs the result of SHOW SECRETS for the given secret.
    apiAuthentication String
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    comment String
    Specifies a comment for the secret.
    database String
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    describeOutputs List<SecretWithClientCredentialsDescribeOutput>
    Outputs the result of DESCRIBE SECRET for the given secret.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    name String
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauthScopes List<String>
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    schema String
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    secretType String
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    showOutputs List<SecretWithClientCredentialsShowOutput>
    Outputs the result of SHOW SECRETS for the given secret.
    apiAuthentication string
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    comment string
    Specifies a comment for the secret.
    database string
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    describeOutputs SecretWithClientCredentialsDescribeOutput[]
    Outputs the result of DESCRIBE SECRET for the given secret.
    fullyQualifiedName string
    Fully qualified name of the resource. For more information, see object name resolution.
    name string
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauthScopes string[]
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    schema string
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    secretType string
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    showOutputs SecretWithClientCredentialsShowOutput[]
    Outputs the result of SHOW SECRETS for the given secret.
    api_authentication str
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    comment str
    Specifies a comment for the secret.
    database str
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    describe_outputs Sequence[SecretWithClientCredentialsDescribeOutputArgs]
    Outputs the result of DESCRIBE SECRET for the given secret.
    fully_qualified_name str
    Fully qualified name of the resource. For more information, see object name resolution.
    name str
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauth_scopes Sequence[str]
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    schema str
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    secret_type str
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    show_outputs Sequence[SecretWithClientCredentialsShowOutputArgs]
    Outputs the result of SHOW SECRETS for the given secret.
    apiAuthentication String
    Specifies the name value of the Snowflake security integration that connects Snowflake to an external service. For more information about this resource, see docs.
    comment String
    Specifies a comment for the secret.
    database String
    The database in which to create the secret Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    describeOutputs List<Property Map>
    Outputs the result of DESCRIBE SECRET for the given secret.
    fullyQualifiedName String
    Fully qualified name of the resource. For more information, see object name resolution.
    name String
    String that specifies the identifier (i.e. name) for the secret, must be unique in your schema. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    oauthScopes List<String>
    Specifies a list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow. If not specified, no scopes are set on the secret; the effective scopes during the OAuth flow are inherited from the security integration.
    schema String
    The schema in which to create the secret. Due to technical limitations (read more here), avoid using the following characters: |, ., ".
    secretType String
    Specifies a type for the secret. This field is used for checking external changes and recreating the resources if needed.
    showOutputs List<Property Map>
    Outputs the result of SHOW SECRETS for the given secret.

    Supporting Types

    SecretWithClientCredentialsDescribeOutput, SecretWithClientCredentialsDescribeOutputArgs

    SecretWithClientCredentialsShowOutput, SecretWithClientCredentialsShowOutputArgs

    Comment string
    CreatedOn string
    DatabaseName string
    Name string
    OauthScopes List<string>
    Owner string
    OwnerRoleType string
    SchemaName string
    SecretType string
    Comment string
    CreatedOn string
    DatabaseName string
    Name string
    OauthScopes []string
    Owner string
    OwnerRoleType string
    SchemaName string
    SecretType string
    comment string
    created_on string
    database_name string
    name string
    oauth_scopes list(string)
    owner string
    owner_role_type string
    schema_name string
    secret_type string
    comment String
    createdOn String
    databaseName String
    name String
    oauthScopes List<String>
    owner String
    ownerRoleType String
    schemaName String
    secretType String
    comment string
    createdOn string
    databaseName string
    name string
    oauthScopes string[]
    owner string
    ownerRoleType string
    schemaName string
    secretType string
    comment String
    createdOn String
    databaseName String
    name String
    oauthScopes List<String>
    owner String
    ownerRoleType String
    schemaName String
    secretType String

    Import

    $ pulumi import snowflake:index/secretWithClientCredentials:SecretWithClientCredentials example '"<database_name>"."<schema_name>"."<secret_name>"'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Snowflake pulumi/pulumi-snowflake
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the snowflake Terraform Provider.
    snowflake logo
    Viewing docs for Snowflake v2.21.0
    published on Friday, Sep 11, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-snowflake

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial