A Vault plugin for Snowflake. It is one of the supported plugins for the HashiCorp Vault Database Secrets Engine and allows for the programmatic generation of unique, ephemeral Snowflake Database User credentials in a Snowflake account.
This project uses the database plugin interface introduced in Vault version 1.6.0.
This plugin will be included in version 1.7 of Vault.
Bugs should be filed under the Issues section of this repo.
Feature requests can be submitted in the Issues section as well.
- Database Secrets Engine for Snowflake - Docs
- Database Secrets Engine for Snowflake - API Docs
- Snowflake Website
- Vault Website
Please note: HashiCorp takes Vault's security and their users' trust very seriously.
If you believe you have found a security issue in Vault or with this plugin, please responsibly disclose by contacting HashiCorp at security@hashicorp.com.
In order to perform acceptance testing, you need to set the environment variable VAULT_ACC=1 as well as provide all of the necessary information to connect to a Snowflake Project. All SNOWFLAKE_* environment variables must be provided in order for the acceptance tests to run properly. A cluster must be available during the test. A 30-day trial account can be provisioned manually to test.
Table of Env Vars Forthcoming
| Environment Variable | Description |
|---|