diff --git a/cmd/meroxa/root/resources/create.go b/cmd/meroxa/root/resources/create.go
index 02bc7493a..44d3c3395 100644
--- a/cmd/meroxa/root/resources/create.go
+++ b/cmd/meroxa/root/resources/create.go
@@ -20,6 +20,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
+	"os"
 
 	"github.com/google/uuid"
 	"github.com/meroxa/cli/cmd/meroxa/builder"
@@ -49,15 +50,16 @@ type Create struct {
 		Environment string `long:"env" usage:"environment (name or UUID) where resource will be created"`
 
 		// credentials
-		Username      string `long:"username"    short:"" usage:"username"`
-		Password      string `long:"password"    short:"" usage:"password"`
-		CaCert        string `long:"ca-cert"     short:"" usage:"trusted certificates for verifying resource"`
-		ClientCert    string `long:"client-cert" short:"" usage:"client certificate for authenticating to the resource"`
-		ClientKey     string `long:"client-key"  short:"" usage:"client private key for authenticating to the resource"`
-		SSL           bool   `long:"ssl"         short:"" usage:"use SSL"`
-		SSHURL        string `long:"ssh-url"     short:"" usage:"SSH tunneling address"`
-		SSHPrivateKey string `long:"ssh-private-key"     short:"" usage:"SSH tunneling private key"`
-		Token         string `long:"token"     short:"" usage:"API Token"`
+		Username       string `long:"username"         short:"" usage:"username"`
+		Password       string `long:"password"         short:"" usage:"password"`
+		CaCert         string `long:"ca-cert"          short:"" usage:"trusted certificates for verifying resource"`
+		ClientCert     string `long:"client-cert"      short:"" usage:"client certificate for authenticating to the resource"`
+		ClientKey      string `long:"client-key"       short:"" usage:"client private key for authenticating to the resource"`
+		SSL            bool   `long:"ssl"              short:"" usage:"use SSL"`
+		SSHURL         string `long:"ssh-url"          short:"" usage:"SSH tunneling address"`
+		SSHPrivateKey  string `long:"ssh-private-key"  short:"" usage:"SSH tunneling private key"`
+		PrivateKeyFile string `long:"private-key-file" short:"" usage:"path to private key file"`
+		Token          string `long:"token"            short:"" usage:"API Token"`
 	}
 }
 
@@ -82,41 +84,72 @@ func (c *Create) Docs() builder.Docs {
 
 		// TODO: Provide example with `--env` once it's not behind a feature flag
 		Example: `
-$ meroxa resources create store --type postgres -u "$DATABASE_URL" --metadata '{"logical_replication":"true"}'
-$ meroxa resources create datalake --type s3 -u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
-$ meroxa resources create warehouse --type redshift -u "$REDSHIFT_URL"
-$ meroxa resources create slack --type url -u "$WEBHOOK_URL"
-$ meroxa resource create mysqldb \
-    --type mysql \
-    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+$ meroxa resource create mybigquery \
+    --type bigquery \
+    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \
+    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
 
-$ meroxa resource create mongo \
-    --type mongodb \
-    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+$ meroxa resource create sourcedb \
+	--type confluentcloud \
+	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create meteor \
+	--type cosmosdb \
+	--url cosmosdb://user:pass@org.documents.azure.com:443/pluto
 
 $ meroxa resource create elasticsearch \
     --type elasticsearch \
     -u "https://$ES_USER:$ES_PASS@$ES_URL:$ES_PORT" \
     --metadata '{"index.prefix": "$ES_INDEX","incrementing.field.name": "$ES_INCREMENTING_FIELD"}'
 
-$ meroxa resource create mybigquery \
-    --type bigquery \
-    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \
-    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
+$ meroxa resource create sourcedb \
+	--type kafka \
+	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create mongo \
+    --type mongodb \
+    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+
+$ meroxa resource create mysqldb \
+    --type mysql \
+    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+
+$ meroxa resource create workspace \
+	--type notion \
+	--token AbCdEfG123456
+
+$ meroxa resource create workspace \
+	--type oracledb \
+	--url oracle://user:password@host.com:1521/database
+
+$ meroxa resources create store \
+	--type postgres \
+	-u "$DATABASE_URL" \
+	--metadata '{"logical_replication":"true"}'
+
+$ meroxa resources create warehouse \
+	--type redshift \
+	-u "$REDSHIFT_URL" \
+    --ssh-url ssh://user@password@example.elb.us-east-1.amazonaws.com:22 \
+	--private-key-file ~/.ssh/my-key
+
+$ meroxa resources create datalake \
+	--type s3 \
+	-u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
 
 $ meroxa resource create snowflake \
     --type snowflakedb \
     -u "snowflake://$SNOWFLAKE_URL/meroxa_db/stream_data" \
     --username meroxa_user \
-    --password $SNOWFLAKE_PRIVATE_KEY
+    --private-key-file /Users/me/.ssh/snowflake_ed25519
 
-$ meroxa resource create sourcedb \
-	--type kafka \
-	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+$ meroxa resource create hr \
+	--type sqlserver \
+	--url "sqlserver://$MSSQL_USER:$MSSQL_PASS@$MSSQL_URL:$MSSQL_PORT/$MSSQL_DB"
 
-$ meroxa resource create sourcedb \
-	--type confluentcloud \
-	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain`,
+$ meroxa resources create slack \
+	--type url \
+	-u "$WEBHOOK_URL"`,
 	}
 }
 
@@ -177,6 +210,10 @@ func (c *Create) Execute(ctx context.Context) error {
 		env = string(meroxa.EnvironmentTypeCommon)
 	}
 
+	if err := c.handlePrivateKeyFlags(ctx); err != nil {
+		return err
+	}
+
 	if c.hasCredentials() {
 		input.Credentials = &meroxa.Credentials{
 			Username:      c.flags.Username,
@@ -233,3 +270,25 @@ func (c *Create) hasCredentials() bool {
 		c.flags.Token != "" ||
 		c.flags.SSL
 }
+
+func (c *Create) handlePrivateKeyFlags(ctx context.Context) error {
+	path := c.flags.PrivateKeyFile
+	if path != "" && c.flags.SSHPrivateKey == "" {
+		bytes, err := os.ReadFile(path)
+		if err != nil {
+			return fmt.Errorf("could not find SSH private key at %q."+
+				" Try a different path", path)
+		}
+		key := string(bytes)
+		c.flags.SSHPrivateKey = key
+
+		if c.flags.Type == string(meroxa.ResourceTypeSnowflake) {
+			if c.flags.Password != "" {
+				c.logger.Warnf(ctx, "ignoring value of --ssh-private-key-file (%s) in favor of value of --password", c.flags.PrivateKeyFile)
+			} else {
+				c.flags.Password = key
+			}
+		}
+	}
+	return nil
+}
diff --git a/cmd/meroxa/root/resources/create_test.go b/cmd/meroxa/root/resources/create_test.go
index 5b9b5c550..353dadf62 100644
--- a/cmd/meroxa/root/resources/create_test.go
+++ b/cmd/meroxa/root/resources/create_test.go
@@ -4,10 +4,15 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
+	"os"
+	"path/filepath"
 	"reflect"
 	"testing"
 
 	"github.com/golang/mock/gomock"
+	"github.com/google/uuid"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
 
 	"github.com/meroxa/cli/cmd/meroxa/builder"
 	"github.com/meroxa/cli/cmd/meroxa/global"
@@ -59,6 +64,9 @@ func TestCreateResourceFlags(t *testing.T) {
 		{name: "metadata", required: false, shorthand: "m"},
 		{name: "env", required: false},
 		{name: "token", required: false},
+		{name: "ssh-url", required: false},
+		{name: "ssh-private-key", required: false},
+		{name: "private-key-file", required: false},
 	}
 
 	c := builder.BuildCobraCommand(&Create{})
@@ -358,3 +366,103 @@ Sign up for the Beta here: https://share.hsforms.com/1Uq6UYoL8Q6eV5QzSiyIQkAc2sm
 		t.Fatalf("expected output:\n%s\ngot:\n%s", wantError, gotError)
 	}
 }
+
+func TestCreateResourceExecutionPrivateKeyFlags(t *testing.T) {
+	ctx := context.Background()
+	logger := log.NewTestLogger()
+
+	keyVal := "super-secret"
+	keyFile := filepath.Join("/tmp", uuid.NewString())
+	err := os.WriteFile(keyFile, []byte(keyVal), 0600)
+	require.NoError(t, err)
+
+	tests := []struct {
+		name                     string
+		inputType                string
+		inputSSHPrivateKeyFlag   string
+		inputPasswordFlag        string
+		inputPrivateKeyFileFlag  string
+		expectedPassword         string
+		expectedSSHPrivateKeyVal string
+	}{
+		{
+			name:                     "create postgres resource with SSH Tunnel --ssh-private-key",
+			inputType:                string(meroxa.ResourceTypePostgres),
+			inputSSHPrivateKeyFlag:   keyVal,
+			expectedPassword:         "",
+			expectedSSHPrivateKeyVal: keyVal,
+		},
+		{
+			name:                     "create postgres resource with SSH Tunnel --private-key-file",
+			inputType:                string(meroxa.ResourceTypePostgres),
+			inputPrivateKeyFileFlag:  keyFile,
+			expectedPassword:         "",
+			expectedSSHPrivateKeyVal: keyVal,
+		},
+		{
+			name:                     "create postgres resource with both SSH flags",
+			inputType:                string(meroxa.ResourceTypePostgres),
+			inputPrivateKeyFileFlag:  keyFile,
+			inputSSHPrivateKeyFlag:   keyVal,
+			expectedPassword:         "",
+			expectedSSHPrivateKeyVal: keyVal,
+		},
+		{
+			name:                     "create snowflake resource with --password",
+			inputType:                string(meroxa.ResourceTypeSnowflake),
+			inputPasswordFlag:        keyVal,
+			expectedPassword:         keyVal,
+			expectedSSHPrivateKeyVal: "",
+		},
+		{
+			name:                     "create snowflake resource with --private-key-file",
+			inputPrivateKeyFileFlag:  keyFile,
+			inputType:                string(meroxa.ResourceTypeSnowflake),
+			expectedPassword:         keyVal,
+			expectedSSHPrivateKeyVal: keyVal,
+		},
+		{
+			name:                     "create snowflake resource with both secret flags",
+			inputPasswordFlag:        keyVal,
+			inputPrivateKeyFileFlag:  keyFile,
+			inputType:                string(meroxa.ResourceTypeSnowflake),
+			expectedPassword:         keyVal,
+			expectedSSHPrivateKeyVal: keyVal,
+		},
+	}
+
+	for _, tc := range tests {
+		t.Run(tc.name, func(t *testing.T) {
+			ctrl := gomock.NewController(t)
+			client := mock.NewMockClient(ctrl)
+
+			c := &Create{
+				client: client,
+				logger: logger,
+			}
+
+			client.
+				EXPECT().
+				CreateResource(
+					ctx,
+					gomock.Any(),
+				).
+				Return(&meroxa.Resource{}, nil)
+
+			c.args.Name = "my-resource"
+			c.flags.Type = tc.inputType
+			c.flags.URL = "anything"
+			c.flags.Password = tc.inputPasswordFlag
+			c.flags.SSHPrivateKey = tc.inputSSHPrivateKeyFlag
+			c.flags.PrivateKeyFile = tc.inputPrivateKeyFileFlag
+
+			err := c.Execute(ctx)
+			if err != nil {
+				t.Fatalf("not expected error, got %q", err.Error())
+			}
+
+			assert.Equalf(t, tc.expectedSSHPrivateKeyVal, c.flags.SSHPrivateKey, "mistach in private key flag value")
+			assert.Equalf(t, tc.expectedPassword, c.flags.Password, "mismatch in password flag value")
+		})
+	}
+}
diff --git a/docs/cmd/md/meroxa_resources_create.md b/docs/cmd/md/meroxa_resources_create.md
index 67c9947c0..c9ca6e2ec 100644
--- a/docs/cmd/md/meroxa_resources_create.md
+++ b/docs/cmd/md/meroxa_resources_create.md
@@ -14,60 +14,92 @@ meroxa resources create [NAME] --type TYPE --url URL [flags]
 
 ```
 
-$ meroxa resources create store --type postgres -u "$DATABASE_URL" --metadata '{"logical_replication":"true"}'
-$ meroxa resources create datalake --type s3 -u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
-$ meroxa resources create warehouse --type redshift -u "$REDSHIFT_URL"
-$ meroxa resources create slack --type url -u "$WEBHOOK_URL"
-$ meroxa resource create mysqldb \
-    --type mysql \
-    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+$ meroxa resource create mybigquery \
+    --type bigquery \
+    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \
+    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
 
-$ meroxa resource create mongo \
-    --type mongodb \
-    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+$ meroxa resource create sourcedb \
+	--type confluentcloud \
+	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create meteor \
+	--type cosmosdb \
+	--url cosmosdb://user:pass@org.documents.azure.com:443/pluto
 
 $ meroxa resource create elasticsearch \
     --type elasticsearch \
     -u "https://$ES_USER:$ES_PASS@$ES_URL:$ES_PORT" \
     --metadata '{"index.prefix": "$ES_INDEX","incrementing.field.name": "$ES_INCREMENTING_FIELD"}'
 
-$ meroxa resource create mybigquery \
-    --type bigquery \
-    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \
-    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
+$ meroxa resource create sourcedb \
+	--type kafka \
+	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create mongo \
+    --type mongodb \
+    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+
+$ meroxa resource create mysqldb \
+    --type mysql \
+    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+
+$ meroxa resource create workspace \
+	--type notion \
+	--token AbCdEfG123456
+
+$ meroxa resource create workspace \
+	--type oracledb \
+	--url oracle://user:password@host.com:1521/database
+
+$ meroxa resources create store \
+	--type postgres \
+	-u "$DATABASE_URL" \
+	--metadata '{"logical_replication":"true"}'
+
+$ meroxa resources create warehouse \
+	--type redshift \
+	-u "$REDSHIFT_URL" \
+    --ssh-url ssh://user@password@example.elb.us-east-1.amazonaws.com:22 \
+	--private-key-file ~/.ssh/my-key
+
+$ meroxa resources create datalake \
+	--type s3 \
+	-u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
 
 $ meroxa resource create snowflake \
     --type snowflakedb \
     -u "snowflake://$SNOWFLAKE_URL/meroxa_db/stream_data" \
     --username meroxa_user \
-    --password $SNOWFLAKE_PRIVATE_KEY
+    --private-key-file /Users/me/.ssh/snowflake_ed25519
 
-$ meroxa resource create sourcedb \
-	--type kafka \
-	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+$ meroxa resource create hr \
+	--type sqlserver \
+	--url "sqlserver://$MSSQL_USER:$MSSQL_PASS@$MSSQL_URL:$MSSQL_PORT/$MSSQL_DB"
 
-$ meroxa resource create sourcedb \
-	--type confluentcloud \
-	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+$ meroxa resources create slack \
+	--type url \
+	-u "$WEBHOOK_URL"
 ```
 
 ### Options
 
 ```
-      --ca-cert string           trusted certificates for verifying resource
-      --client-cert string       client certificate for authenticating to the resource
-      --client-key string        client private key for authenticating to the resource
-      --env string               environment (name or UUID) where resource will be created
-  -h, --help                     help for create
-  -m, --metadata string          resource metadata
-      --password string          password
-      --ssh-private-key string   SSH tunneling private key
-      --ssh-url string           SSH tunneling address
-      --ssl                      use SSL
-      --token string             API Token
-      --type string              resource type (required)
-  -u, --url string               resource url
-      --username string          username
+      --ca-cert string            trusted certificates for verifying resource
+      --client-cert string        client certificate for authenticating to the resource
+      --client-key string         client private key for authenticating to the resource
+      --env string                environment (name or UUID) where resource will be created
+  -h, --help                      help for create
+  -m, --metadata string           resource metadata
+      --password string           password
+      --private-key-file string   path to private key file
+      --ssh-private-key string    SSH tunneling private key
+      --ssh-url string            SSH tunneling address
+      --ssl                       use SSL
+      --token string              API Token
+      --type string               resource type (required)
+  -u, --url string                resource url
+      --username string           username
 ```
 
 ### Options inherited from parent commands
diff --git a/docs/cmd/www/meroxa-resources-create.md b/docs/cmd/www/meroxa-resources-create.md
index 7186d87cb..72967d83a 100644
--- a/docs/cmd/www/meroxa-resources-create.md
+++ b/docs/cmd/www/meroxa-resources-create.md
@@ -21,60 +21,92 @@ meroxa resources create [NAME] --type TYPE --url URL [flags]
 
 ```
 
-$ meroxa resources create store --type postgres -u "$DATABASE_URL" --metadata '{"logical_replication":"true"}'
-$ meroxa resources create datalake --type s3 -u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
-$ meroxa resources create warehouse --type redshift -u "$REDSHIFT_URL"
-$ meroxa resources create slack --type url -u "$WEBHOOK_URL"
-$ meroxa resource create mysqldb \
-    --type mysql \
-    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+$ meroxa resource create mybigquery \
+    --type bigquery \
+    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \
+    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
 
-$ meroxa resource create mongo \
-    --type mongodb \
-    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+$ meroxa resource create sourcedb \
+	--type confluentcloud \
+	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create meteor \
+	--type cosmosdb \
+	--url cosmosdb://user:pass@org.documents.azure.com:443/pluto
 
 $ meroxa resource create elasticsearch \
     --type elasticsearch \
     -u "https://$ES_USER:$ES_PASS@$ES_URL:$ES_PORT" \
     --metadata '{"index.prefix": "$ES_INDEX","incrementing.field.name": "$ES_INCREMENTING_FIELD"}'
 
-$ meroxa resource create mybigquery \
-    --type bigquery \
-    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \
-    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
+$ meroxa resource create sourcedb \
+	--type kafka \
+	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create mongo \
+    --type mongodb \
+    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+
+$ meroxa resource create mysqldb \
+    --type mysql \
+    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+
+$ meroxa resource create workspace \
+	--type notion \
+	--token AbCdEfG123456
+
+$ meroxa resource create workspace \
+	--type oracledb \
+	--url oracle://user:password@host.com:1521/database
+
+$ meroxa resources create store \
+	--type postgres \
+	-u "$DATABASE_URL" \
+	--metadata '{"logical_replication":"true"}'
+
+$ meroxa resources create warehouse \
+	--type redshift \
+	-u "$REDSHIFT_URL" \
+    --ssh-url ssh://user@password@example.elb.us-east-1.amazonaws.com:22 \
+	--private-key-file ~/.ssh/my-key
+
+$ meroxa resources create datalake \
+	--type s3 \
+	-u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
 
 $ meroxa resource create snowflake \
     --type snowflakedb \
     -u "snowflake://$SNOWFLAKE_URL/meroxa_db/stream_data" \
     --username meroxa_user \
-    --password $SNOWFLAKE_PRIVATE_KEY
+    --private-key-file /Users/me/.ssh/snowflake_ed25519
 
-$ meroxa resource create sourcedb \
-	--type kafka \
-	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+$ meroxa resource create hr \
+	--type sqlserver \
+	--url "sqlserver://$MSSQL_USER:$MSSQL_PASS@$MSSQL_URL:$MSSQL_PORT/$MSSQL_DB"
 
-$ meroxa resource create sourcedb \
-	--type confluentcloud \
-	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+$ meroxa resources create slack \
+	--type url \
+	-u "$WEBHOOK_URL"
 ```
 
 ### Options
 
 ```
-      --ca-cert string           trusted certificates for verifying resource
-      --client-cert string       client certificate for authenticating to the resource
-      --client-key string        client private key for authenticating to the resource
-      --env string               environment (name or UUID) where resource will be created
-  -h, --help                     help for create
-  -m, --metadata string          resource metadata
-      --password string          password
-      --ssh-private-key string   SSH tunneling private key
-      --ssh-url string           SSH tunneling address
-      --ssl                      use SSL
-      --token string             API Token
-      --type string              resource type (required)
-  -u, --url string               resource url
-      --username string          username
+      --ca-cert string            trusted certificates for verifying resource
+      --client-cert string        client certificate for authenticating to the resource
+      --client-key string         client private key for authenticating to the resource
+      --env string                environment (name or UUID) where resource will be created
+  -h, --help                      help for create
+  -m, --metadata string           resource metadata
+      --password string           password
+      --private-key-file string   path to private key file
+      --ssh-private-key string    SSH tunneling private key
+      --ssh-url string            SSH tunneling address
+      --ssl                       use SSL
+      --token string              API Token
+      --type string               resource type (required)
+  -u, --url string                resource url
+      --username string           username
 ```
 
 ### Options inherited from parent commands
diff --git a/etc/completion/meroxa.completion.sh b/etc/completion/meroxa.completion.sh
index c520c0bea..66b6f4e67 100644
--- a/etc/completion/meroxa.completion.sh
+++ b/etc/completion/meroxa.completion.sh
@@ -1760,6 +1760,8 @@ _meroxa_resources_create()
     two_word_flags+=("-m")
     flags+=("--password=")
     two_word_flags+=("--password")
+    flags+=("--private-key-file=")
+    two_word_flags+=("--private-key-file")
     flags+=("--ssh-private-key=")
     two_word_flags+=("--ssh-private-key")
     flags+=("--ssh-url=")
diff --git a/etc/man/man1/meroxa-resources-create.1 b/etc/man/man1/meroxa-resources-create.1
index 88a7016c6..9aa3af4b0 100644
--- a/etc/man/man1/meroxa-resources-create.1
+++ b/etc/man/man1/meroxa-resources-create.1
@@ -45,6 +45,10 @@ Use the create command to add resources to your Meroxa resource catalog.
 \fB--password\fP=""
 	password
 
+.PP
+\fB--private-key-file\fP=""
+	path to private key file
+
 .PP
 \fB--ssh-private-key\fP=""
 	SSH tunneling private key
@@ -98,41 +102,72 @@ Use the create command to add resources to your Meroxa resource catalog.
 
 .nf
 
-$ meroxa resources create store --type postgres -u "$DATABASE_URL" --metadata '{"logical_replication":"true"}'
-$ meroxa resources create datalake --type s3 -u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
-$ meroxa resources create warehouse --type redshift -u "$REDSHIFT_URL"
-$ meroxa resources create slack --type url -u "$WEBHOOK_URL"
-$ meroxa resource create mysqldb \\
-    --type mysql \\
-    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+$ meroxa resource create mybigquery \\
+    --type bigquery \\
+    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \\
+    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
 
-$ meroxa resource create mongo \\
-    --type mongodb \\
-    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+$ meroxa resource create sourcedb \\
+	--type confluentcloud \\
+	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create meteor \\
+	--type cosmosdb \\
+	--url cosmosdb://user:pass@org.documents.azure.com:443/pluto
 
 $ meroxa resource create elasticsearch \\
     --type elasticsearch \\
     -u "https://$ES_USER:$ES_PASS@$ES_URL:$ES_PORT" \\
     --metadata '{"index.prefix": "$ES_INDEX","incrementing.field.name": "$ES_INCREMENTING_FIELD"}'
 
-$ meroxa resource create mybigquery \\
-    --type bigquery \\
-    -u "bigquery://$GCP_PROJECT_ID/$GCP_DATASET_NAME" \\
-    --client-key "$(cat $GCP_SERVICE_ACCOUNT_JSON_FILE)"
+$ meroxa resource create sourcedb \\
+	--type kafka \\
+	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+
+$ meroxa resource create mongo \\
+    --type mongodb \\
+    -u "mongodb://$MONGO_USER:$MONGO_PASS@$MONGO_URL:$MONGO_PORT"
+
+$ meroxa resource create mysqldb \\
+    --type mysql \\
+    --url "mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_URL:$MYSQL_PORT/$MYSQL_DB"
+
+$ meroxa resource create workspace \\
+	--type notion \\
+	--token AbCdEfG123456
+
+$ meroxa resource create workspace \\
+	--type oracledb \\
+	--url oracle://user:password@host.com:1521/database
+
+$ meroxa resources create store \\
+	--type postgres \\
+	-u "$DATABASE_URL" \\
+	--metadata '{"logical_replication":"true"}'
+
+$ meroxa resources create warehouse \\
+	--type redshift \\
+	-u "$REDSHIFT_URL" \\
+    --ssh-url ssh://user@password@example.elb.us-east-1.amazonaws.com:22 \\
+	--private-key-file ~/.ssh/my-key
+
+$ meroxa resources create datalake \\
+	--type s3 \\
+	-u "s3://$AWS_ACCESS_KEY_ID:$AWS_ACCESS_KEY_SECRET@us-east-1/meroxa-demos"
 
 $ meroxa resource create snowflake \\
     --type snowflakedb \\
     -u "snowflake://$SNOWFLAKE_URL/meroxa_db/stream_data" \\
     --username meroxa_user \\
-    --password $SNOWFLAKE_PRIVATE_KEY
+    --private-key-file /Users/me/.ssh/snowflake_ed25519
 
-$ meroxa resource create sourcedb \\
-	--type kafka \\
-	--url kafka+sasl+ssl://$KAFKA_USER:$KAFKA_PASS@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+$ meroxa resource create hr \\
+	--type sqlserver \\
+	--url "sqlserver://$MSSQL_USER:$MSSQL_PASS@$MSSQL_URL:$MSSQL_PORT/$MSSQL_DB"
 
-$ meroxa resource create sourcedb \\
-	--type confluentcloud \\
-	--url kafka+sasl+ssl://$API_KEY:$API_SECRET@<$BOOTSTRAP_SERVER>?sasl_mechanism=plain
+$ meroxa resources create slack \\
+	--type url \\
+	-u "$WEBHOOK_URL"
 
 .fi
 .RE