v2.20.0

2.20.0 (2026-08-21)

❗ Migration guide: v2.19.x -> v2.20.0

🎉 What's new:

• Add new preview snowflake_hybrid_table resource (#220) (#211) (#182) (#214) (#215) (#195) (#200)
• Add new preview snowflake_external_access_integration resource and snowflake_external_access_integrations data source (#108) (#150) (#152) (#77) (#83)
• Add ACCOUNT_ROLE_SHOW_CACHING experiment (#186)
• Add GRANTS_SHOW_CACHING experiment (#185)
• Add tfc_workload_identity_token_tag provider field (#203)
• Add backup_instance_families to snowflake_compute_pool (#197) (#196)
• Support for_all_person_users and for_all_service_users in account policy attachments (#98)
• Add ADAPTIVE refresh mode for dynamic tables (#157), references #5097

🔧 Misc:

• Normalize created_on in network policies and listings show_output to a timestamp (#159)
• Add backup policies SDK (#187)

🐛 Bug fixes:

• Support TABLE(<type>) data metric function arguments in grant resources and the grants data source (#138), references #5087
• Do not raise the skip_toml_file_permission_verification deprecation warning when the field is not set (#91), closes #5082
• Fix import of the per-type file format resources (#119), fixes #5086
• Parse file format describe enums case-insensitively (#97), references #5085
• Ignore SNOWFLAKE_ACCOUNT unless the PROVIDER_CONFIGURATION_ACCOUNT_FALLBACK experiment is enabled (#122), references #5083
• Describe Iceberg tables with unstructured column types without failing (#134), references #5090
• Handle unprefixed database role grantee names in SHOW GRANTS (BCR-2371) (#199)
• Prevent perpetual warehouse min_cluster_count / max_cluster_count drift on Standard edition (#219)

v2.19.0

2.19.0 (2026-07-30)

❗ Migration guide: v2.18.x -> v2.19.0

🎉 What's new:

• Rework snowflake_account_authentication_policy_attachment and snowflake_user_authentication_policy_attachment to update policies in-place instead of recreating, detect drift from external changes, and (for the account attachment) migrate the resource ID to the fully qualified name format (#5078)
• Enhanced file format support, references #5057
  • Add new preview file format resources: snowflake_file_format_avro, _csv, _json, _orc, _parquet, _xml (#5057) (#5067) (#5039) (#5058) (#5059) (#5056) (#5028)
  • Rework snowflake_file_formats data source with in-block filtering (IN ACCOUNT/IN DATABASE/LIKE), with_describe support, and a new show_output/describe_output shape (breaking change) (#5076)
  • Deprecate snowflake_file_format resource in favor of the new per-type resources (#5075)
• Add aws_sns_topic to snowflake_stage_external_s3 directory table options (#4980), fixes #4966
• Support SNOWFLAKE INTELLIGENCE and INTERACTIVE TABLE object types in grant and tag association resources (#5049) (#5071) (#5074)
• Add new preview snowflake_warehouse_interactive resource (#5009) (#4987) (#5037)
• Add inherited grants support across the snowflake_grants data source, snowflake_grant_privileges_to_account_role, and snowflake_grant_privileges_to_database_role (#5047) (#5030) (#5016) (#5026) (#4994)
• Add PROVIDER_CONFIGURATION_ACCOUNT_FALLBACK experiment, allowing a single account field as a fallback for organization_name/account_name (#5065)
• Add AUTHENTICATOR_EXPLICIT_ONLY experiment to disable implicit authenticator derivation from token configuration (#5053)
• Add OBJECT_PARAMETER_UNSET_ON_DELETE experiment to properly unset object-level parameters on delete instead of resetting them to their default value (#5052)
• Add issuer to default_workload_identity.aws on snowflake_service_user and snowflake_legacy_service_user for JWT-based AWS workload identity federation (#4964), closes #4963
• Support future and bulk grants on WORKSPACES (#5051), references #5004
• Add missing DEFAULT_*_COMPUTE_POOL parameters for Notebooks and Streamlit apps across snowflake_account_parameter, snowflake_current_account, snowflake_database, snowflake_secondary_database, snowflake_shared_database, and snowflake_schema (#5069), references #5048
• Add allowed_roles_list to snowflake_oauth_integration_for_custom_clients and snowflake_oauth_integration_for_partner_applications (#4937) (#4947), references #4773
• Add new preview Iceberg table resources (snowflake_iceberg_table_from_rest, snowflake_iceberg_table_from_aws_glue, snowflake_iceberg_table) and the snowflake_iceberg_tables data source, with column/constraint, row access/aggregation policy, and partition/cluster support (#4938) (#4940) (#5007) (#5011) (#4995) (#5003) (#4871) (#5019)
• Add new preview MCP server resource and snowflake_mcp_servers data source (#5029) (#5012) (#5005)
• Add resource_monitor field to snowflake_warehouse_adaptive (#4931), closes #4897

🔧 Misc:

• snowflake_network_rules data source promoted to stable, correcting an omission from the v2.17.0 promotion (#5073)
• show_output.partition_specs on Iceberg table resources is now a structured list instead of a raw JSON string (#5003)
• Deprecate skip_toml_file_permission_verification provider attribute (#5072)
• Clarify saml2_snowflake_x509_cert field availability (#4962)

🐛 Bug fixes:

• Fix snowflake_storage_integration_aws/snowflake_storage_integration_azure import diffs on storage_aws_external_id and use_privatelink_endpoint (#5054), closes #5020
• snowflake_grant_account_role SHOW GRANTS caching no longer serializes parallel role lookups (#5001)
• snowflake_external_volume no longer removes and re-adds unchanged storage locations (#5017)
• Recreate snowflake_warehouse/snowflake_warehouse_adaptive when the type changes externally to INTERACTIVE (#5066)

v2.18.0

2.18.0 (2026-07-07)

❗ Migration guide: v2.17.x -> v2.18.0

🎉 What's new:

• API integration resources reworked (#4883, #4765, #4822, #4860, #4869, #4870, #4872, #4873, #4874, #4875, #4876, #4898)
  • Deprecate snowflake_api_integration
  • Add nine new provider-specific resources added (snowflake_api_integration_amazon_api_gateway, snowflake_api_integration_azure_api_management, snowflake_api_integration_google_cloud_api_gateway, snowflake_api_integration_git_repository_*, snowflake_api_integration_external_mcp_*)
  • Add snowflake_api_integrations data source
• Add new storage lifecycle policy resources and data source (preview)
  • Add snowflake_storage_lifecycle_policy resource (#4852)
  • Add snowflake_table_storage_lifecycle_policy_attachment resource (#4901, #4894, #4889)
  • Add snowflake_storage_lifecycle_policies data source (#4879)
• Add new Iceberg Table resources (preview)
  • snowflake_iceberg_table_from_files (#4842)
  • snowflake_iceberg_table_from_delta_files (#4884)
• Add snowflake_postgres_instance resource (preview) (#4759)
• Add log_event_level parameter support across databases, schemas, functions, procedures, tasks, and users (#4796) (#4799)
• Add Cortex Code daily credit limit account parameters (#4913)
• Add ENABLE_PER_ACCOUNT_APP_SERVICE_PRIVATELINK_URL account parameter (#4906), references #4826
• Add missing GEN2 and ARM compute pool instance families (#4918), references #4916
• Add snowflake_grant_ownership support for AGENT and CORTEX SEARCH SERVICE object types (#4859) (#4906), closes #4844, references #4868
• Add tagging support for Iceberg table columns in snowflake_tag_association (#4886)
• Allow hyphens in listing name validation (#4653)
• snowflake_grant_ownership now revokes on-future grants on resource destroy (#4948)
• New experiment flags:
  • HIERARCHY_RENAMES: changing parent identifier fields no longer forces resource recreation (#4825) (#4891) (#4881)
  • GRANT_ACCOUNT_ROLE_SHOW_CACHING: experiment for snowflake_grant_account_role to reduce redundant SHOW GRANTS OF ROLE calls in large RBAC configurations (#4855)

🔧 Misc:

• Multiple resources and data sources promoted to stable (#4920)

🐛 Bug fixes:

• Fix panic when adding a column with a constant default to snowflake_table (#4914), references #4730
• Fix MODEL MONITOR object type mismatch in grant resources causing perpetual non-empty plans (#4806)
• Fix SQL emission: identifier quoting, single-quote escaping, and privilege validation (#4952) (#4955)
• Fix provider block explicit false values being overridden by TOML profile (#4950)
• Fix overriding resource fields in task resource during upgrade from v0.98.0 (#4949)
• Fix Iceberg table object type normalization in GET_TAG (#4867)

v2.17.0

2.17.0 (2026-05-28)

❗ Migration guide: v2.16.0 -> v2.17.0

🎉 What's new:

• Add Cortex agent resource and data source (#4739) (#4774) (#4786)
• Adjust oauth_scopes to be optional in secret with client credentials flow (#4760)
• Add new fields in desc_output for AWS Glue catalog integrations (#4750), references #4745
• Support use_privatelink_endpoint for Azure storage locations in snowflake_external_volume (#4720), references #4663
• Support granting privileges on connections to account role (#4737), references #4727
• Add new attributes to snowflake_system_get_privatelink_config data source (#4379), references #4360

🔧 Misc:

• Bump Go to 1.26.3 (#4725)

🐛 Bug fixes:

• Fix adding a resource_monitor reference to an existing snowflake_warehouse in the same apply that creates the monitor (#4733), references #4188
• Fix non empty plans after importing snowflake_catalog_integration_iceberg_rest and snowflake_catalog_integration_open_catalog resources (#4784) (#4787)
• Fix an error that may occur when creating a snowflake_account resource  (#4726), references #4641
• Setting default_ddl_collation = "" now overrides a value inherited from the parent database (#4731)
• Fix snowflake_tag crashes on Standard accounts (#4668), references #4651
• Removing enabled from the config now restores Snowflake's default of TRUE for snowflake_saml2_integration resource (#4757)

v2.16.0

2.16.0 (2026-05-08)

❗ Migration guide: v2.15.x -> v2.16.0

🎉 What's new:

• Add session policy resource and data source (#4645) (#4666) (#4677)
• Add snowflake_account_session_policy_attachment resource (#4671)
• Add snowflake_user_session_policy_attachment resource (#4666)
• Rework password policy resource (#4693)
• Add password policies data source (#4696)
• Catalog integration resources: computed catalog_source to detect external drift (#4682)

🔧 Misc:

• Bump Go module dependencies (#4649)

🐛 Bug fixes:

• Fix AccountURL() for prefixed region format (#4650), references #4632
• Fix TABLE(...) data type parsing with parameterized column types (#4667)
• Fix show_initial_rows not set on stream import (#4659), references #3896
• Add experiment for safe handling of PUBLIC role grants (#4664), references #3001

v2.15.0

2.15.0 (2026-04-13)

❗ Migration guide: v2.14.x -> v2.15.0

🎉 What's new:

• Bump Go Snowflake driver to v2 (#4480)
• New GRANTS_SAFE_DESTROY experiment: silently succeed on grant destroy when the underlying Snowflake object is missing (#4581) (#4604) (#4614) (#4617) (#4630), references #3412, #4136
• New TAG_ASSOCIATION_SAFE_DESTROY experiment: silently succeed on tag association destroy when the tagged object is missing (#4616), references #3869
• Tag resource enhancements: propagation and conflict resolution support, new ordered_allowed_values field (deprecates allowed_values), new TAGS_ALLOW_EMPTY_ALLOWED_VALUES experiment
  (#4586) (#4498), references #4238
• Add catalog integration resources and data source
  • Catalog integration SDK and describe rework (#4483) (#4528)
  • Add snowflake_catalog_integration_aws_glue resource (#4539)
  • Add snowflake_catalog_integration_object_storage resource (#4542)
  • Add snowflake_catalog_integration_open_catalog resource (#4555)
  • Add snowflake_catalog_integration_iceberg_rest resource (#4574)
  • Add snowflake_catalog_integrations data source (#4585)
• Add adaptive warehouse resource and data source support (#4508) (#4556) (#4584) (#4594) (#4600) (#4605) (#4609) (#4623)
• Rework snowflake_external_volume: add S3COMPAT storage, new S3 fields, restructured describe_output (#4482) (#4488) (#4504) (#4510) (#4536)
• Add missing account parameters to snowflake_account_parameter (#4544) (#4559), references #3080
• Add authentication policy enhancements: client_policy block, PAT policy field, OTP MFA method (#4551), references #4552
• Add snowflake_external_volumes data source (#4535)
• Support future grants on IMAGE REPOSITORIES in grant resources (#4599)
• Add encryption attribute to snowflake_image_repository resource (#4624) (#4633)
• Support granting ownership on DBT PROJECT objects (#4570)
• Add Private Facts and Metrics support in semantic views (#4380)

🔧 Misc:

• Add hybrid table SDK support (#4454)
• Add webhook notification integration SDK updates (#4540)
• Extend session policies SDK definition (#4602) (#4622)

🐛 Bug fixes:

• Fix nil pointer dereference panics in snowflake_account (#4541), references #4101
• Fix allowed_accounts update in snowflake_failover_group (#4487), references #3946
• Fix AGENT and MCP SERVER object types in grant resources causing perpetual non-empty plans (#4529) (#4532), references #4524, #4593
• Fix panic in snowflake_view when last column has masking policy without using clause (#4579)
• Fix describe_output permadiff on stage resources (#4588), references #4514
• Fix "object does not exist" errors in snowflake_authentication_policy after Snowflake DESC output change (#4571) (#4577)
• Add IMPORT_BOOLEAN_DEFAULT experiment to fix post-import permadiff on stage boolean fields (#4572), references #4549
• Fix table column masking policy application after BCR 2026_02 (#4615), references #4608
• Fix tag association object type mapping (#4554)
• Fix tag resource read behavior (#4638)

v2.14.1

2.14.1 (2026-03-25)

❗ Migration guide: v2.14.0 -> v2.14.1

🐛 Bug fixes:

• Add IMPORT_BOOLEAN_DEFAULT experiment to fix post-import permadiff on stage resources #4560, fixes #4549
• Fix authentication policy describe parsing behavior #4562, fixes #4557

v2.14.0

2.14.0 (2026-02-25)

❗ Migration guide: v2.13.x -> v2.14.0

🎉 What's new:

• Add import validation for snowflake_grant_privileges_to_account_role (#4462), references #3944
• Add network rules data source (#4460)
• Network rule rework (#4459) (#4433) (#4452) (#4481), references #3956, #4437
• Support DECFLOAT datatype (#4485) (#4489)
• Add missing object types in grant resource (#4478), references #4414

🔧 Misc

• Rework external volumes SDK (#4463)

🐛 Bug fixes:

• Fix timestamp parsing in stage resources (#4448), references #4445
• Fix updating shares (#4473), references #4398
• Detect external changes of user types (#4318)

v2.13.0

2.13.0 (2026-02-12)

🎉 What's new:

• WIF support, references #3942
  • WIF support for legacy service and service users (#4367)
• Add new stage resources, references several issues
  • Prepare new stage resources (#4366) (#4377) (#4378) (#4389) (#4404) (#4407) (#4409) (#4411) (#4410) (#4431)
  • Add file formats (#4418) (#4420) (#4422) (#4423) (#4424) (#4425)
  • Rework stages data source (#4432)
• Add new storage integration resources, references several issues
  • Prepare new storage integration resources (#4395) (#4421) (#4426) (#4427) (#4428) (#4430)
  • Extract storage integration details for describe outputs (#4419)'
  • Rework storage integrations data source (#4429)
• Implement strict privilege management in grants (#4280) (#4281) (#4282) (#4296), references #3973
• Adjustments for gov regions (#4391) (#4376), references #4011
• Make the parameters output conditional (#4387) (#4388), references #3118

🔧 Misc

• Improve documentation
  • Add experimental features to contributing guide(#4386)
  • Add experimental features with descriptions to the registry documentation (#4350)
  • Add proxy section to the registry documentation (#4320)
• Adjustments of authentication policies
  • Make authentication policies compliant with 2025_06 general enablement (#4375)
  • Adjust authentication policy snowflake output handling (#4261)
• Use UNSET for certain fields in warehouses (#4343)

🐛 Bug fixes:

• Make policy and privatelink compatible with quoted identifiers (#4390), references #1630
• Preserve state after failed schema updates due to insufficient privileges (#4340)
• Fix tag association identifier parsing during update (#4412), closes #4403

v2.12.0

2.12.0 (2025-12-18)

❗ New roadmap entry
❗ Migration guide: v2.11.x -> v2.12.0
❗ BCR Migration guide

🐛 Bug fixes

• Remove the account parameter #4172, fixes #4010
• Correct handling of grants to APPLICATION in SHOW GRANTS #4288, fixes #4284

🎉 What's new

• Expand provider configuration options
  • Add CRL fields #4287
  • Add Proxy fields #4276
• Add missing parameters for serverless tasks #4082, -solves #3473
• Allow a custom run_as_role in snowflake_scim_integration #4243
• Add listing data source #4205
• Add support for new object types in the migration tool:
  • Database #4247
  • Role #4254
  • User #4262
  • Warehouse #4249
  • Schemas #4236

🔧 Misc

• Improve documentation and contributor guides #4305, #4267, #4295, #4244, #4256, #4257, #4301
• Update SDK, generators, and dependencies:
  • Add user WIF auth to the SDK #4202
  • Update the stages SDK #4279
  • Bump the Go driver to 1.18.1 #4303
    Upgrade dependencies #4263
• Make the repository compatible with git-worktree #4242