Snowflake key pair Authentication and rotation

Last updated on March 11, 2025

Overview​

Key Pair Authentication enhances the security of Snowflake connector by allowing secure access to your Snowflake data warehouse without exposing user passwords.

This section outlines how to generate and retrieve a key pair from the Data Connector service and then implement key pair authentication within your Snowflake user account.

Generate key pair​

The Snowflake connector service automatically generates a public-private key pair when creating a Snowflake connector configuration. The public key is provided in the API response upon successful configuration creation. The private key is stored securely on the Data Connector service.

Implement key pair authentication​

  1. Create roles, users, and databases. Ensure that you grant the necessary privileges to users. See Configure Snowflake permission setup to learn how.

  2. Retrieve the public key from the API response of the Snowflake connector configuration creation.

  3. Implement the public key to the Snowflake user.

Rotate a key pair​

To enhance security, it is recommended to rotate the key pair periodically. It can be done through the Admin Portal to update the Snowflake connector configuration. The new public key will be provided in the API response upon successful configuration update. The private key will be updated securely on the Data Connector service.

Last updated on

On this page