Skip to main content

Field Notice: Upcoming changes to Snowflake connection authentication

What is changing?

Snowflake is transitioning away from password-only authentication to a secure by default behavior for new Snowflake accounts. This change will deliver stronger protection for authentication across all Snowflake services.

Although the password-only authentication will be supported by Snowflake for existing accounts for some time, we strongly advise updating your username and password authentication to Key-pair authentication as soon as possible.

Who is impacted?

  • Metadata collection: Only the Snowflake collectors using the Username and password authentication are impacted. If you are already using Username and Key-pair authentication for your collectors, no action is required.

  • Virtualization connections: Only the Snowflake connections using the Username and password authentication are impacted. If you are already using Username and Key-pair authentication for your connections, no action is required.

Action required for metadata collectors

  1. Follow these steps to configure Username and Key-pair authentication in Snowflake.

  2. Update your collector configuration to use the Username and Key pair authentication.

    1. If you are using Cloud collectors, update the collector configuration to use Authenticate using a private key file.

      snowflake_authentication.png
    2. If you are using On-premise collectors, update the collector configuration to use Authenticate using a private key file. Next, update the CLI command and YAML file to use new authentication parameters.

  3. Run your collector to make sure the authentication for the collector is configured properly.

Action required for virtualization connections

  1. Configure Username and Key-pair authentication in Snowflake.

  2. Update the Snowflake configuration in the Connection Manager to use the Connection private key authentication.

    snowflake_authentication_CM.png
  3. Test your connection to make sure the authentication for the connection is configured properly.

Support