Skip to main content

Documentation Index

Fetch the complete documentation index at: https://infisical.com/docs/llms.txt

Use this file to discover all available pages before exploring further.

Prerequisites:
  • Set up and add secrets to Infisical Cloud
  • Create a Snowflake Connection
  • An existing Snowflake database and schema that secrets should be written to
  • The Snowflake user behind the connection must have the following privileges on the target schema: USAGE on the database, USAGE on the schema, and CREATE SECRET (plus OWNERSHIP on the synced secrets to support deletions)
  • Ensure your network security policies allow incoming requests from Infisical to your Snowflake account, if network restrictions apply
Snowflake Sync writes Infisical secrets as native Snowflake secrets of type GENERIC_STRING (created via CREATE OR REPLACE SECRET).
  1. Navigate to Project > Integrations and select the Secret Syncs tab. Click on the Add Sync button. Secret Syncs Tab
  2. Select the Snowflake option. Select Snowflake
  3. Configure the Source from where secrets should be retrieved, then click Next. Configure Source
  • Environment: The project environment to retrieve secrets from.
  • Secret Path: The folder path to retrieve secrets from.
If you need to sync secrets from multiple folder locations, check out secret imports.
  1. Configure the Destination to where secrets should be deployed, then click Next. Configure Destination
  • Snowflake Connection: The Snowflake Connection to authenticate with.
  • Database: The name of the Snowflake database to write secrets to. The database must already exist.
  • Schema: The name of the Snowflake schema (within the selected database) where secrets will be created. The schema must already exist.
Infisical validates that the database and schema exist before creating any secrets. If either is missing or the connected Snowflake user lacks access, the sync fails with a descriptive error and no changes are written.
Databases and schemas in the selectors are returned in lexicographic (A–Z) order by name. See Snowflake’s SHOW DATABASES reference for details.
  1. Configure the Sync Options to specify how secrets should be synced, then click Next. Configure Options
    • Initial Sync Behavior: Determines how Infisical should resolve the initial sync.
      • Overwrite Destination Secrets: Removes any secrets at the destination endpoint not present in Infisical.
      Snowflake does not support importing secrets.
    • Key Schema: Template that determines how secret names are transformed when syncing, using {{secretKey}} as a placeholder for the original secret name and {{environment}} for the environment.
    We highly recommend using a Key Schema to ensure that Infisical only manages the specific keys you intend, keeping everything else in the schema untouched.
    • Auto-Sync Enabled: If enabled, secrets will automatically be synced from the source location when changes occur. Disable to enforce manual syncing only.
    • Disable Secret Deletion: If enabled, Infisical will not remove secrets from the sync destination. Enable this option if you intend to manage some secrets manually outside of Infisical.
  2. Configure the Details of your Snowflake Sync, then click Next. Configure Details
  • Name: The name of your sync. Must be slug-friendly.
  • Description: An optional description for your sync.
  1. Review your Snowflake Sync configuration, then click Create Sync. Review Configuration
  2. If enabled, your Snowflake Sync will begin syncing your secrets to the destination schema. Sync Created