Skip to content

Expose Snowflake Integration Manager through Snowflake Connector block #17937

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
robfreedy opened this issue Apr 29, 2025 · 1 comment
Open
Labels
enhancement An improvement of an existing feature

Comments

@robfreedy
Copy link
Contributor

Describe the current behavior

Currently, the SnowflakeCredentials block exposes the private key directly, which creates potential security risks. Users who need to work with Snowflake Integration Manager must retrieve the private key from the credentials block, which unnecessarily exposes sensitive information that could be exfiltrated.

Describe the proposed behavior

Expose the Snowflake SimpleIngestManager directly through the SnowflakeConnector instead of requiring users to extract the private key from the credentials block. This would:

  1. Keep credentials properly encapsulated within the connector
  2. Provide a more secure workflow that prevents secret exfiltration
  3. Create a more cohesive experience for Snowflake-related operations

Example Use

See github link attached above

Additional context

No response

@robfreedy robfreedy added the enhancement An improvement of an existing feature label Apr 29, 2025
@zzstoatzz
Copy link
Collaborator

hi @robfreedy - thanks for the issue. I am wondering if you can expand on this

the SnowflakeCredentials block exposes the private key directly, which creates potential security risks

which part is insecure and why?

the linked repository is not a dependency of prefect-snowflake at this time but it could be if there was some demonstrable value!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement An improvement of an existing feature
Projects
None yet
Development

No branches or pull requests

2 participants