Snowflake v2.9.0, Nov 1 25

Snowflake v2.9.0 published on Saturday, Nov 1, 2025 by Pulumi

snowflake.getAuthenticationPolicies

Explain and create a snowflake.getAuthenticationPolicies resource

Snowflake v2.9.0 published on Saturday, Nov 1, 2025 by Pulumi

!> Caution: Preview Feature This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to preview_features_enabled field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.

Data source used to get details of filtered authentication policies. Filtering is aligned with the current possibilities for SHOW AUTHENTICATION POLICIES query. The results of SHOW and DESCRIBE are encapsulated in one output collection authentication_policies.

Using getAuthenticationPolicies

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getAuthenticationPolicies(args: GetAuthenticationPoliciesArgs, opts?: InvokeOptions): Promise<GetAuthenticationPoliciesResult>
function getAuthenticationPoliciesOutput(args: GetAuthenticationPoliciesOutputArgs, opts?: InvokeOptions): Output<GetAuthenticationPoliciesResult>

def get_authentication_policies(in_: Optional[GetAuthenticationPoliciesIn] = None,
                                like: Optional[str] = None,
                                limit: Optional[GetAuthenticationPoliciesLimit] = None,
                                on: Optional[GetAuthenticationPoliciesOn] = None,
                                starts_with: Optional[str] = None,
                                with_describe: Optional[bool] = None,
                                opts: Optional[InvokeOptions] = None) -> GetAuthenticationPoliciesResult
def get_authentication_policies_output(in_: Optional[pulumi.Input[GetAuthenticationPoliciesInArgs]] = None,
                                like: Optional[pulumi.Input[str]] = None,
                                limit: Optional[pulumi.Input[GetAuthenticationPoliciesLimitArgs]] = None,
                                on: Optional[pulumi.Input[GetAuthenticationPoliciesOnArgs]] = None,
                                starts_with: Optional[pulumi.Input[str]] = None,
                                with_describe: Optional[pulumi.Input[bool]] = None,
                                opts: Optional[InvokeOptions] = None) -> Output[GetAuthenticationPoliciesResult]

func GetAuthenticationPolicies(ctx *Context, args *GetAuthenticationPoliciesArgs, opts ...InvokeOption) (*GetAuthenticationPoliciesResult, error)
func GetAuthenticationPoliciesOutput(ctx *Context, args *GetAuthenticationPoliciesOutputArgs, opts ...InvokeOption) GetAuthenticationPoliciesResultOutput

> Note: This function is named GetAuthenticationPolicies in the Go SDK.

public static class GetAuthenticationPolicies 
{
    public static Task<GetAuthenticationPoliciesResult> InvokeAsync(GetAuthenticationPoliciesArgs args, InvokeOptions? opts = null)
    public static Output<GetAuthenticationPoliciesResult> Invoke(GetAuthenticationPoliciesInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetAuthenticationPoliciesResult> getAuthenticationPolicies(GetAuthenticationPoliciesArgs args, InvokeOptions options)
public static Output<GetAuthenticationPoliciesResult> getAuthenticationPolicies(GetAuthenticationPoliciesArgs args, InvokeOptions options)

fn::invoke:
  function: snowflake:index/getAuthenticationPolicies:getAuthenticationPolicies
  arguments:
    # arguments dictionary

The following arguments are supported:

In GetAuthenticationPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
On GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

In GetAuthenticationPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
On GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

in GetAuthenticationPoliciesIn: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

in GetAuthenticationPoliciesIn: IN clause to filter the list of objects
like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
startsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe boolean: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

in_ GetAuthenticationPoliciesIn: IN clause to filter the list of objects
like str: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
starts_with str: Filters the output with case-sensitive characters indicating the beginning of the object name.
with_describe bool: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

in Property Map: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit Property Map: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on Property Map: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

getAuthenticationPolicies Result

The following output properties are available:

AuthenticationPolicies List<GetAuthenticationPoliciesAuthenticationPolicy>: Holds the aggregated output of all authentication policies details queries.
Id string: The provider-assigned unique ID for this managed resource.
In GetAuthenticationPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
On GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

AuthenticationPolicies []GetAuthenticationPoliciesAuthenticationPolicy: Holds the aggregated output of all authentication policies details queries.
Id string: The provider-assigned unique ID for this managed resource.
In GetAuthenticationPoliciesIn: IN clause to filter the list of objects
Like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
Limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
On GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
StartsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
WithDescribe bool: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

authenticationPolicies List<GetAuthenticationPoliciesAuthenticationPolicy>: Holds the aggregated output of all authentication policies details queries.
id String: The provider-assigned unique ID for this managed resource.
in GetAuthenticationPoliciesIn: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

authenticationPolicies GetAuthenticationPoliciesAuthenticationPolicy[]: Holds the aggregated output of all authentication policies details queries.
id string: The provider-assigned unique ID for this managed resource.
in GetAuthenticationPoliciesIn: IN clause to filter the list of objects
like string: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
startsWith string: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe boolean: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

authentication_policies Sequence[GetAuthenticationPoliciesAuthenticationPolicy]: Holds the aggregated output of all authentication policies details queries.
id str: The provider-assigned unique ID for this managed resource.
in_ GetAuthenticationPoliciesIn: IN clause to filter the list of objects
like str: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit GetAuthenticationPoliciesLimit: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on GetAuthenticationPoliciesOn: Lists the policies that are effective on the specified object.
starts_with str: Filters the output with case-sensitive characters indicating the beginning of the object name.
with_describe bool: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

authenticationPolicies List<Property Map>: Holds the aggregated output of all authentication policies details queries.
id String: The provider-assigned unique ID for this managed resource.
in Property Map: IN clause to filter the list of objects
like String: Filters the output with case-insensitive pattern, with support for SQL wildcard characters (% and _).
limit Property Map: Limits the number of rows returned. If the limit.from is set, then the limit will start from the first element matched by the expression. The expression is only used to match with the first element, later on the elements are not matched by the prefix, but you can enforce a certain pattern with starts_with or like.
on Property Map: Lists the policies that are effective on the specified object.
startsWith String: Filters the output with case-sensitive characters indicating the beginning of the object name.
withDescribe Boolean: (Default: true) Runs DESC AUTHENTICATION POLICY for each service returned by SHOW AUTHENTICATION POLICIES. The output of describe is saved to the description field. By default this value is set to true.

Supporting Types

GetAuthenticationPoliciesAuthenticationPolicy

DescribeOutputs List<GetAuthenticationPoliciesAuthenticationPolicyDescribeOutput>: Holds the output of DESCRIBE AUTHENTICATION POLICY.
ShowOutputs List<GetAuthenticationPoliciesAuthenticationPolicyShowOutput>: Holds the output of SHOW AUTHENTICATION POLICIES.

DescribeOutputs []GetAuthenticationPoliciesAuthenticationPolicyDescribeOutput: Holds the output of DESCRIBE AUTHENTICATION POLICY.
ShowOutputs []GetAuthenticationPoliciesAuthenticationPolicyShowOutput: Holds the output of SHOW AUTHENTICATION POLICIES.

describeOutputs List<GetAuthenticationPoliciesAuthenticationPolicyDescribeOutput>: Holds the output of DESCRIBE AUTHENTICATION POLICY.
showOutputs List<GetAuthenticationPoliciesAuthenticationPolicyShowOutput>: Holds the output of SHOW AUTHENTICATION POLICIES.

describeOutputs GetAuthenticationPoliciesAuthenticationPolicyDescribeOutput[]: Holds the output of DESCRIBE AUTHENTICATION POLICY.
showOutputs GetAuthenticationPoliciesAuthenticationPolicyShowOutput[]: Holds the output of SHOW AUTHENTICATION POLICIES.

describe_outputs Sequence[GetAuthenticationPoliciesAuthenticationPolicyDescribeOutput]: Holds the output of DESCRIBE AUTHENTICATION POLICY.
show_outputs Sequence[GetAuthenticationPoliciesAuthenticationPolicyShowOutput]: Holds the output of SHOW AUTHENTICATION POLICIES.

describeOutputs List<Property Map>: Holds the output of DESCRIBE AUTHENTICATION POLICY.
showOutputs List<Property Map>: Holds the output of SHOW AUTHENTICATION POLICIES.

GetAuthenticationPoliciesAuthenticationPolicyDescribeOutput

AuthenticationMethods string
ClientTypes string
Comment string
MfaAuthenticationMethods string
MfaEnrollment string
MfaPolicy string
Name string
Owner string
PatPolicy string
SecurityIntegrations string
WorkloadIdentityPolicy string

AuthenticationMethods string
ClientTypes string
Comment string
MfaAuthenticationMethods string
MfaEnrollment string
MfaPolicy string
Name string
Owner string
PatPolicy string
SecurityIntegrations string
WorkloadIdentityPolicy string

authenticationMethods String
clientTypes String
comment String
mfaAuthenticationMethods String
mfaEnrollment String
mfaPolicy String
name String
owner String
patPolicy String
securityIntegrations String
workloadIdentityPolicy String

authenticationMethods string
clientTypes string
comment string
mfaAuthenticationMethods string
mfaEnrollment string
mfaPolicy string
name string
owner string
patPolicy string
securityIntegrations string
workloadIdentityPolicy string

authentication_methods str
client_types str
comment str
mfa_authentication_methods str
mfa_enrollment str
mfa_policy str
name str
owner str
pat_policy str
security_integrations str
workload_identity_policy str

authenticationMethods String
clientTypes String
comment String
mfaAuthenticationMethods String
mfaEnrollment String
mfaPolicy String
name String
owner String
patPolicy String
securityIntegrations String
workloadIdentityPolicy String

GetAuthenticationPoliciesAuthenticationPolicyShowOutput

Comment string
CreatedOn string
DatabaseName string
Kind string
Name string
Options string
Owner string
OwnerRoleType string
SchemaName string

Comment string
CreatedOn string
DatabaseName string
Kind string
Name string
Options string
Owner string
OwnerRoleType string
SchemaName string

comment String
createdOn String
databaseName String
kind String
name String
options String
owner String
ownerRoleType String
schemaName String

comment string
createdOn string
databaseName string
kind string
name string
options string
owner string
ownerRoleType string
schemaName string

comment str
created_on str
database_name str
kind str
name str
options str
owner str
owner_role_type str
schema_name str

comment String
createdOn String
databaseName String
kind String
name String
options String
owner String
ownerRoleType String
schemaName String

GetAuthenticationPoliciesIn

Account bool: Returns records for the entire account.
Application string: Returns records for the specified application.
ApplicationPackage string: Returns records for the specified application package.
Database string: Returns records for the current database in use or for a specified database.
Schema string: Returns records for the current schema in use or a specified schema. Use fully qualified name.

Account bool: Returns records for the entire account.
Application string: Returns records for the specified application.
ApplicationPackage string: Returns records for the specified application package.
Database string: Returns records for the current database in use or for a specified database.
Schema string: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account Boolean: Returns records for the entire account.
application String: Returns records for the specified application.
applicationPackage String: Returns records for the specified application package.
database String: Returns records for the current database in use or for a specified database.
schema String: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account boolean: Returns records for the entire account.
application string: Returns records for the specified application.
applicationPackage string: Returns records for the specified application package.
database string: Returns records for the current database in use or for a specified database.
schema string: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account bool: Returns records for the entire account.
application str: Returns records for the specified application.
application_package str: Returns records for the specified application package.
database str: Returns records for the current database in use or for a specified database.
schema str: Returns records for the current schema in use or a specified schema. Use fully qualified name.

account Boolean: Returns records for the entire account.
application String: Returns records for the specified application.
applicationPackage String: Returns records for the specified application package.
database String: Returns records for the current database in use or for a specified database.
schema String: Returns records for the current schema in use or a specified schema. Use fully qualified name.

GetAuthenticationPoliciesLimit

Rows int: The maximum number of rows to return.
From string: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

Rows int: The maximum number of rows to return.
From string: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows Integer: The maximum number of rows to return.
from String: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows number: The maximum number of rows to return.
from string: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows int: The maximum number of rows to return.
from_ str: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

rows Number: The maximum number of rows to return.
from String: Specifies a case-sensitive pattern that is used to match object name. After the first match, the limit on the number of rows will be applied.

GetAuthenticationPoliciesOn

Account bool: Returns records for the entire account.
User string: Returns records for the specified user.

Account bool: Returns records for the entire account.
User string: Returns records for the specified user.

account Boolean: Returns records for the entire account.
user String: Returns records for the specified user.

account boolean: Returns records for the entire account.
user string: Returns records for the specified user.

account bool: Returns records for the entire account.
user str: Returns records for the specified user.

account Boolean: Returns records for the entire account.
user String: Returns records for the specified user.

Package Details

Repository: Snowflake pulumi/pulumi-snowflake
License: Apache-2.0
Notes: This Pulumi package is based on the snowflake Terraform Provider.

Snowflake v2.9.0 published on Saturday, Nov 1, 2025 by Pulumi

pulumi/pulumi-snowflake

snowflake.getAuthenticationPolicies

On this page

On this page

Using getAuthenticationPolicies

getAuthenticationPolicies Result

Supporting Types

GetAuthenticationPoliciesAuthenticationPolicy

GetAuthenticationPoliciesAuthenticationPolicyDescribeOutput

GetAuthenticationPoliciesAuthenticationPolicyShowOutput

GetAuthenticationPoliciesIn

GetAuthenticationPoliciesLimit

GetAuthenticationPoliciesOn

Package Details

On this page

On this page