Overview

Snowflake API Credentials

What You Need

• A Snowflake account identifier
• A Snowflake username
• A private key file (.pem) generated for your Snowflake user

How to Set Up Key-Pair Authentication in Snowflake

1. Generate a key pair

On your local machine, generate a private key and a corresponding public key:

1. Generate a private key:
   • openssl genrsa -out private_key.pem 2048
2. Generate the public key from the private key:
   • openssl rsa -in private_key.pem -pubout -out public_key.pem

2. Assign the public key to your Snowflake user

1. Log in to Snowflake with a user that has the SECURITYADMIN role or higher.
2. Open the public key file (public_key.pem) and copy the key content — everything between (but not including) the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- lines.
3. Run the following SQL, replacing the placeholders with your values:
   • ALTER USER your_username SET RSA_PUBLIC_KEY='<paste public key content here>';

3. Note your Snowflake account identifier

• Your account identifier follows the format orgname-accountname or the legacy format accountname.region.cloud.
• You can find it in the Snowflake UI under Admin → Accounts, or in the URL of your Snowflake instance.

Need more help? Click here for Snowflake's key-pair authentication documentation.

Authenticate Snowflake in Alchemer

After setting up key-pair authentication in Snowflake, add your credentials to the Alchemer Snowflake integration. Credentials are securely stored in Alchemer and can be reused.

How to Authenticate

1. Start a New Authentication

• Inside any Snowflake integration action, select New Authentication.

2. Enter Your Snowflake Credentials

• Account Identifier: Your Snowflake account identifier (e.g., orgname-accountname)
• Username: The Snowflake username associated with the public key
• Private Key: The contents of your private_key.pem file

3. Save Your Authentication

• Select Create.
• Once created:
  • The authentication is saved and reused for all Snowflake actions
  • You only need to update it if your key pair or account credentials change