skills.rest
kameshsampath
kameshsampathCOMMUNITY
Explore all skills by this author →
Website𝕏@kamesh_sampathGitHub

snow-utils-pat

Automates Snowflake PAT credential setup and rotation for service accounts.

Updated Aug 27, 2026
Search Tags:#automation#network-policy#snowflake#service-account#pat#authentication-policy
One-click install
npx skills add https://github.com/kameshsampath/snow-utils-skills --skill snow-utils-pat
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: snow-utils-pat
Source: https://github.com/kameshsampath/snow-utils-skills/tree/main/snow-utils-pat
Command: npx skills add https://github.com/kameshsampath/snow-utils-skills --skill snow-utils-pat

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires network, snow_utils_common.

What problem does it solve?

This skill streamlines the secure creation, rotation, and management of Snowflake Programmatic Access Tokens (PATs) for service accounts, reducing manual steps and mitigating credential risk.

Core Features & Use Cases

  • Service account provisioning: Create service users and PATs with enforced network and authentication policies.
  • PAT rotation and renewal: Rotate tokens without re-creating infrastructure, preserving policies.
  • Policy-driven security: Automatically attach network rules, network policies, and authentication policies to PAT-enabled users.
  • Use Case: When automating Snowflake-based CI/CD pipelines, quickly set up a PAT-enabled service user with restricted access for automated tasks.

Quick Start

Install the skill in Cortex Code and run a PAT creation with a simple command like: pat.py create --user my_sa --role demo_role --db my_utils.

Frequently Asked Questions about snow-utils-pat

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Snowflake PAT creation for service accounts?▼

Snowflake PAT rotation is handled by the pat.py orchestrator, which renews tokens without re-creating infrastructure while preserving existing network and authentication policies. This ensures continuous service automation access without manual credential updates.

What is the best way to secure service account credentials in Snowflake CI/CD pipelines?▼

You need the Snow CLI installed, the pat.py orchestrator, and the snow_utils_common helpers including the network and snow_utils_common dependencies. These components manage the creation of service users, network policies, authentication policies, and tokens.

Can I attach network and authentication policies when provisioning Snowflake service users?▼

Yes, you can automatically attach network rules, network policies, and authentication policies to PAT-enabled service users during provisioning. The pat.py orchestrator enforces these security policies to ensure service accounts have restricted, revocable access.

Why use Programmatic Access Tokens instead of passwords for Snowflake service automation?▼

Programmatic Access Tokens provide restricted, revocable access for service automation, reducing credential risk compared to static passwords. PATs can be rotated without re-creating infrastructure and enforce network and authentication policies for CI/CD and runtime automation environments.

Related Skills

Explore More Software Engineering Skills→
astronomerastronomer
419

managing-astro-local-env

Manage local Airflow environments using Astro CLI lifecycle commands.

Official
Advanced
519lab519lab
2

1password

Automate sign-in, reading, and injection of secrets via the 1Password CLI.

Official
Intermediate
elasticelastic
546

cloud-network-security

Manage Elastic Cloud Serverless network security policies via IP and AWS PrivateLink VPC filters.

Official
Intermediate
clawdataclawdata
24

snowflake

Query and manage Snowflake warehouses, schemas, and tables via the snow CLI.

Official
Intermediate