snowflakedb/terraform-provider-snowflake v2.19.0

on GitHub

2.19.0 (2026-07-30)

❗ Migration guide: v2.18.x -> v2.19.0

🎉 What's new:

• Rework snowflake_account_authentication_policy_attachment and snowflake_user_authentication_policy_attachment to update policies in-place instead of recreating, detect drift from external changes, and (for the account attachment) migrate the resource ID to the fully qualified name format (#5078)
• Enhanced file format support, references #5057
  • Add new preview file format resources: snowflake_file_format_avro, _csv, _json, _orc, _parquet, _xml (#5057) (#5067) (#5039) (#5058) (#5059) (#5056) (#5028)
  • Rework snowflake_file_formats data source with in-block filtering (IN ACCOUNT/IN DATABASE/LIKE), with_describe support, and a new show_output/describe_output shape (breaking change) (#5076)
  • Deprecate snowflake_file_format resource in favor of the new per-type resources (#5075)
• Add aws_sns_topic to snowflake_stage_external_s3 directory table options (#4980), fixes #4966
• Support SNOWFLAKE INTELLIGENCE and INTERACTIVE TABLE object types in grant and tag association resources (#5049) (#5071) (#5074)
• Add new preview snowflake_warehouse_interactive resource (#5009) (#4987) (#5037)
• Add inherited grants support across the snowflake_grants data source, snowflake_grant_privileges_to_account_role, and snowflake_grant_privileges_to_database_role (#5047) (#5030) (#5016) (#5026) (#4994)
• Add PROVIDER_CONFIGURATION_ACCOUNT_FALLBACK experiment, allowing a single account field as a fallback for organization_name/account_name (#5065)
• Add AUTHENTICATOR_EXPLICIT_ONLY experiment to disable implicit authenticator derivation from token configuration (#5053)
• Add OBJECT_PARAMETER_UNSET_ON_DELETE experiment to properly unset object-level parameters on delete instead of resetting them to their default value (#5052)
• Add issuer to default_workload_identity.aws on snowflake_service_user and snowflake_legacy_service_user for JWT-based AWS workload identity federation (#4964), closes #4963
• Support future and bulk grants on WORKSPACES (#5051), references #5004
• Add missing DEFAULT_*_COMPUTE_POOL parameters for Notebooks and Streamlit apps across snowflake_account_parameter, snowflake_current_account, snowflake_database, snowflake_secondary_database, snowflake_shared_database, and snowflake_schema (#5069), references #5048
• Add allowed_roles_list to snowflake_oauth_integration_for_custom_clients and snowflake_oauth_integration_for_partner_applications (#4937) (#4947), references #4773
• Add new preview Iceberg table resources (snowflake_iceberg_table_from_rest, snowflake_iceberg_table_from_aws_glue, snowflake_iceberg_table) and the snowflake_iceberg_tables data source, with column/constraint, row access/aggregation policy, and partition/cluster support (#4938) (#4940) (#5007) (#5011) (#4995) (#5003) (#4871) (#5019)
• Add new preview MCP server resource and snowflake_mcp_servers data source (#5029) (#5012) (#5005)
• Add resource_monitor field to snowflake_warehouse_adaptive (#4931), closes #4897

🔧 Misc:

• snowflake_network_rules data source promoted to stable, correcting an omission from the v2.17.0 promotion (#5073)
• show_output.partition_specs on Iceberg table resources is now a structured list instead of a raw JSON string (#5003)
• Deprecate skip_toml_file_permission_verification provider attribute (#5072)
• Clarify saml2_snowflake_x509_cert field availability (#4962)

🐛 Bug fixes:

• Fix snowflake_storage_integration_aws/snowflake_storage_integration_azure import diffs on storage_aws_external_id and use_privatelink_endpoint (#5054), closes #5020
• snowflake_grant_account_role SHOW GRANTS caching no longer serializes parallel role lookups (#5001)
• snowflake_external_volume no longer removes and re-adds unchanged storage locations (#5017)
• Recreate snowflake_warehouse/snowflake_warehouse_adaptive when the type changes externally to INTERACTIVE (#5066)