Amazon Quick Suite now supports key pair authentication to Snowflake data source

2026-02-19 · Source: Artificial Intelligence · Field: Technology & Digital — Cloud Computing & IT Infrastructure, Data Science & Analytics, Cybersecurity & Data Privacy · Depth: Intermediate, medium

Summary

Amazon Quick Sight now supports key pair authentication for Snowflake integrations, utilizing RSA key pairs and asymmetric cryptography to replace traditional passwords. This enhancement addresses critical enterprise security and compliance needs, especially as Snowflake deprecates password-based authentication. The new capability allows Amazon Quick Sight users to establish secure, passwordless connections to Snowflake data sources, ensuring seamless integration that meets modern security standards. The process involves generating an RSA key pair using OpenSSL, configuring the Snowflake user account with the public key, and then establishing the data source connection either through the Amazon Quick Sight UI or programmatically via AWS CLI. Optional integration with AWS Secrets Manager is available for programmatic setups to manage keys securely.

Key takeaway

For MLOps Engineers or Data Engineers managing cloud data integrations, adopting Amazon Quick Sight's new key pair authentication for Snowflake is crucial. This transition enhances security, streamlines compliance, and eliminates password-related vulnerabilities, aligning with Snowflake's deprecation of password-based methods. Implement this to secure your data pipelines and reduce operational friction, ensuring robust and automated data connectivity.

Key insights

Amazon Quick Sight now offers secure, passwordless Snowflake integration using RSA key pair authentication.

Principles

• Asymmetric encryption enhances data security.
• Passwordless authentication reduces attack surface.

Method

Generate RSA keys with OpenSSL, assign the public key to a Snowflake user, then configure the connection in Amazon Quick Sight via UI or AWS CLI, optionally using AWS Secrets Manager.

In practice

• Use `openssl genrsa` to create private keys.
• Use `ALTER USER SET RSA_PUBLIC_KEY` in Snowflake.
• Store private keys in AWS Secrets Manager.

Topics

• Key Pair Authentication
• Amazon Quick Sight
• Snowflake Integration
• AWS Secrets Manager
• Asymmetric Cryptography

Best for: Data Engineer, DevOps Engineer, MLOps Engineer

Related on AIssential

• CloudFront Adds Origin mTLS Authentication for End-to-End Zero Trust — CloudFront's origin mTLS enables cryptographic, end-to-end zero-trust authentication, replacing IP allowlists and shared secrets.
• MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension — AI coding tools' auto-execution of workspace configurations without consent poses a systemic risk for code execution and credential theft.
• Take Control: Customer-Managed Keys for Lakebase Postgres — Lakebase CMK offers comprehensive, customer-controlled encryption for both storage and ephemeral compute via hierarchical Envelope Encryption.
• What’s new in Databricks Platform security and compliance at Data + AI Summit 2026 — Databricks enhances platform security and compliance to enable scalable, context-aware AI innovation across diverse cloud environments.
• Bridging the Visibility Gap: A Unified Security Operating Model for Hybrid Cloud Teams — Wiz unifies hybrid cloud security by extending cloud-native risk visibility and threat detection to on-premise workloads.
• Reference your own AWS Secrets Manager secrets in Amazon Bedrock AgentCore Identity — Amazon Bedrock AgentCore Identity now allows referencing existing AWS Secrets Manager secrets for enhanced credential governance.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Artificial Intelligence.