apache/airflow

Add support for Snowflake Workload Identity Federation

Open

#54983 opened on Aug 27, 2025

View on GitHub
 (8 comments) (0 reactions) (0 assignees)Python (44,809 stars) (16,781 forks)batch import
area:providersgood first issuekind:featureprovider:snowflake

Description

Description

Snowflake now supports Workload Identity Federation, and we want this to be usable for connections in airflow. https://docs.snowflake.com/en/user-guide/workload-identity-federation

Use case/motivation

Current snowflake connections rely on password or private key authentication. When Airflow is running in a cloud environment e.g. AWS, Azure, we want to utilise WIF connections, removing the need to manage and store long-lived credentials

Related issues

No response

Are you willing to submit a PR?

  • Yes I am willing to submit a PR!

Code of Conduct

Contributor guide

Tech stack
pythonawsazure
Domain
backendsecurityauthenticationcloud
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
over 1 week
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
PythonAirflow basicsSnowflake knowledgeCloud IAM
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20
Research direction
Review Snowflake's workload identity federation documentation and the existing Airflow Snowflake provider (likely in airflow/providers/snowflake/hooks). Investigate how AWS and Azure IAM roles can be used to generate tokens for Snowflake. Look at existing cloud specific hooks for inspiration, and consider adding a new authentication method to the Snowflake connection.