network_policies

Creates, updates, deletes, gets or lists a network_policies resource.

Overview

Name	network_policies
Type	Resource
Id	snowflake.network_policy.network_policies

Fields

Name	Datatype	Description
name	string	Name of the network policy
allowed_ip_list	array	List of allowed IPs in a network policy
allowed_network_rule_list	array	List of names of allowed network rules in a network policy
blocked_ip_list	array	List of blocked IPs in a network policy
blocked_network_rule_list	array	List of names of blocked network rules in a network policy
comment	string	user comment associated to an object in the dictionary
created_on	string	Date and time when the network policy was created.
owner	string	Role that owns the network policy
owner_role_type	string	The type of role that owns the network policy

Methods

Name	Accessible by	Required Params	Optional Params	Description
fetch_network_policy	SELECT	name, endpoint	-	Fetch a network policy
list_network_policies	SELECT	endpoint	-	List network policies
create_network_policy	INSERT	data__name, endpoint	createMode	Create a network policy
delete_network_policy	DELETE	name, endpoint	ifExists	Delete a network policy

Optional Parameter Details

Name	Description	Type	Default
createMode	Query parameter allowing support for different modes of resource creation. Possible values include: - errorIfExists: Throws an error if you try to create a resource that already exists. - orReplace: Automatically replaces the existing resource with the current one. - ifNotExists: Creates a new resource when an alter is requested for a non-existent resource.	string	errorIfExists
ifExists	Query parameter that specifies how to handle the request for a resource that does not exist: - true: The endpoint does not throw an error if the resource does not exist. It returns a 200 success response, but does not take any action on the resource. - false: The endpoint throws an error if the resource doesn't exist.	boolean	false

SELECT examples

List network policies

SELECT
name,
allowed_ip_list,
allowed_network_rule_list,
blocked_ip_list,
blocked_network_rule_list,
comment,
created_on,
owner,
owner_role_type
FROM snowflake.network_policy.network_policies
WHERE endpoint = '{{ endpoint }}';

INSERT example

Use the following StackQL query and manifest file to create a new network_policies resource.

Required Properties

/*+ create */
INSERT INTO snowflake.network_policy.network_policies (
data__name,
data__allowed_network_rule_list,
data__blocked_network_rule_list,
data__allowed_ip_list,
data__blocked_ip_list,
data__comment,
endpoint
)
SELECT 
'{{ name }}',
'{{ allowed_network_rule_list }}',
'{{ blocked_network_rule_list }}',
'{{ allowed_ip_list }}',
'{{ blocked_ip_list }}',
'{{ comment }}',
'{{ endpoint }}'
;

All Properties

/*+ create */
INSERT INTO snowflake.network_policy.network_policies (
data__name,
endpoint
)
SELECT 
'{{ name }}',
'{{ endpoint }}'
;

Manifest

- name: network_policies
  props:
    - name: data__name
      value: string
    - name: endpoint
      value: string
    - name: name
      value: string
    - name: allowed_network_rule_list
      value: array
    - name: blocked_network_rule_list
      value: array
    - name: allowed_ip_list
      value: array
    - name: blocked_ip_list
      value: array
    - name: comment
      value: string

DELETE example

Deletes the specified network_policies resource.

/*+ delete */
DELETE FROM snowflake.network_policy.network_policies
WHERE name = '{{ name }}'
AND endpoint = '{{ endpoint }}';