Snowflake Network Rule Terraform Module: terraform-snowflake-network-rule

This Terraform module creates a Snowflake network rule to manage network access to a Snowflake database. The network rule is configured with parameters for the database, schema, traffic mode, and list of allowed or denied values (e.g., IP addresses).

Module Diagram

graph TD
    A[main.tf] -->|uses| B[variables.tf]
    A -->|produces| C[outputs.tf]
    B -->|provides| D[network_rule_name]
    B -->|provides| E[network_rule_database]
    B -->|provides| F[network_rule_schema]
    B -->|provides| G[network_rule_comment]
    B -->|provides| H[network_rule_type]
    B -->|provides| I[network_rule_traffic_mode]
    B -->|provides| J[network_rule_value_list]
    C -->|outputs| K[network_rule_id]
    C -->|outputs| L[network_rule_name]
    C -->|outputs| M[network_rule_type]

Loading

CICD Implementations

An Example of a CICD Integration using Codefresh and BitBucket with this module can be found below:

Requirements

• Terraform: Version >= 1.5.7
• Snowflake Provider: Version ~> 0.97.0

Usage

module "snowflake_network_rule" {
  source = "git::https://github.com/Richard-Barrett/terraform-snowflake-network-rule.git?ref=0.2.0"


  network_rule_name         = "example_rule"
  network_rule_database     = "EXAMPLE_DB"
  network_rule_schema       = "EXAMPLE_SCHEMA"
  network_rule_type         = "TYPE_OF_RULE"  # Replace with your specific rule type
  network_rule_traffic_mode = "ALLOW"         # or "DENY"
  network_rule_value_list   = ["192.168.1.1", "192.168.2.0/24"]
}

Inputs

Name	Description	Type	Default	Required
network_rule_comment	A comment to add to the network rule. Defaults to a generated comment if null.	string	null	No
network_rule_database	The database where the network rule will be applied.	string	n/a	Yes
network_rule_name	The name of the network rule to be created.	string	n/a	Yes
network_rule_schema	The schema within the database where the network rule will be applied.	string	n/a	Yes
network_rule_traffic_mode	The mode of traffic for the network rule (e.g., ALLOW, DENY).	string	n/a	Yes
network_rule_type	The type of network rule.	string	n/a	Yes
network_rule_value_list	A list of values (e.g., IP addresses) for the network rule.	list(string)	n/a	Yes

Outputs

Name	Description
network_rule_id	The ID of the created network rule.
network_rule_name	The name of the created network rule.
network_rule_database	The database associated with the network rule.
network_rule_schema	The schema associated with the network rule.
network_rule_comment	The comment added to the network rule.
network_rule_value_list	The list of values associated with the network rule.

Requirements

Name	Version
terraform	>= 1.5.7
snowflake	~> 0.97.0

Providers

Name	Version
snowflake	~> 0.97.0

Modules

No modules.

Resources

Name	Type
snowflake_network_rule.this	resource

Inputs

Name	Description	Type	Default	Required
network_rule_comment	A comment to add to the network rule. Defaults to a generated comment if not provided.	string	null	no
network_rule_database	The database where the network rule will be applied.	string	n/a	yes
network_rule_name	The name of the network rule to be created.	string	n/a	yes
network_rule_schema	The schema within the database where the network rule will be applied.	string	n/a	yes
network_rule_traffic_mode	The mode of traffic for the network rule (e.g., ALLOW, DENY).	string	n/a	yes
network_rule_type	The type of network rule.	string	n/a	yes
network_rule_value_list	A list of values (e.g., IP addresses) for the network rule.	list(string)	n/a	yes

Outputs

Name	Description
network_rule_id	The ID of the network rule.
network_rule_name	The name of the network rule.
network_rule_type	The type of the network rule.

Licence

MIT License. See LICENSE for full details.