After upgrading to snowflake-connector-python ≥ 3.17.x, we’re seeing verbose botocore.credentials DEBUG logs every time the connector initializes, even when AWS_EC2_METADATA_DISABLED=true is set and no AWS authentication is used.
Example log output:
Looking for credentials via: env
Looking for credentials via: assume-role
Looking for credentials via: assume-role-with-web-identity
Access to EC2 metadata has been disabled.
Looking for credentials via: shared-credentials-file
Looking for credentials via: iam-role
These logs appear in non-AWS environments (Kubernetes / on-prem) where Snowflake Connector is only being used with standard user/password or keypair authentication.
They are emitted by the internal boto3 / botocore libraries bundled with the connector, and can clutter our application logs even though no actual metadata lookup or AWS authentication is required.