feat(pam): snowflake account

[lb-vn]

Description 📣

New Snowflake account type for PAM with 3 auth methods. Supports web access and CLI access (proxy).

Type ✨

• Bug fix
• New feature
• Improvement
• Breaking change
• Documentation

Tests 🛠️

# Here's some code block to paste some code snippets

---

• I have read the contributing guide, agreed and acknowledged the code of conduct. 📝

[linear]

PAM-426

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​aws/​aws-sdk-go-v2@​v1.30.3 ⏵ v1.38.1

View full report

[veria-ai]

PR overview

All previously flagged issues have been addressed. No open security concerns remain on this pull request.

Security review

No open security issues remain on this pull request.

Fixed/addressed: 3 · PR risk: 0/10

[greptile-apps]

Confidence Score: 0/5

The PR is not safe to merge until credential-bearing Snowflake destinations are constrained and request and response decompression are bounded.

Findings

1.   Account Enables Request Redirection ▶
2.   Decompressed Requests Are Unbounded ▶
3.   Result Responses Are Unbounded ▶
4.  JDBC Parameters Are Unescaped ▶

Summary

• Adds Snowflake login, query polling, cancellation, token renewal, result translation, and logout behavior.
• Integrates Snowflake credentials and resource routing throughout PAM and gateway connection tests.
• Adds focused proxy, authentication, cancellation, parsing, and uploader tests.
• Introduces blocking outbound-request and memory-exhaustion risks that should be addressed before merge.