Snowflake Is Killing Password Logins for Service Accounts
Snowflake has announced it's ending support for password-based authentication on legacy service accounts, the non-human credentials that let scripts, pipelines, and integrations connect to its data warehouse. Organizations will need to migrate these accounts to more secure methods like key pairs or OAuth tokens.
On paper, this is a straightforward security upgrade. In practice, security firm Token Security points out the real obstacle isn't switching authentication methods - it's that most companies don't actually know what each service account does, who created it, or what data it can still touch. Years of accumulated automation mean many of these accounts are undocumented, over-permissioned, or tied to systems nobody currently owns.
That makes the migration less a technical swap and more an overdue audit of forgotten machine identities scattered across cloud environments.