Schema:

ACCOUNT_USAGE

TRI_SECRET_SECURE_HISTORY view

This Account Usage view provides information about Tri-Secret Secure customer-managed keys (CMKs) within the last year (365 days).

Columns

Column name

Data type

Description

ID

NUMBER

System-generated ID that uniquely identifies a CMK used in the account.

REGISTERED_BY_USER_ID

NUMBER

Identifies the user who registered the CMK. Also appears in the ACCOUNT_USAGE view if a customer self-registered the CMK.

CMK_ACTIVATION_STATUS

VARCHAR

Activation status of the CMK. Valid values are:

  • PENDING_ACTIVATION

  • ACTIVATED

  • PENDING_DEACTIVATION

  • DISABLED

CMK_IDENTIFIER

VARCHAR

Displays a value that you can use to locate your customer managed key. For example:

  • AWS: key ARN

  • Azure: https://mykeyvault.vault.azure.com/keys/my-rsa-key

  • Google Cloud: projects/PROJECT_ID/locations/LOCATION/keyRings/KEY_RING/cryptoKeys/KEY_NAME

IS_REGISTERED

BOOLEAN

Whether the key represented by the CMK identifier is registered or not.

REGISTERED_ON

TIMESTAMP_LTZ

Identifies the last time when a user registered the CMK.

ACTIVATED_ON

TIMESTAMP_LTZ

Identifies the last time when a user activated the CMK.

DISABLED_ON

TIMESTAMP_LTZ

Identifies the last time when a user disabled the CMK.

UPDATED_ON

TIMESTAMP_LTZ

Identifies the time of the last update to this view.

Usage notes

  • This view requires the SECURITY_VIEWER role.

  • Latency for the view may be up to 120 minutes (2 hours).

Examples

Retrieve all Tri-Secret Secure history records:

SELECT * FROM SNOWFLAKE.ACCOUNT_USAGE.TRI_SECRET_SECURE_HISTORY;