Schema:

ACCOUNT_USAGE

TRI_SECRET_SECURE_HISTORY view

This Account Usage view provides information about Tri-Secret Secure customer-managed keys (CMKs) within the last year (365 days).

Columns

Column nameData typeDescription
IDNUMBERSystem-generated ID that uniquely identifies a CMK used in the account.
REGISTERED_BY_USER_IDNUMBER

Identifies the user who registered the CMK. Also appears in the ACCOUNT_USAGE view if a customer self-registered the CMK.

CMK_ACTIVATION_STATUSVARCHAR

Activation status of the CMK. Valid values are:

  • PENDING_ACTIVATION
  • ACTIVATED
  • PENDING_DEACTIVATION
  • DISABLED
CMK_IDENTIFIERVARCHAR

Displays a value that you can use to locate your customer managed key. For example:

  • AWS: key ARN
  • Azure: https://mykeyvault.vault.azure.com/keys/my-rsa-key
  • Google Cloud: projects/PROJECT_ID/locations/LOCATION/keyRings/KEY_RING/cryptoKeys/KEY_NAME
IS_REGISTEREDBOOLEANWhether the key represented by the CMK identifier is registered or not.
REGISTERED_ONTIMESTAMP_LTZIdentifies the last time when a user registered the CMK.
ACTIVATED_ONTIMESTAMP_LTZIdentifies the last time when a user activated the CMK.
DISABLED_ONTIMESTAMP_LTZIdentifies the last time when a user disabled the CMK.
UPDATED_ONTIMESTAMP_LTZIdentifies the time of the last update to this view.

Usage notes

  • This view requires the SECURITY_VIEWER role.
  • Latency for the view may be up to 120 minutes (2 hours).

Examples

Retrieve all Tri-Secret Secure history records:

SELECT * FROM SNOWFLAKE.ACCOUNT_USAGE.TRI_SECRET_SECURE_HISTORY;