---
title: "DELETE /api/v2/secret-rotations/snowflake-user-key-pair/{rotationId}"
method: DELETE
path: "/api/v2/secret-rotations/snowflake-user-key-pair/{rotationId}"
tags: ["Secret Rotations"]
---

# DELETE /api/v2/secret-rotations/snowflake-user-key-pair/{rotationId}

`DELETE /api/v2/secret-rotations/snowflake-user-key-pair/{rotationId}`

Delete the specified Snowflake User Key Pair Rotation.

## Path parameters

- `rotationId` string, uuid, required

## Query parameters

- `deleteSecrets` 'true' | 'false'
- `revokeGeneratedCredentials` 'true' | 'false'

## Response `200`

Default Response

- object
  - `secretRotation` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `description` string, nullable
    - `isAutoRotationEnabled` boolean
    - `activeIndex` number
    - `folderId` string, uuid, required
    - `connectionId` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `rotationInterval` number, required
    - `rotationStatus` string, required
    - `lastRotationAttemptedAt` string, date-time, required
    - `lastRotatedAt` string, date-time, required
    - `lastRotationJobId` string, nullable
    - `nextRotationAt` string, date-time, nullable
    - `isLastRotationManual` boolean
    - `connection` object, required
      - `app` 'snowflake', required
      - `name` string, required
      - `id` string, uuid, required
    - `environment` object, required
      - `slug` string, required
      - `name` string, required
      - `id` string, uuid, required
    - `projectId` string, required
    - `folder` object, required
      - `id` string, required
      - `path` string, required
    - `rotateAtUtc` object, required
      - `hours` number, required
      - `minutes` number, required
    - `lastRotationMessage` string, nullable
    - `type` 'snowflake-user-key-pair', required
    - `parameters` object, required
      - `username` string, required — The Snowflake user whose RSA key pair will be rotated. If the user does not exist, it is created as a key-pair-only SERVICE user.
      - `modulusLength` union — The modulus length in bits of the generated RSA key pairs. Defaults to 2048.
        - 2048
        - 4096
    - `secretsMapping` object, required
      - `privateKey` string, required — The name of the secret that the generated RSA private key (PKCS#8 PEM) will be mapped to.
      - `publicKey` string, required — The name of the secret that the generated RSA public key (SPKI PEM) will be mapped to.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/885aef3e6c11/schema)