In snowplow/snowplow-rdb-loader@656adb3, support was added to store snowflake passwords in ec2 parameter store. It would be great if support was added in the terraform module as well, to avoid the real password being stored in the state file.

"password": {
  "ec2ParameterStore": {
    "parameterName": "path.to.snowflake.password"
  }
}

The instance role should then also include the policies required to read that password.