update_tag
Update the masking configuration for an existing Snowflake tag. Provide tag group ID, database ID, and friendly name; optionally modify masking type, custom role, or data type list.
Instructions
Update an existing tag connection's masking configuration.
SNOWFLAKE ONLY. Databricks tags are not ALTR-managed objects, so there is no Databricks tag configuration to update — change Databricks masking by editing the policy or its rules instead.
Use get_tags to find the tag_group_id of the tag you want
to update. To connect a new tag, use connect_tag instead.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tag_group_id | Yes | Tag group identifier from `get_tags`. | |
| database_id | Yes | Numeric ALTR database ID (from `get_database_id`). | |
| friendly_name | Yes | Display name for the tag in ALTR. | |
| protection_type | No | Masking type — "governed", "governed-pushdown", "tokenized-vault", or "encryption-fpe". | governed |
| custom_role_provider_enabled | No | Enable custom role provider UDF. | |
| mask_data_type_list | No | Optional list of data types to mask. | |
| encryption_fpe_options | No | Optional FPE config dict with 'alphabet' ("numeric"|"alphabetic"|"alphanumeric"), 'is_padded' (bool), 'key_name' (str), and 'tweak_name' (str). |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||