Azure Private Link for Databricks

Azure Private Link provides private connectivity from the Immuta SaaS platform, hosted on AWS, to Azure Databricks accounts. It ensures that all traffic to the configured endpoints only traverses private networks over the Immuta Private Cloud Exchange.

This front-end Private Link connection allows users to connect to the Databricks web application, REST API, and Databricks Connect API over an Azure Private Endpoint. For details about Azure Private Link for Databricks and the network flow in a typical implementation, explore the Databricks documentation.

Support for Azure Private Link is available in all Databricks-supported Azure regions.

Requirements

Ensure that your accounts meet the following requirements:

• You have an Immuta SaaS tenant.

• Your Azure Databricks workspace must be on the Premium or Enterprise pricing tier.
• Azure Private Link for Databricks has been configured and enabled.
• You have your Databricks account ID from the account console.

Configure Databricks with Azure Private Link

1. Contact your Immuta representative, and provide the following information for each Azure Databricks Workspace you wish to connect to:

   • Azure region

   • Azure Databricks hostname

   • Azure Databricks resource ID or alias

2. Your representative will inform you when the two Azure Private Link connections have been made available. Accept them in your Azure Databricks workspace configuration.
3. Configure Databricks depending on your integration type:

   1. Configure the Databricks Unity Catalog integration using your standard cloud.databricks.com workspace URL as the Host.
   2. Configure the Databricks Spark integration using your standard azuredatabricks.net URL. And register your tables as Immuta data sources using the privatelink-account-url from the JSON object in step one as the Server when registering data sources.