Skip to content

Databricks for AWS Guide

Screenshot

Learn more about the benefits of Satori for Databricks and Schedule a demo

Satori streamlines and simplifies the pשׁocess of controlling access to data in Databricks. Satori reduces the risk of data leakage caused by misconfiguring users or permissions.

Databricks Unity Catalog is designed for centralized data governance. Satori integrates with several of its features such as user management, access controls and audit logs.

It only takes a few minutes to get started with Satori. Ensure that you have the prepared following in advance:

  • Access to the Satori Management Console.
  • The hostname of your Databricks Workspace.

Configuring your Databricks Account

To grant Satori access to Databricks on AWS, go to your Databricks account and get the following configuration details:

Extract the Account Information from Databricks

To extract the relevant Account information from Databricks, perform the following steps:

  1. Get your Databricks Instance - Login to your Databricks account and follow the instructions to obtain your databricks-instance from the Databricks instructions. (Copy the Databricks instance)
  2. Get your Account ID - Go to the Databricks Admin Console and click on your username located in the right hand corner of the interface and extract Account ID. (Copy the Databricks Acount ID)
  3. Get your SQL Warehouses ID - In the Workspace Console select the SQL Warehouse tab. (Copy the ID from Name input field)

Note: Satori recommends provisioning a dedicated SQL warehouse for the Satori workload, a minimal SQL Classic instance is sufficient.

Creating a New Satori Service Principal in Databricks

  1. Create a new Satori Service Principal to manage your Databricks instance. Go to the User Management view, selct the Service Principals tab, add a new Satori Service Principal.
  2. Generate an OAuth secret for service principal. Select the newly created service principal and click the generate secret button. (Copy the secret and Application (client) ID for your Satori configuration)
  3. In the Roles tab enable the Account Admin role for the Satori service principal.
  4. Identify which group manages the metastore. This configuration is located in the Metastore configuration section in the Catalog view.
  5. In the Databricks User Management view, select the Groups tab and add the Satori Service Principal to the group identified in previous step.
  6. Go to the Workspace view and select your Workspace, click the Permissions Tab and click the Add Permissions button. Now add the user permission to the Satori Service Principal.
  7. Go to the Databicks Workspace and click on the SQL Warehouses view. Now locate the Satori Warehouse and grant the Satori Service Principle permission by selecting the Can Use option. (Copy the warehouse ID for your Satori configuration).

Databricks Information Configuration Checklist

Ensure that you have obtained the following details:

  • Databricks Instance
  • Account ID
  • SQL Warehouse ID
  • Application (client) ID (Satori service principal).
  • Client Secret Value (Satori service principal).

Enabling the Audit Log on your Account

To take advantage of the system tables and the associated resources on AWS, refer to the Databricks documentation Monitor usage with system tables and enable the Audit logs module on your account using the Enable a system schema API.

Configuring your Satori Data Store

Screenshot

  1. Login to the Satori Management Console https://app.satoricyber.com
  2. In the Data Stores view, click the plus button to Add a New Data Store.
  3. Select the Databricks option.
  4. Now, provide an informative name for the data store, for example: Sales Data Warehouse.
  5. Enter the Databricks Workspace URL into the Databrick Instance input field.
  6. Enter your databricks Account ID.
  7. Enter your databricks SQL Warehouse ID.
  8. Select the AWS Service Principal Authentication type from the drop menu.
  9. Enter the Application (client) ID and Secret value of the Satori service principal.
  10. Select your Satori Data Access Controller cloud provider
  11. Select your Satori Data Access Controller region
  12. Click Create.
  13. Finally, you will be redirected to the Data Stores list view

Testing your Databricks Integration

  1. Go to your newly created Databricks instance and select the Integartion Tab
  2. Click the Test Connection button.

Screenshot