What tools does this skill require?

It primarily uses the Databricks CLI and the Databricks SDK for Python (WorkspaceClient) to perform security operations and audits.

Is Unity Catalog security included?

Yes, the skill provides patterns for managing secure groups, schema-level access control, and row-level security filters within Unity Catalog.

Can I use this with Azure Key Vault?

Yes, the skill includes specific instructions for configuring Databricks secret scopes that are backed by Azure Key Vault for centralized enterprise security.

How does this skill help with secret management?

It provides standardized commands for creating secret scopes, storing sensitive values, and accessing them securely within notebooks using dbutils.secrets without exposing plain text.

Does it support automated token auditing?

Absolutely. It includes Python scripts that use the Databricks SDK to list all tokens, identify those without expiry dates, and facilitate rotation.

Databricks Security Basics

Name: Databricks Security Basics
Author: jeremylongshore

byjeremylongshore

•

1,243

安全与测试

Secures Databricks environments by implementing best practices for secret management, token rotation, and access control.

关于

This skill provides a comprehensive framework for hardening Databricks workspaces using the Databricks CLI and SDK. It automates the creation of secret scopes (both Databricks-backed and Azure Key Vault), manages least-privilege access via ACLs, and implements automated security audits for tokens and permissions. It is an essential tool for platform engineers and data scientists looking to transition from hardcoded credentials to production-grade security patterns, service principals, and Unity Catalog governance.

主要功能

Implementation of environment-specific least-privilege access matrices
Comprehensive security checklists and row-level security for Unity Catalog
Integration patterns for Azure Key Vault-backed secret storage
1,243 GitHub stars
Programmatic token auditing and rotation scripts via WorkspaceClient
Automated creation and management of secret scopes and ACLs

使用场景

Migrating hardcoded notebook credentials into secure Databricks Secret Scopes
Auditing workspace tokens to identify and rotate non-expiring or compromised credentials
Setting up secure service principals for CI/CD pipelines and automated job execution

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills databricks-security-basics

For use in Claude.ai and ChatGPT

Download Skill

GitHub

关于