topic Lakebase security in Lakebase Discussions

Lakebase security

eoferreira — Fri, 15 Aug 2025 17:12:55 GMT

Hi team,

We are using Databricks Enterprise and noticed that our Lakebase instances are exposed to the public internet. They can be reached through the JDBC endpoint with only basic username and password authentication. Is there a way to restrict access to these endpoints? I reviewed the front end Private Link documentation, but it seems that this would cause friction when using the web interface, and I am not sure whether it prevents requests from unwanted IPs from reaching our Lakebase endpoints. If it is possible to configure additional network layer security, we would appreciate any guidance.

Thank you

Re: Lakebase security

nayan_wylde — Fri, 15 Aug 2025 17:35:50 GMT

I would suggest moving your workspace to Private Endpoint and disable Public network access at the workspace level. This will prevent access from public internet and the you can connect from only your company.

https://learn.microsoft.com/en-us/azure/databricks/security/network/classic/private-link

Re: Lakebase security

szymon_dybczak — Fri, 15 Aug 2025 18:03:45 GMT

Hi @eoferreira ,

The thing is that Lakebase is still in public preview and there isn't anything in docs regarding private connectivity. I'm quite sure they will add an option to disable public access in near future though, but for now I think it's not supported. At least I couldn't find anything.

Re: Lakebase security

Sudheer-Reddy — Fri, 17 Oct 2025 15:36:24 GMT

Postgres instance is covered by the private link you configure to your workspace.