How Azure Databricks manages network security group rules

User16826994223 — Tue, 22 Jun 2021 09:30:57 GMT

Re: How Azure Databricks manages network security group rules

User16826994223 — Tue, 22 Jun 2021 09:31:15 GMT

The NSG rules listed in the following sections represent those that Azure Databricks auto-provisions and manages in your NSG, by virtue of the delegation of your VNet’s host and container subnets to the

Microsoft.Databricks/workspaces

service. You do not have permission to update or delete these NSG rules; any attempt to do so is blocked by the subnet delegation. Azure Databricks must own these rules in order to ensure that Microsoft can reliably operate and support the Azure Databricks service in your VNet.

Some of these NSG rules have VirtualNetwork assigned as the source and destination. This has been implemented to simplify the design in the absence of a subnet-level service tag in Azure. All clusters are protected by a second layer of network policy internally, such that cluster A cannot connect to cluster B in the same workspace. This also applies across multiple workspaces if your workspaces are deployed into a different pair of subnets in the same customer-managed VNet

topic How Azure Databricks manages network security group rules in Data Engineering

How Azure Databricks manages network security group rules

Re: How Azure Databricks manages network security group rules