https://community.databricks.com/t5/data-engineering/s3-bucket-mount/m-p/24875#M17303 <P>If you mount an S3 bucket using an AWS instance profile, does that mounted bucket become accessible to just that 1 cluster or to other clusters in that workspace as well?</P> Fri, 11 Jun 2021 20:24:07 GMT Digan_Parikh 2021-06-11T20:24:07Z https://community.databricks.com/t5/data-engineering/s3-bucket-mount/m-p/24875#M17303 <P>If you mount an S3 bucket using an AWS instance profile, does that mounted bucket become accessible to just that 1 cluster or to other clusters in that workspace as well?</P> Fri, 11 Jun 2021 20:24:07 GMT https://community.databricks.com/t5/data-engineering/s3-bucket-mount/m-p/24875#M17303 Digan_Parikh 2021-06-11T20:24:07Z https://community.databricks.com/t5/data-engineering/s3-bucket-mount/m-p/24876#M17304 <P>Mounts are global to all clusters but as a best practice, you can use IAM roles to prevent access tot he underlying data. </P><P></P><P>To take this one step further, you can use IAM credential p<B>assthrough</B> rather than <B>instance profile</B> because instance profile can be associated with only one IAM role so all users on the clusters have to share that role and the data policies of that role.</P><P></P><P>doc -https://docs.databricks.com/security/credential-passthrough/iam-passthrough.html</P> Thu, 17 Jun 2021 22:08:14 GMT https://community.databricks.com/t5/data-engineering/s3-bucket-mount/m-p/24876#M17304 Digan_Parikh 2021-06-17T22:08:14Z