topic Re: Are notebooks encrypted even if no CMK is provided? in Data Engineering

Are notebooks encrypted even if no CMK is provided?

Anonymous — Thu, 11 Nov 2021 15:27:10 GMT

This document (https://docs.databricks.com/security/keys/customer-managed-keys-managed-services-aws.html) describes how to use a customer managed key to encrypt notebooks in the control plane.

We would please like to verify: if no CMK is provided, are notebooks still encrypted using a key provided by Databricks or the cloud provider?

Re: Are notebooks encrypted even if no CMK is provided?

Anonymous — Fri, 12 Nov 2021 16:47:49 GMT

Hello @Nathan Buesgens - My name is Piper and I'm one of the moderators for Databricks. Thanks for your question and it's great to meet you myself.

Let's give the community a bit longer to respond. If nothing comes our way, we'll circle back to you.

Re: Are notebooks encrypted even if no CMK is provided?

Filippo-DB — Fri, 12 Nov 2021 20:03:14 GMT

Hello @Nathan Buesgens , from a high level point of view, by default, notebooks source code and metadata in the control plane are encrypted at rest in AWS RDS using AWS KMS with a Databricks-managed Key.

But there is other data related to notebooks and things change depending on what kind of data you are referring to and how you use notebooks (interactive vs. jobs).

I would recommend to reach out to your account team and request a copy of the enterprise security guide which provides an in-depth description of Databricks' security posture.

Cheers,

Filippo