We have a Self service portal through which users can launch databricks clusters of different configurations.
This portal is set up to work in Dev, Sandbox and Prod environments. We have configured databricks workspaces only for Sandbox and Prod portals only. So, users can launch databricks clusters through Sandbox and Prod portals. No databricks workspace available for Dev Portal.
Self service portal invokes different databricks APIs like list/delete/register instance profiles, create/delete clusters etc using Python. We have set up Service Principals for all the databricks workspaces and invoke databricks APIs with respective service principals.
Recently, our management decided to route databricks cluster launch requests from Dev portal to Sandbox databricks workspace on urgent basis as we do not have databricks workspace for Dev portal
Is it possible to have databricks 'shared' workspace that can be tied to multiple AWS accounts? Can someone share documentation on IAM permissions policies on how to configure multiple AWS accounts for shared workspace please?