Lakebase security

[eoferreira]

Hi team,

We are using Databricks Enterprise and noticed that our Lakebase instances are exposed to the public internet. They can be reached through the JDBC endpoint with only basic username and password authentication. Is there a way to restrict access to these endpoints? I reviewed the front end Private Link documentation, but it seems that this would cause friction when using the web interface, and I am not sure whether it prevents requests from unwanted IPs from reaching our Lakebase endpoints. If it is possible to configure additional network layer security, we would appreciate any guidance.

Thank you

[nayan_wylde]

I would suggest moving your workspace to Private Endpoint and disable Public network access at the workspace level. This will prevent access from public internet and the you can connect from only your company.

https://learn.microsoft.com/en-us/azure/databricks/security/network/classic/private-link

[szymon_dybczak]

Hi @eoferreira ,

The thing is that Lakebase is still in public preview and there isn't anything in docs regarding private connectivity. I'm quite sure they will add an option to disable public access in near future though, but for now I think it's not supported. At least I couldn't find anything.