A customized python library in cluster to access ADLS vis secret

[maaaxx]

Hello dear community,

in our current project, we would like to develop a customized python library and deploy this library to all of the cluster to manage access control. You might ask why via a conventional way like external storage, well, we do not like the data engineer to be granted the access permission via the external storage permission but via this library in order to have more customized access control.

Imagine that the data engineer is only allowed to call the python code in order to access the ADLS files. this is the story 🙂

However, if this python library would access the ADLS, the access information should be known by the library in-advance. This is now our clueless part. Has anyone an idea, how could we securely pack or assign the secret to this library without plaintext in the code?

Any tips would be appreciated. Many thanks!

Cheers.

[Anonymous]

I think the simplest way to achieve what you're looking for is to use Unity Catalog. https://www.databricks.com/product/unity-catalog

[maaaxx]

Hi Josephk. However, Unity catalog does not provide file level access control...

[Anonymous]

Hi @Yuan Gao​ 

Hope everything is going great.

Just wanted to check in if you were able to resolve your issue. If yes, would you be happy to mark an answer as best so that other members can find the solution more quickly? If not, please tell us so we can help you. 

Cheers!