cancel
Showing results forย 
Search instead forย 
Did you mean:ย 
Data Engineering
Join discussions on data engineering best practices, architectures, and optimization strategies within the Databricks Community. Exchange insights and solutions with fellow data engineers.
cancel
Showing results forย 
Search instead forย 
Did you mean:ย 

Unified access token to access Databricks and AWS resourse

Abishrp
New Contributor II

In azure databricks, it is able to access azure resources and databricks apis using unified MS Entra Id tokens, Similary how can i able to access aws resources and databricks apis (workspace created in cloudformation) using unified access tokens. Here i use sts to access aws resources currently.

2 ACCEPTED SOLUTIONS

Accepted Solutions

Walter_C
Databricks Employee
Databricks Employee

By setting up the IAM role and instance profile, and configuring your Databricks clusters to use the instance profile, you can achieve unified access to AWS resources. For Databricks API access, using OAuth tokens or Databricks PAT tokens ensures secure and managed authentication.

View solution in original post

Walter_C
Databricks Employee
Databricks Employee

I will try to validate on why this is the case, but I have confirmed that indeed for API calls in AWS the token needs to be Databricks generated.

View solution in original post

3 REPLIES 3

Walter_C
Databricks Employee
Databricks Employee

By setting up the IAM role and instance profile, and configuring your Databricks clusters to use the instance profile, you can achieve unified access to AWS resources. For Databricks API access, using OAuth tokens or Databricks PAT tokens ensures secure and managed authentication.

Abishrp
New Contributor II

But there is an option to access APIs using MS Entra ID service principal authentication in Azure and Google Cloud Platform Credential Authentication in GCP,
Why cloud provider-based token management is not available in AWS ?

Abishrp_1-1735042298286.png

 

Abishrp_0-1735042265940.png

Abishrp_2-1735042321090.png

 

 



Walter_C
Databricks Employee
Databricks Employee

I will try to validate on why this is the case, but I have confirmed that indeed for API calls in AWS the token needs to be Databricks generated.

Connect with Databricks Users in Your Area

Join a Regional User Group to connect with local Databricks users. Events will be happening in your city, and you wonโ€™t want to miss the chance to attend and share knowledge.

If there isnโ€™t a group near you, start one and help create a community that brings people together.

Request a New Group