cancel
Showing results for 
Search instead for 
Did you mean: 
Data Engineering
Join discussions on data engineering best practices, architectures, and optimization strategies within the Databricks Community. Exchange insights and solutions with fellow data engineers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Unified access token to access Databricks and AWS resourse

Abishrp
Contributor

In azure databricks, it is able to access azure resources and databricks apis using unified MS Entra Id tokens, Similary how can i able to access aws resources and databricks apis (workspace created in cloudformation) using unified access tokens. Here i use sts to access aws resources currently.

2 ACCEPTED SOLUTIONS

Accepted Solutions

Walter_C
Databricks Employee
Databricks Employee

By setting up the IAM role and instance profile, and configuring your Databricks clusters to use the instance profile, you can achieve unified access to AWS resources. For Databricks API access, using OAuth tokens or Databricks PAT tokens ensures secure and managed authentication.

View solution in original post

Walter_C
Databricks Employee
Databricks Employee

I will try to validate on why this is the case, but I have confirmed that indeed for API calls in AWS the token needs to be Databricks generated.

View solution in original post

3 REPLIES 3

Walter_C
Databricks Employee
Databricks Employee

By setting up the IAM role and instance profile, and configuring your Databricks clusters to use the instance profile, you can achieve unified access to AWS resources. For Databricks API access, using OAuth tokens or Databricks PAT tokens ensures secure and managed authentication.

Abishrp
Contributor

But there is an option to access APIs using MS Entra ID service principal authentication in Azure and Google Cloud Platform Credential Authentication in GCP,
Why cloud provider-based token management is not available in AWS ?

Abishrp_1-1735042298286.png

 

Abishrp_0-1735042265940.png

Abishrp_2-1735042321090.png

 

 



Walter_C
Databricks Employee
Databricks Employee

I will try to validate on why this is the case, but I have confirmed that indeed for API calls in AWS the token needs to be Databricks generated.

Join Us as a Local Community Builder!

Passionate about hosting events and connecting people? Help us grow a vibrant local community—sign up today to get started!

Sign Up Now