Good explanation by @taha syed​, Just adding that there is actually a third deployment model, which is PVC (Private Virtual CLoud), that is to run Databricks entirely inside the customer account, this options is very costly and will require additional checks by Databricks to support, however, it is useful to big customers who want everything inside their account.