Does Databricks still require CreateKeyPair and DeleteKeyPair permissions in the cross-account IAM roles on AWS?

MoJaMa
Databricks Employee
Databricks Employee
 

MoJaMa
Databricks Employee
Databricks Employee

We used to require this, but starting June 9, 2021 we no longer do, and have improved our E2 security posture.

See https://docs.databricks.com/administration-guide/account-api/iam-role.html for the current permissions required.