ManojkMohan
Honored Contributor II

@ShanQiwei 

Interface or LayerShould You Define Security?Typical MechanismsReference Links
VPC → S3YesIAM roles, service accounts, credentials, policieshttps://docs.aws.amazon.com/AmazonS3/latest/userguide/security-best-practices.html
S3 → LakehouseYesService principals, managed identities, access keyshttps://docs.databricks.com/security/access-control/service-principals.html
Lakehouse Bronze → Silver → GoldSometimes (Context-Driven)Platform roles, catalog permissions, ACLs, data maskinghttps://docs.databricks.com/data-governance/unity-catalog/index.html
Lakehouse → Serverless ComputeYesManaged identities, OAuth2, tokens, ACLshttps://learn.microsoft.com/en-us/azure/architecture/serverless/security-serverless-applications

View solution in original post