Hey, thanks for confirming that and for the extra detail!

You're right — official support tickets with SLA require an active Databricks support contract, which typically isn't available for personal/free-tier usage (Free Trial credits or Free Edition). For projects like this, the best path is sticking with the Community here, or the Databricks Community Slack — plenty of product folks hang around there too.

That said, since you're already seeing DROP entries in system.access.outbound_network, you can actually self-diagnose without needing a ticket. Try drilling into the exact blocked destination and reason:

SELECT destination_type, destination, dns_event, storage_event.rejection_reason, event_time
FROM system.access.outbound_network
WHERE access_type = 'DROP'
ORDER BY event_time DESC
LIMIT 20;

This usually shows whether the policy is missing a rule for that specific domain/IP/storage path — which is a much more common cause than the policy simply not being attached. If the destination looks like it should be allowed and still shows DROP, that's worth flagging as a bug report on the Community rather than a support ticket, since it'd help others too.