Modern data and AI workloads rarely operate in isolation. Pipelines connect to operational databases. Notebooks call third-party APIs. Agents invoke external tools. Applications use tokens, passwords, certificates, and API keys to reach the systems around them.

Every one of those integrations creates the same uncomfortable question: where should the credential live?

Many organizations already have a cloud-standard answer, such as AWS Secrets Manager or Azure Key Vault. But when a workload moves into a data platform, teams often copy the same secret into a platform-specific store. That creates two sources of truth, two permission models, two audit trails, and a rotation process that can fail in several places.

External secrets in Unity Catalog are designed to remove that duplication. The secret value remains in the external cloud secret manager, while Unity Catalog presents it as a governed securable object that Databricks workloads can discover and reference.

That sounds like a small integration feature. It is actually an important step toward treating credentials as governed infrastructure rather than application configuration.

Without an external-secret integration, a common operating model looks like this:

1. A security or platform team creates a credential in the enterprise secret manager.
2. A data team copies that credential into Databricks.
3. Permissions are configured again in a second system.
4. Rotation requires both copies to be updated in the correct order.
5. Auditors must reconcile cloud logs, workspace configuration, code usage, and a separate access model.

This model works until it does not. A missed rotation can stop a production pipeline. An old copy can remain active after the source secret changes. A broad permission inherited in one platform can undermine a narrow policy in another. An incident investigation can become a manual exercise in joining events across tools.

The technical problem is duplication. The customer problem is operational uncertainty: teams cannot easily prove that the right workload used the right credential under the right policy at the right time.

What external secrets change

External secrets separate the secret's system of record from its governance and consumption interface.

- The cloud secret manager remains responsible for storing and changing the value.
- Unity Catalog provides a three-level name, such as `catalog.schema.secret`, and governs access with privileges including `READ SECRET` and `REFERENCE SECRET`.
- Databricks retrieves the current value from the external manager when a workload reads it instead of storing the value in Unity Catalog.
- Databricks audit events retain the Databricks user identity, while cloud-side logs record the connection's service credential.

This gives customers a practical bridge between cloud security controls and data-platform governance. Existing secret-management investments remain in place, while data and AI teams gain a consistent Unity Catalog interface.