https://community.databricks.com/t5/product-platform-updates/network-configuration-for-accessing-azure-key-vault-from/ba-p/120477 <P>Network configuration doesn’t have to be hard! In this article, I will walk you through different scenarios of network configuration for accessing Azure Key Vault(AKV) from Databricks.</P> <P><STRONG>AKV backed Databricks Secrets Scopes</STRONG></P> <P>Network configuration is straightforward in this scenario</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="network.png" style="width: 999px;"><img src="https://community.databricks.com/t5/image/serverpage/image-id/17202iA136DE034E183F43/image-size/large?v=v2&amp;px=999" role="button" title="network.png" alt="network.png" /></span><BR /><STRONG>Accessing AKV from Enhanced Python UDFs in Unity Catalog</STRONG></P> <P>In <A href="https://community.databricks.com/t5/product-platform-updates/strengthening-data-privacy-with-enhanced-python-udfs-in-unity/ba-p/119654" target="_self">this</A> article, I showed you a step-by-step guide of how to strengthen Data Privacy with enhanced Python UDFs in Databricks Unity Catalog(UC).</P> <P>The network configuration of accessing AKV from UC UDFs is different from using AKV for Databricks secrets scopes.</P> <P><STRONG>Use Private Endpoints for Maximum Security</STRONG></P> <UL> <LI>Create a Private Endpoint Connection for the AKV instance</LI> </UL> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="shulaky Networking copy.png" style="width: 999px;"><img src="https://community.databricks.com/t5/image/serverpage/image-id/17204iD9513A1145592C52/image-size/large?v=v2&amp;px=999" role="button" title="shulaky Networking copy.png" alt="shulaky Networking copy.png" /></span></P> <UL> <LI>Create a DNS record to connect to your Private Endpoint</LI> </UL> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Pasted Graphic 29 copy.png" style="width: 999px;"><img src="https://community.databricks.com/t5/image/serverpage/image-id/17205iFAF449E2047F8ABB/image-size/large?v=v2&amp;px=999" role="button" title="Pasted Graphic 29 copy.png" alt="Pasted Graphic 29 copy.png" /></span></P> <P>NOTE: Even though you can use your own DNS servers, it saves you a ton of headache to just use Azure Private DNS Zone</P> <P><STRONG>Use Firewalls and Virtual Networks</STRONG></P> <P>Alternative to Private Endpoint, you can enable secure communication between your Databricks Virtual Networks and AKV via Firewalls and Virtual Networks</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Pasted Graphic 30 copy.png" style="width: 999px;"><img src="https://community.databricks.com/t5/image/serverpage/image-id/17206i7F46BB317815ABD3/image-size/large?v=v2&amp;px=999" role="button" title="Pasted Graphic 30 copy.png" alt="Pasted Graphic 30 copy.png" /></span></P> <P>That’s it! Now you can configure network access for your AKV and access AKV from Enhanced Python UDFs in Unity Catalog. Give it a try!</P> Thu, 29 May 2025 15:33:47 GMT Shu_Li 2025-05-29T15:33:47Z https://community.databricks.com/t5/product-platform-updates/network-configuration-for-accessing-azure-key-vault-from/ba-p/120477 <P><SPAN>Network configuration doesn’t have to be hard! In this article, I will walk you through different scenarios of network configuration for accessing Azure Key Vault(AKV) from Databricks.</SPAN></P> Thu, 29 May 2025 15:33:47 GMT https://community.databricks.com/t5/product-platform-updates/network-configuration-for-accessing-azure-key-vault-from/ba-p/120477 Shu_Li 2025-05-29T15:33:47Z