Skip to content

Latest commit

 

History

History
75 lines (55 loc) · 5.75 KB

mws_private_access_settings.md

File metadata and controls

75 lines (55 loc) · 5.75 KB
Raw
subcategory
AWS

databricks_mws_private_access_settings Resource

-> Public Preview This feature is in Public Preview. Contact your Databricks representative to request access.

Allows you to create a Private Access Setting that can be used as part of a databricks_mws_workspaces resource to create a Databricks Workspace that leverages AWS PrivateLink.

It is strongly recommended that customers read the Enable Private Link documentation before trying to leverage this resource.

-> Note This resource has an evolving API, which will change in the upcoming versions of the provider in order to simplify user experience.

Example Usage

resource "databricks_mws_private_access_settings" "pas" {
  provider                     = databricks.mws
  account_id                   = var.databricks_account_id
  private_access_settings_name = "Private Access Settings for ${local.prefix}"
  region                       = var.region
  public_access_enabled        = true
}

The databricks_mws_private_access_settings.pas.private_access_settings_id can then be used as part of a databricks_mws_workspaces resource:

resource "databricks_mws_workspaces" "this" {
  provider                   = databricks.mws
  account_id                 = var.databricks_account_id
  aws_region                 = var.region
  workspace_name             = local.prefix
  credentials_id             = databricks_mws_credentials.this.credentials_id
  storage_configuration_id   = databricks_mws_storage_configurations.this.storage_configuration_id
  network_id                 = databricks_mws_networks.this.network_id
  private_access_settings_id = databricks_mws_private_access_settings.pas.private_access_settings_id
  pricing_tier               = "ENTERPRISE"
  depends_on                 = [databricks_mws_networks.this]
}

Argument Reference

The following arguments are available:

  • account_id - Account Id that could be found in the bottom left corner of Accounts Console
  • private_access_settings_name - Name of Private Access Settings in Databricks Account
  • public_access_enabled (Boolean, Optional, false by default) - If true, the databricks_mws_workspaces can be accessed over the databricks_mws_vpc_endpoint as well as over the public network. In such a case, you could also configure an databricks_ip_access_list for the workspace, to restrict the source networks that could be used to access it over the public network. If false (default), the workspace can be accessed only over VPC endpoints, and not over the public network.
  • region - Region of AWS VPC
  • private_access_level - (Optional) The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object. ACCOUNT level access (default) lets only databricks_mws_vpc_endpoint that are registered in your Databricks account connect to your databricks_mws_workspaces. ENDPOINT level access lets only specified databricks_mws_vpc_endpoint connect to your workspace. Please see the allowed_vpc_endpoint_ids documentation for more details.
  • allowed_vpc_endpoint_ids - (Optional) An array of databricks_mws_vpc_endpoint vpc_endpoint_id (not id). Only used when private_access_level is set to ENDPOINT. This is an allow list of databricks_mws_vpc_endpoint that in your account that can connect to your databricks_mws_workspaces over AWS PrivateLink. If hybrid access to your workspace is enabled by setting public_access_enabled to true, then this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see the article for databricks_ip_access_list.

Attribute Reference

In addition to all arguments above, the following attributes are exported:

  • private_access_settings_id - Canonical unique identifier of Private Access Settings in Databricks Account
  • status - Status of Private Access Settings

Import

-> Note Importing this resource is not currently supported.

Related Resources

The following resources are used in the same context: