What tools does this skill require?

It primarily uses the Databricks CLI and the Databricks SDK for Python (WorkspaceClient) to perform security operations and audits.

Is Unity Catalog security included?

Yes, the skill provides patterns for managing secure groups, schema-level access control, and row-level security filters within Unity Catalog.

Can I use this with Azure Key Vault?

Yes, the skill includes specific instructions for configuring Databricks secret scopes that are backed by Azure Key Vault for centralized enterprise security.

How does this skill help with secret management?

It provides standardized commands for creating secret scopes, storing sensitive values, and accessing them securely within notebooks using dbutils.secrets without exposing plain text.

Does it support automated token auditing?

Absolutely. It includes Python scripts that use the Databricks SDK to list all tokens, identify those without expiry dates, and facilitate rotation.

Databricks Security Basics

Name: Databricks Security Basics
Author: jeremylongshore

byjeremylongshore

•

1,243

•

Security & Testing

Secures Databricks environments by implementing best practices for secret management, token rotation, and access control.

This skill provides a comprehensive framework for hardening Databricks workspaces using the Databricks CLI and SDK. It automates the creation of secret scopes (both Databricks-backed and Azure Key Vault), manages least-privilege access via ACLs, and implements automated security audits for tokens and permissions. It is an essential tool for platform engineers and data scientists looking to transition from hardcoded credentials to production-grade security patterns, service principals, and Unity Catalog governance.

Key Features

01Implementation of environment-specific least-privilege access matrices

02Comprehensive security checklists and row-level security for Unity Catalog

03Integration patterns for Azure Key Vault-backed secret storage

041,243 GitHub stars

05Programmatic token auditing and rotation scripts via WorkspaceClient

06Automated creation and management of secret scopes and ACLs

Use Cases

01Migrating hardcoded notebook credentials into secure Databricks Secret Scopes

02Auditing workspace tokens to identify and rotate non-expiring or compromised credentials

03Setting up secure service principals for CI/CD pipelines and automated job execution

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills databricks-security-basics

For use in Claude.ai and ChatGPT

Download Skill

Key Features

01Implementation of environment-specific least-privilege access matrices

02Comprehensive security checklists and row-level security for Unity Catalog

03Integration patterns for Azure Key Vault-backed secret storage

041,243 GitHub stars

05Programmatic token auditing and rotation scripts via WorkspaceClient

06Automated creation and management of secret scopes and ACLs

Use Cases

01Migrating hardcoded notebook credentials into secure Databricks Secret Scopes

02Auditing workspace tokens to identify and rotate non-expiring or compromised credentials

03Setting up secure service principals for CI/CD pipelines and automated job execution

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills databricks-security-basics

For use in Claude.ai and ChatGPT

Download Skill