Databricks Workspace VNet Injection

MEDIUM
Source
CloudSploit
ID
databricks-workspace-vnet-injection

Databricks Workspace VNet Injection

Ensures that Azure Databricks Workspace is deployed in a customer-managed virtual network.

By default, Azure Databricks creates a managed virtual network which provides limited control over network security policies, firewall configurations and routing. Deploying the workspace in a customer-managed virtual network (VNet injection) keeps compute clusters within the organization network boundary and allows restricted outbound access, fine-grained NSG policies and private connectivity.

Recreate the Databricks workspace with a customer-managed virtual network.