terraform/quickstart/101-databricks-cmk-dbfs

Azure Databricks CMK for DBFS

This template configures customer managed keys (CMK) for DBFS.

Terraform resource types

• random_pet
• azurerm_resource_group
• azurerm_client_config
• azurerm_databricks_workspace
• azurerm_databricks_workspace_customer_managed_key
• azurerm_key_vault
• azurerm_key_vault_key
• azurerm_key_vault_access_policy

Variables

Name	Description	Default
resource_group_location	Location of the resource group.	East US 2
resource_group_name_prefix	Prefix of the resource group name that's combined with a random ID so name is unique in your Azure subscription.	rg
workspace_name_prefix	Prefix of the Azure Databricks Workspace name that's combined with a random ID so name is unique in your Azure subscription.	db
workspace_name	Azure Databricks workspace name. The value is randomly generated if null.	null
wssku	Pricing Tier of the Azure Databricks workspace.	premium
key_vault_name_prefix	Prefix of the Azure Key Vault name that's combined with a random ID so name is unique in your Azure subscription.	vault
key_vault_name	Name of new key vault. The value is randomly generated if null.	null
sku_name	SKU tier of Azure Key Vault	premium
key_name_prefix	Prefix of the Key Vault key name that's combined with a random ID so name is unique in your Azure subscription.	key
key_name	The name of the key to be created. The value is randomly generated if null.	null
key_permissions	List of key permissions. Choose from: Backup, Create, Decrypt, Delete, Encrypt, Get, GetRotationPolicy, Import, List, Purge, Recover, Release, Restore, Rotate, SetRotationPolicy, Sign, UnwrapKey, Update, Verify, WrapKey	["Create", "Decrypt", "Delete", "Encrypt", "Get", "GetRotationPolicy", "List", "Purge", "Recover", "Restore", "SetRotationPolicy", "Sign", "UnwrapKey", "Update", "Verify", "WrapKey"]
secret_permissions	List of secret permissions. Choose from: Backup, Delete, Get, List, Purge, Recover, Restore, Set.	["Set"]
key_type	The JsonWebKeyType of the key to be created. Choose from: EC, EC-HSM, RSA, RSA-HSM	RSA
key_opts	The permitted JSON web key operations of the key to be created. Choose from: decrypt, encrypt, sign, unwrapKey, verify, wrapKey.	["decrypt", "encrypt", "sign", "unwrapKey", "verify", "wrapKey"]
key_size	The size (in bytes) of the key to be created.	2048
msi_id	The Managed Service Identity ID. Set this value if you're running this example using Managed Identity as the authentication method.	null

Example

To see how to run this example, see Configure customer-managed keys for DBFS using Terraform.