Databricks releases, every cloud
| Release | Date | ||||
|---|---|---|---|---|---|
| Inbound Private Service Connect for performance-intensive services (Beta) Enables private connectivity to services like Zerobus Ingest and Lakebase Autoscaling on Google Cloud. | Not on AWS | Not on Azure | On GCP, read it on their docs | Unknown on SAP | Aug 22, 2026 |
| Serverless outbound Private Service Connect to customer-managed resources (Public Preview) Keeps traffic off the public internet, adding network-layer defense against data exfiltration through customer-managed Google Cloud service attachment. | Not on AWS | Not on Azure | On GCP, read it on their docs | Unknown on SAP | Aug 6, 2026 |
| Create a least-privilege Databricks workspace Grants Databricks a narrow set of custom IAM roles instead of broad permissions on Google Cloud. | Not on AWS | Not on Azure | On GCP, read it on their docs | Not on SAP | Jul 27, 2026 |
| Classic workspace creation with a Databricks-managed VPC will soon be deprecated Coming soon Replaced by customer-managed VPC for new workspaces. | Not on AWS | Not on Azure | On GCP, read it on their docs | Not on SAP | Jun 26, 2026 |
| Customer-managed keys for Unity Catalog (Beta) Uses own encryption keys for Unity Catalog catalogs. Replaces automatic encryption. | Not on AWS | Not on Azure | On GCP, read it on their docs | Not on SAP | Mar 2, 2026 |
| Enhanced Security and Compliance add-on is now generally available includes compliance security profile and enhanced security monitoring. | Not on AWS | Not on Azure | On GCP, read it on their docs | Unknown on SAP | Feb 19, 2026 |
| Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs | |||||
| Serverless egress control is now generally available Manages outbound connections with restricted access and FQDN filtering. | Not on AWS | Not on Azure | On GCP, read it on their docs | Unknown on SAP | Feb 9, 2026 |
| Automatically provision users (JIT) GA Creates accounts during SSO login if none exist. Requires single sign-on setup. | Not on AWS | Not on Azure | On GCP, read it on their docs | Unknown on SAP | Feb 2, 2026 |
| GCP Private Service Connect generally available No account team request needed to enable. | Not on AWS | Not on Azure | On GCP, read it on their docs | Unknown on SAP | Nov 3, 2025 |
- Inbound Private Service Connect for performance-intensive services (Beta)
Enables private connectivity to services like Zerobus Ingest and Lakebase Autoscaling on Google Cloud.
- Serverless outbound Private Service Connect to customer-managed resources (Public Preview)
Keeps traffic off the public internet, adding network-layer defense against data exfiltration through customer-managed Google Cloud service attachment.
- Create a least-privilege Databricks workspace
Grants Databricks a narrow set of custom IAM roles instead of broad permissions on Google Cloud.
- Classic workspace creation with a Databricks-managed VPC will soon be deprecated Coming soon
Replaced by customer-managed VPC for new workspaces.
- Customer-managed keys for Unity Catalog (Beta)
Uses own encryption keys for Unity Catalog catalogs. Replaces automatic encryption.
- Enhanced Security and Compliance add-on is now generally available
includes compliance security profile and enhanced security monitoring.
- Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
- Serverless egress control is now generally available
Manages outbound connections with restricted access and FQDN filtering.
- Automatically provision users (JIT) GA
Creates accounts during SSO login if none exist. Requires single sign-on setup.
- GCP Private Service Connect generally available
No account team request needed to enable.
Headlines, dates and product areas are Databricks' own, and every item links to the note it came from. The one-line summaries are ours.