Databricks releases, every cloud

1. Email notifications for expiring service principal tokens are now generally available

   Sends emails to workspace admins 7 days before token expiration for used tokens with lifetime over 7 days. No configuration is required.

   #Administration#Security
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs Jul 22, 2026
2. Context-based ingress control for workspaces public access is now generally available

   Uses allow and deny rules to control access based on identities, network sources, and request types.

   #Networking#Security
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs Jul 21, 2026
3. Inbound Private Link for performance-intensive services is now generally available

   Supports Lakebase Autoscaling and Zerobus Ingest.

   #Networking#Security
   AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP, read it on their docs Jun 8, 2026
4. Automatic identity management with Microsoft Entra ID is now GA

   Replaces SCIM provisioning, syncs users and groups from Microsoft Entra ID.

   #Security
   AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP, read it on their docs May 26, 2026

Headlines, dates and product areas are Databricks' own, and every item links to the note it came from. The one-line summaries are ours.