Databricks releases, every cloud

1. Email notifications for expiring service principal tokens are now generally available

   Sends emails to workspace admins 7 days before token expiration for used tokens with lifetime over 7 days. No configuration is required.

   #Administration#Security
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs Jul 22, 2026
2. Context-based ingress control for workspaces public access is now generally available

   Uses allow and deny rules to control access based on identities, network sources, and request types.

   #Networking#Security
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs Jul 21, 2026
3. Databricks SQL alerts are now available by default for workspaces with the compliance security profile enabled

   Supports all compliance security profile standards, monitors data and KPIs via scheduled queries.

   #Databricks SQL#Security
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs Jul 9, 2026
4. Identity federation enabled by default for all new workspaces

   Does not affect existing workspaces.

   #Security
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs Jun 9, 2026
5. Inbound Private Link for performance-intensive services is now generally available

   Supports Lakebase Autoscaling and Zerobus Ingest.

   #Networking#Security
   AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP, read it on their docs Jun 8, 2026
6. Workspace admin setting for serverless notebook execution timeout

   Replaces manual override process, defaults to 2.5 hours.

   #Admin#Serverless
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs May 27, 2026
7. Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
8. Automatic identity management with Microsoft Entra ID is now GA

   Replaces SCIM provisioning, syncs users and groups from Microsoft Entra ID.

   #Security
   AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP, read it on their docs May 26, 2026
9. Faster package installs with %uv pip in serverless notebooks

   Requires environment version 5 or above. Replaces %pip for faster installs.

   #Notebooks#Serverless
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP, read it on their docs May 7, 2026
10. Automatic identity management

    Syncs users and groups from identity providers like Microsoft Entra ID and Okta.

    #Security
    AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP, read it on their docs May 5, 2026
11. Azure UK South now has a dedicated regional control plane

    New workspaces require firewall allowlist entries for SCC relay tunnel and other IPs. Existing workspaces use UK West control plane unless migrated.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP, read it on their docs May 1, 2026
12. Lakebase is now generally available with compliance security profile

    Requires HIPAA, C5, TISAX, or None compliance standard.

    #Lakebase
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP, read it on their docs Mar 4, 2026
13. Lakebase is now generally available on Azure

    Adds autoscaling compute and scale-to-zero to 11 new Azure regions.

    #Lakebase
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP, read it on their docs Mar 2, 2026

Headlines, dates and product areas are Databricks' own, and every item links to the note it came from. The one-line summaries are ours.