Skip to content

Databricks releases, every cloud

All GAPreviewBehavior changeDeprecationUpdate

23 releases of 1321

Last updated

  1. Metastore-level ABAC policies are in Beta

    Applies across every catalog in the metastore. Replaces per-catalog policy setup.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  2. ABAC DENY policies are in Beta

    Explicitly deny MANAGE ACCESS CONTROL privilege, taking precedence over grants.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  3. Private network gateway is in Beta

    Connects serverless compute to VNet and on-premises systems through a managed gateway. Enabled from account console Previews page.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  4. Private network gateway is in Private Preview

    Connects serverless compute to VPC and on-premises systems through a managed gateway, reusing existing network connectivity configuration.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(unknown)
  5. The INSERT, UPDATE, and DELETE privileges are in Beta

    Require Databricks Runtime 18.1 or above, alternative to MODIFY privilege.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  6. Custom trace views in the MLflow trace explorer are in Beta

    Genie generates views based on plain language descriptions, surfacing relevant trace fields and metrics.

    #Gen AI#MLflow
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  7. Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
  8. Serverless outbound Private Service Connect to customer-managed resources (Public Preview)

    Keeps traffic off the public internet, adding network-layer defense against data exfiltration through customer-managed Google Cloud service attachment.

    #Networking#Security
    AWS(not on this cloud)Azure(not on this cloud)GCP, read it on their docsSAP(unknown)
  9. Role-based access control (RBAC) is in Public Preview

    Lets users assume a role with limited permissions. Requires account and workspace admin setup.

    #Security#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  10. Custom URLs for your Azure Databricks account (Public Preview)

    Replaces default Azure Databricks URL with a custom domain.

    #Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  11. Custom URLs for your Databricks account (Public Preview)

    Replaces default URL, requires claim and enable process.

    #Security
    AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP(not on this cloud)
  12. Block specific internet destinations in network policies (Public Preview)

    Blocks destinations regardless of network access mode, enforced through REST API.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  13. Intra-VNet NSG rule hardening for Azure Databricks is now in Public Preview

    Restricts workspace traffic to host and worker subnet CIDRs. Applies to classic compute plane workspaces.

    #Networking#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  14. Configure Microsoft Entra ID SSO for Power BI (Public Preview)

    Uses account-level federation policy, replacing manual config.

    #Integrations#Security
    AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP(not on this cloud)
  15. MLflow trace storage in Unity Catalog is now in Public Preview

    Stores OpenTelemetry traces, governed by Unity Catalog permissions, queryable from Databricks SQL or MLflow Python SDK.

    #MLflow#Unity Catalog
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud)
  16. Inbound Private Link for performance-intensive services (Public Preview)

    Enables private connectivity for Zerobus Ingest and Lakebase Autoscaling.

    #Networking#Security
    AWS, read it on their docsAzure, read it on their docsGCP(not on this cloud)SAP(not on this cloud)
  17. Customer-managed keys for Unity Catalog (Public Preview)

    Protects data with user-owned encryption keys, replacing automatic encryption.

    #Security#Unity Catalog
    AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP(not on this cloud)
  18. HITRUST compliance controls (Public Preview)

    Manages risk and demonstrates security and privacy compliance. Requires enabling in settings.

    #Security
    AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP(unknown)
  19. Serverless outbound IPs available through public JSON endpoint (Public Preview)

    Replaces existing stable IPs, requires Public Preview enrollment.

    #Networking#Security
    AWS, read it on their docsAzure(not on this cloud)GCP(not on this cloud)SAP(unknown)
  20. Get this table by email. One Monday mail covering the week, filtered to the clouds and products you run. Weekly digest
  21. Context based ingress control is now in Public Preview

    Enables account admins to set allow and deny rules based on identity, request type, and network source.

    #Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  22. Automatic email notifications for expiring personal access tokens (Public Preview)

    Sends emails 7 days before token expiration.

    #Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)
  23. TISAX compliance controls (Public Preview)

    Enhances workspace compliance based on ISO/IEC 27001 and VDA ISA requirements.

    #Compliance#Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  24. C5 and K-FSI compliance standards (Public Preview)

    Adds German and Korean financial regulations compliance. Requires public preview setup.

    #Security
    AWS(not on this cloud)Azure, read it on their docsGCP(not on this cloud)SAP(unknown)
  25. Admins can now manage a workspace's serverless base environments (Public Preview)

    Defines custom environment specs for serverless notebooks, allows setting a default for new notebooks.

    #Notebooks#Serverless
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown)

Headlines, dates and product areas are Databricks' own, from the release notes published for each cloud, and every item links to the note it came from. The one-line summaries are ours. Not a Databricks product and not affiliated with Databricks, Inc.