Databricks releases, every cloud
- Create a least-privilege Databricks workspace
Grants Databricks a narrow set of custom IAM roles instead of broad permissions on Google Cloud.
- Dedicated group clusters will soon be available by default for workspaces with the compliance security profile enabled Coming soon
Enables shared compute for groups with compliance security profile, supporting Databricks Runtime for ML and RDD APIs.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Genie Code scheduled tasks are in Beta
Runs prompts on a recurring schedule, producing a continuable Genie chat with results.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Role-based access control (RBAC) is in Public Preview
Lets users assume a role with limited permissions. Requires account and workspace admin setup.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Variant will soon be available by default for workspaces with the compliance security profile enabled Coming soon
Ingests semi-structured data from sources like Kinesis and REST APIs. Available in July 2026.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - AI Search high QPS will soon be available by default for workspaces with the compliance security profile enabled Coming soon
Replaces manual configuration for high-throughput workloads, existing endpoints unchanged.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
- Custom URLs for your Azure Databricks account (Public Preview)
Replaces default Azure Databricks URL with a custom domain.
- Custom URLs for your Databricks account (Public Preview)
Replaces default URL, requires claim and enable process.
- Allowlist partner platform IPs in context-based ingress control (Beta)
Supports Power BI, Tableau Cloud, and dbt platform, with automatic IP list updates.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Query-based connectors in Lakeflow Connect will soon be available by default for workspaces with the compliance security profile enabled Coming soon
Replaces CDC configuration, supports Oracle, Teradata, and others.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Change to default pipeline editor for workspaces with the compliance security profile enabled Coming soon
Replaces legacy editor, removing it in August.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Configure serverless egress control in Azure China
Available in China North 3 region, requires workspace in same region.
- Classic workspace creation with a Azure Databricks-managed VNet will soon be deprecated Coming soon
Replaced by serverless workspace or VNet injection.
- Classic workspace creation with a Databricks-managed VPC will soon be deprecated Coming soon
Replaced by customer-managed VPC for new workspaces.
- Customer-managed VPC will soon be required for classic workspaces Coming soon
New classic workspaces will require a customer-managed VPC, replacing Databricks-managed VPC.
- Secure cluster connectivity will soon become mandatory for classic workspaces Coming soon
Replaces enableNoPublicIp set to false, requires secure setup for all classic workspaces.
- Arm-based instances are now supported with the compliance security profile
Supports all compliance standards, previously unsupported.
- Block specific internet destinations in network policies (Public Preview)
Blocks destinations regardless of network access mode, enforced through REST API.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Get this table by email. One Monday mail covering the week, filtered to the clouds and products you run. Weekly digest
- Genie Code system table now counts only user-submitted interactions
Excludes background and automated requests, such as autocomplete and quick-fix suggestions.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Lakeflow Designer will soon be available by default for workspaces with the compliance security profile enabled Coming soon
Replaces manual coding for data preparation and transformation. Available late July 2026.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Azure Databricks UI assets will be served from a new CDN domain Coming soon
Replaces existing domain, requires firewall update to ui-assets.azuredatabricks.net.
- Private Link for account-level resources (Beta)
Connects account console through VPC interface endpoint instead of public internet. Requires configuration.
- Email notifications for expiring service principal tokens (Beta)
Sends emails to workspace admins when tokens expire in 7 days, requiring no configuration.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Genie Code now uses models served through OpenAI on Databricks
Adds OpenAI to existing Azure OpenAI and Anthropic models.
- Upcoming behavior change: Choose entitlements when adding principals to workspaces Coming soon
Grants entitlements explicitly when adding principals, replacing inheritance from users system group.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - AWS Graviton instances are now supported with the compliance security profile
Supports all compliance standards in AWS commercial regions and GovCloud.
- Intra-VNet NSG rule hardening for Azure Databricks is now in Public Preview
Restricts workspace traffic to host and worker subnet CIDRs. Applies to classic compute plane workspaces.
- Compliance security profile required for HIPAA, HITRUST, and IRAP Coming soon
Required starting September 1, 2026, for HIPAA, HITRUST, and IRAP data.
- Postgres password authentication is now disabled by default for new Lakebase projects
Existing projects are unaffected, enable in project settings to allow.
- Configure Microsoft Entra ID SSO for Power BI (Public Preview)
Uses account-level federation policy, replacing manual config.
- Customer-managed keys for Lakebase available in all AWS and Azure regions
Encrypts project data at rest using a custom cloud KMS key. Available for new projects.
- Azure Databricks Add-in for Excel support for all compliance security profile standards
Supports all Azure Databricks compliance security profiles.
- Customer-managed keys now support MLflow managed evaluation features
Supports MLflow 3 scorers and requires non-CMK encrypted catalog.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Databricks Add-in for Excel support for all compliance security profile standards
Supports all Databricks compliance security profiles. Requires Public Preview.
- HIPAA support for the Azure Databricks Add-in for Excel
Available for workspaces with HIPAA compliance across all supported regions. Requires a workspace with HIPAA compliance enabled.
- HIPAA support for the Databricks Add-in for Excel
Available for workspaces with HIPAA compliance across all supported regions.
- Graviton instance types are available for the compliance security profile
Graviton instances improve price-performance for many workloads on AWS Commercial workspaces with FedRAMP Moderate, IRAP, or CCCS Medium compliance standards.
- Block identities from your Azure Databricks account with the account access denylist
Prevents access when automatic identity management is enabled, blocking specific users, groups, or service principals.
- Configure private endpoints for serverless compute in Azure China
Requires China North 3 region and network connectivity configuration.
- Connect Azure Databricks to on-premises resources using an SSH reverse tunnel
Replaces inbound firewall access, works with classic and serverless compute.
Headlines, dates and product areas are Databricks' own, from the release notes published for each cloud, and every item links to the note it came from. The one-line summaries are ours. Not a Databricks product and not affiliated with Databricks, Inc.