category:business
-
Finding Excessive Table Privileges Assigned to Production Groups
POST_START Finding Excessive Table Privileges Assigned to Production Groups I recently took on the task of reviewing access controls for a few key tables in our production environment. One of the tables that raised my attention was production.finance.payments. I wanted to make sure that the right people had the right level of access and that…
A1, assigned, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, excessive, finding, groups, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, privileges, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, table, unity catalog -
Auditing Emergency Production Access After an Incident
POST_START Auditing Emergency Production Access After an Incident Yesterday, we experienced a minor security incident involving access to the production catalog. A user with temporary emergency access was found to have interacted with critical data in the production environment. Now, I’m tasked with auditing who has access to the production catalog and how it’s being…
A1, Access, after, auditing, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, emergency, incident, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, unity catalog -
Removing Temporary Elevated Production Privileges
POST_START Removing Temporary Elevated Production Privileges I recently had to address a security concern where a group of incident responders had been granted temporary MODIFY privileges on the production.sales.orders table. These privileges were initially issued to allow them to investigate a data integrity issue, but the incident had been resolved, and the elevated access was…
A1, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, elevated, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, privileges, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, removing, sql, temporary, unity catalog -
Isolating Development Staging and Production with Catalog Privileges
POST_START Isolating Development Staging and Production with Catalog Privileges Isolating Development Staging and Production with Catalog Privileges I recently took on a new project where I needed to ensure that different teams had access to the right environments. The goal was to isolate development, staging, and production environments using Databricks Unity Catalog privileges. This way,…
A1, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, development, education, isolating, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, privileges, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, staging, unity catalog -
Building Read-Only Production Access for Analysts
POST_START Building Read-Only Production Access for Analysts Building Read-Only Production Access for Analysts I was recently tasked with setting up read-only access to a production catalog for a group of analysts. The goal was to ensure they could query the data they needed without being able to modify anything. I knew that using Databricks Unity…
A1, Access, analysts, building, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, read-only, sql, unity catalog -
Troubleshooting a Service Principal That Lost Production Table Access
POST_START Troubleshooting a Service Principal That Lost Production Table Access Today, I encountered an issue where a service principal that was previously able to access a table in the production catalog suddenly lost access. The team was trying to run a critical ETL job, and the error message indicated that the service principal didn’t have…
A1, Access, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, Lakehouse, Lost, paragraph ordering, paragraph structure, paragraphorder, principal, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, service, sql, table, That, troubleshooting, unity catalog -
Designing Service Principal Access for Production Data Pipelines
POST_START Designing Service Principal Access for Production Data Pipelines I recently took on the task of securing access for our ETL pipelines to a production data catalog in Databricks. The goal was to ensure that the service principals used by our data pipelines had the right level of access without exposing sensitive data unnecessarily. I…
A1, Access, category:business, category:education, category:software, category:technology, coding, data, data engineering, data governance, databricks, designing, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, Pipelines., principal, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, service, sql, unity catalog
