profession:cloud engineer
-
Investigating Unexpected Cross-Catalog Production Access
POST_START Investigating Unexpected Cross-Catalog Production Access Investigating Unexpected Cross-Catalog Production Access Today, I was tasked with investigating an unexpected access issue in our Databricks environment. A team member noticed that some users were able to access data from the production catalog, even though they shouldn’t have had permission. I needed to figure out how this…
A1, Access, category:business, category:education, category:software, category:technology, coding, cross-catalog, data engineering, data governance, databricks, education, investigating, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, Unexpected, unity catalog -
Combining Row Filters and Column Masks for Layered Production Protection
POST_START Combining Row Filters and Column Masks for Layered Production Protection I recently took on the task of securing sensitive customer data in our production environment. The goal was to implement layered protection using row filters and column masks to ensure that only authorized users could access specific data. To begin, I needed to understand…
A1, category:business, category:education, category:software, category:technology, coding, column, combining, data engineering, data governance, databricks, education, filters, Lakehouse, layered, masks, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, protection, row, sql, unity catalog -
Creating Business-Domain Security Boundaries with Separate Catalogs
POST_START Creating Business-Domain Security Boundaries with Separate Catalogs I recently had the opportunity to help my organization implement a more secure and organized data governance strategy. As part of this effort, we decided to create separate Unity Catalogs for each business domain—Finance, HR, and Sales. This approach allows us to enforce security boundaries that align…
A1, Boundaries, business-domain, catalogs, category:business, category:education, category:software, category:technology, coding, creating, data engineering, data governance, databricks, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, security, separate, sql, unity catalog -
Restricting Finance Data Access to an Approved Production Group
POST_START Restricting Finance Data Access to an Approved Production Group I was recently asked to help secure access to sensitive finance data in our Databricks environment. The goal was to ensure that only a specific group of finance analysts could access certain data in the production catalog, while maintaining strict access controls to prevent unauthorized…
A1, Access, approved, category:business, category:education, category:software, category:technology, coding, data, data engineering, data governance, databricks, education, finance, group, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, restricting, sql, unity catalog -
Investigating Effective Access Across Catalog Schema and Table Grants
POST_START Investigating Effective Access Across Catalog Schema and Table Grants I recently needed to understand how access permissions propagate across different levels in Unity Catalog, specifically looking at how grants on a catalog affect access to schemas and tables within it. I started by examining the production catalog, which contains several schemas and tables that…
A1, Access, Across, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, Effective, grants, investigating, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, schema, sql, table, unity catalog -
Removing Stale Production Access After Team Changes
POST_START Removing Stale Production Access After Team Changes Last week, our team underwent a restructuring, and the former sales team was disbanded. As part of the cleanup, I needed to ensure that no former team members still had access to production data. My first step was to check what access was currently granted on the…
A1, Access, after, category:business, category:education, category:software, category:technology, changes, coding, data engineering, data governance, databricks, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, removing, sql, stale, team, unity catalog -
Finding Excessive Table Privileges Assigned to Production Groups
POST_START Finding Excessive Table Privileges Assigned to Production Groups I recently took on the task of reviewing access controls for a few key tables in our production environment. One of the tables that raised my attention was production.finance.payments. I wanted to make sure that the right people had the right level of access and that…
A1, assigned, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, excessive, finding, groups, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, privileges, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, table, unity catalog -
Auditing Emergency Production Access After an Incident
POST_START Auditing Emergency Production Access After an Incident Yesterday, we experienced a minor security incident involving access to the production catalog. A user with temporary emergency access was found to have interacted with critical data in the production environment. Now, I’m tasked with auditing who has access to the production catalog and how it’s being…
A1, Access, after, auditing, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, emergency, incident, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, unity catalog
