Skip to main content

Overview

Security Analysis Tool (SAT) is a comprehensive security assessment solution that analyzes your Databricks account and workspace configurations, providing actionable recommendations to help you follow Databricks security best practices.

What SAT Does

SAT compares your workspace configurations against a curated set of security best practices and delivers detailed reports for your Databricks workspaces on AWS, Azure, and GCP.

Why Use SAT?​

Databricks has worked with thousands of customers to securely deploy its platform, leveraging security features that meet diverse architectural requirements. While security implementations vary across organizations, there are commonly adopted guidelines and features used by organizations with high security standards.

SAT helps you:

🔍 Identify Security Gaps
Automatically scan your Databricks environment to find deviations from security best practices.

📊 Prioritize Risks
Get recommendations ranked by severity (High, Medium, Low) to focus on the most critical issues first.

📚 Access Documentation
Each recommendation includes direct links to relevant Databricks documentation for easy implementation.

✅ Verify Compliance
Ensure your configurations align with industry standards and organizational security policies.

What SAT Analyzes​

SAT performs comprehensive security checks across multiple dimensions:

  • 🛡ī¸ Network Security - Firewall rules, IP access controls, VPC configurations
  • đŸ‘Ĩ Identity & Access - Authentication, authorization, user management
  • 🔐 Data Protection - Encryption, data access controls, secrets management
  • ⚖ī¸ Governance - Audit logging, workspace settings, policies
  • ℹī¸ Informational - Configuration insights and recommendations

Each check identifies opportunities to harden your Databricks configurations, services, and resources, with clear explanations and remediation guidance.

Important Considerations​

Assessment Tool - Not a Certification

SAT is a productivity tool designed to help verify your security configurations against Databricks best practices. It is not intended to serve as a certification or formal attestation of your deployment's security posture.

Before Making Changes​

Please review the SAT report with your:

  • ✓ Business stakeholders
  • ✓ System administrators
  • ✓ Security team
  • ✓ Compliance auditors

Key points to consider:

  • 📌 Not all deviations require immediate mitigation
  • 💰 Some recommendations may have cost implications
  • 🔗 Some security features may have dependency limitations
  • 📖 Always review the associated documentation before making changes
Additional Resources

For more security guidance, visit the Databricks Security and Trust Center for comprehensive resources and best practices.

Project Updates & Support​

Continuous Improvement​

The SAT project is regularly updated to:

  • ✨ Improve check accuracy
  • 🆕 Add new security checks
  • 🐛 Fix bugs and issues
  • 📈 Enhance reporting features

Getting Help​

📧 Feedback & Questions
Contact us at sat@databricks.com or open a GitHub issue

🔄 Updates
Watch the GitHub repository for the latest releases

Project Support​

Community-Supported Project

Important Support Information:

  • ⚠ī¸ This code is provided for exploration purposes only
  • ⚠ī¸ Not formally supported by Databricks under any Service Level Agreements (SLAs)
  • ⚠ī¸ Provided AS-IS, without warranties or guarantees
  • ⚠ī¸ Do not submit support tickets to Databricks for issues with this project

How to Get Help:

  • 📝 Submit bugs or issues as GitHub Issues
  • ⏰ Issues will be reviewed as time permits
  • 🤝 Community contributions are welcome

Licensing:

  • 📄 Source code is subject to the Databricks LICENSE
  • 📚 Third-party libraries are subject to their respective licenses