Data and AI releases

548 this month · 176 companies

External secrets in Unity Catalog (Beta)

BetaVerified

External secrets connect a Unity Catalog schema to AWS Secrets Manager. The secrets appear in Unity Catalog as read-only securable objects that you govern with Unity Catalog privileges. Databricks reads their values from AWS Secrets Manager on demand. See External secrets in Unity Catalog .

GovernanceSecurityObservability

Read on docs.databricks.com

Also shipped Sep 9, 2026Databricks in September 2026 →

Openflow gen 1 deployment creation retired

You can no longer create new first generation (gen 1) Openflow deployments (BYOC or Snowflake). All new deployments are second generation (gen 2), created with CREATE OPENFLOW DEPLOYMENT or the Openflow UI. Existing gen 1 deployments continue to work unchanged, and you can still create new gen 1 runtimes on an existing gen 1 deployment.

Deprecation
Source ↗

More from Unity CatalogEvery Unity Catalog release →

ABAC DENY policies are in Beta

ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access-management operations. They always take precedence over any grant. For details, see ABAC DENY policies (Beta) .

Beta
Source ↗

Metastore-level ABAC policies are in Beta

Metastore-level ABAC policies are in Beta in Unity Catalog. You can now attach an ABAC policy (row filter, column mask, GRANT, or DENY) at the metastore level, so a single policy applies across every catalog in the metastore, including catalogs created later.

Beta
Source ↗