Remediate from Azure Portal - Delete the existing Databricks workspace (migration required). - Create a new Databricks workspace with VNet Injection: - Go to Azure Portal -> Create Databricks Workspace. - Select Advanced Networking. - Choose Deploy into your own Virtual Network. - Specify a customer-managed VNet and associated subnets. - Enable Private Link for secure API access. Remediate from Azure CLI Deploy a new Databricks workspace in a custom VNet: az databricks workspace create --name \\ --resource-group \\ --location \\ --managed-resource-group \\ --enable-no-public-ip true \\ --network-security-group-rule "NoAzureServices" \\ --public-network-access Disabled \\ --custom-virtual-network-id /subscriptions//resourceGroups//providers/Microsoft.Network/virtualNetworks/ Ensure NSG Rules are correctly configured: az network nsg rule create --resource-group \\ --nsg-name \\ --name "DenyAllOutbound" \\ --direction Outbound \\ --access Deny \\ --priority 4096 Remediate from PowerShell New-AzDatabricksWorkspace -ResourceGroupName -Name -Location -ManagedResourceGroupName -CustomVirtualNetworkId "/subscriptions//resourceGroups//providers/Microsoft.Network/virtualNetworks/" Impact: - Requires additional configuration during Databricks workspace deployment. - Might increase operational overhead for network maintenance. - May impact connectivity if misconfigured (e.g., restrictive NSG rules or missing routes).

Detections

Analytics

Item Search