Skip to content

Databricks PAT URL

Service Name: Databricks

Service Description: Databricks is a unified data analytics platform designed to help organizations accelerate innovation by unifying data science, engineering and business. It provides a collaborative environment for data science and machine learning workflows.

Service Address: https://databricks.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Databricks workspaces and resources based on the permissions assigned to the token.

Secret Revokement URL: Does not exist

Secret Example: cloud.databricks.com

Suspicious Activity Investigation Instructions:

  • Review Databricks audit logs for unusual API calls or resource access
  • Check for unauthorized notebook executions or job runs
  • Monitor for unusual data access patterns or large data exports
  • Review cluster creation and configuration changes
  • Check for changes in workspace permissions or user access

Mitigation Instructions:

  • Log into the Databricks workspace as an administrator
  • Navigate to User Settings > Access Tokens
  • Identify and revoke the compromised token
  • Review audit logs to assess the impact of the compromise
  • Rotate any other potentially affected credentials
  • Review and update access control policies as needed