azure-databricks-cluster-spark-env-config

Cluster Spark configuration, environment variables, tags, and init-script locations are readable and may contain secrets.

azurecritical service: azure:databricks emits ContainsSecret

Where it sits

locationDatabricks cluster.{spark_conf,spark_env_vars,custom_tags,init_scripts}
location kindenvironment_variable
data kindscredential password api_key access_key secret_key oauth_token connection_string source_code_secret
emits edgeContainsSecret
serviceAzure Databricks (azure:databricks)

Collection recipe

access modedata_plane
operationGET /api/2.1/clusters/get
response path{spark_conf,spark_env_vars,custom_tags,init_scripts}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

CAN_ATTACH_TO

References

move · open · esc close