We’re excited to share a brand new set of safety controls and compliance certifications that may assist with regulatory compliance on Azure Databricks and AWS Databricks SQL Serverless. Typically obtainable as we speak, Azure Databricks is now licensed PCI-DSS (Basic) and HIPAA (Databricks SQL Serverless) compliant. Moreover, AWS Databricks SQL Serverless is licensed HIPAA, PCI and FedRAMP Average compliant as a public preview. These capabilities can be found via the Databricks Enhanced Safety and Compliance Add-On.
Prospects all around the world belief us with their most delicate information. Databricks has carried out and continues including controls to satisfy the distinctive compliance wants of our extremely regulated prospects. Amongst our commonest requests are safety controls permitting prospects to course of regulated and delicate information inside Databricks to adjust to Fee Card Business Information Safety Normal (PCI-DSS), Well being Insurance coverage Portability and Accountability Act (HIPAA), and Federal Danger and Authorization Administration Program (FedRAMP).
This weblog will present an summary of our new compliance certifications on Azure Databricks and AWS Databricks SQL Serverless and spotlight the capabilities which are obtainable that can assist you configure your surroundings with the entire obligatory controls to help these new certifications with the Databricks Enhanced Safety and Compliance Add-On.
Azure Databricks is now PCI-DSS (Basic) and HIPAA (Databricks SQL Serverless) compliant
We’re excited to announce that Azure Databricks is now compliant beneath PCI-DSS, and Azure Databricks SQL Serverless is compliant beneath HIPAA. Each of those certifications at the moment are usually obtainable. This enhances the prevailing compliance certification controls already obtainable on the Azure Databricks Basic compute airplane.
To configure your Azure Databricks workspaces to course of PCI information, it’s essential to allow the Compliance Safety Profile, a part of the Databricks Enhanced Safety and Compliance Add-On, now usually obtainable.
AWS Databricks SQL Serverless is now HIPAA, PCI and FedRAMP Average compliant
AWS Databricks SQL (DB SQL) Serverless offers the very best efficiency with prompt and elastic compute, lowers prices, and lets you give attention to delivering essentially the most worth to your online business relatively than managing infrastructure. We’re thrilled to announce that AWS DB SQL Serverless is licensed compliant beneath HIPAA, PCI-DSS, and FedRAMP Average. This enhances the prevailing HIPAA, PCI-DSS, and FedRAMP Average compliance controls already obtainable for the Databricks AWS Basic compute airplane.
The Compliance Safety Profile, a part of the Enhanced Safety and Compliance Add-On, now helps AWS SQL Serverless Warehouses. This help is in public preview and can be obtainable initially on the AWS us-east-1 area. If you have already got the Databricks Enhanced Safety and Compliance Add-On and your workspace is already configured with the Compliance Safety Profile, AWS DB SQL Serverless Warehouses can be obtainable in these workspaces over the subsequent few weeks.
Reap the benefits of the best normal for Databricks safety with the Enhanced Safety and Compliance Add-On
At Databricks, we acknowledge that sustaining information safety and compliance is a high precedence for our prospects. Some prospects need further safety controls, particularly safety monitoring, and others require options like FIPS 140-2 encryption and cluster replace enforcement for compliance. That’s the reason Databricks launched Enhanced Safety and Compliance Add-On to assist simplify the complexity of assembly safety and regulatory necessities for our prospects. Two choices make up Enhanced Safety and Compliance Add-On:
Enhanced Safety Monitoring: Enhanced Safety Monitoring offers prospects with elevated visibility, menace safety and safety hardening for his or her workloads. Advantages of this providing embody:
- Canonical Ubuntu Benefit VMs with enhanced CIS Degree 1 hardening
- Conduct-based malware monitoring and file integrity monitoring
- Malware and antivirus detection
- Vulnerability experiences of the host OS
With Enhanced Safety Monitoring, safety occasion logs from safety monitoring brokers are made obtainable alongside together with your common Databricks audit logs, offering complete safety monitoring in your group’s SIEM or Databricks platform. These logs include contextual data that assists analysts in shortly figuring out the origin of suspicious exercise with out requiring a prolonged investigation.
Compliance Safety Profile: The Compliance Safety Profile facilitates compliance governance for workspaces by offering a validated safety baseline that mixes the safety capabilities of Enhanced Safety Monitoring with further safety features to handle the relevant controls of PCI-DSS and HIPAA. The Compliance Safety Profile is our most safe baseline for the Databricks compute airplane, serving to prospects to satisfy and handle their compliance management necessities a lot simpler. Key advantages of this providing embody:
- The Enhanced Safety Monitoring safety enhancements listed above
- FIPS 140-2 Degree 1 validated encryption modules (AWS solely)
- AWS Nitro VM enforcement for information at relaxation and in transit encryption (AWS solely)
- Computerized Cluster Replace means that you can configure a workspace with a month-to-month or twice-monthly schedule to restart compute assets robotically. This functionality helps admins and customers plan downtime for restarting compute assets to get the newest pictures and safety updates.
You possibly can activate Databricks Enhanced Safety and Compliance as an add-on SKU for the enterprise (AWS) and premium (Azure) tiers.
Getting Began
Go to our pricing web page for extra data on tips on how to activate the Databricks Enhanced Safety and Compliance Add-On. Check with our documentation for step-by-step directions on enabling Enhanced Safety Monitoring (AWS | Azure) or the Compliance Safety Profile (AWS | Azure) to harden your Azure Databricks, AWS SQL Serverless, and AWS Basic compute airplane workspaces.
Please go to our Safety and Belief Middle for extra details about Databricks safety features and compliance certifications.
