Credential

laktory.models.resources.databricks.Credential

Bases: CredentialBase

Databricks Credential

Unity Catalog service credential, used to access external cloud services.

Examples:

import io

from laktory import models

credential_yaml = '''
name: azure-service-credential
purpose: SERVICE
azure_managed_identity:
  access_connector_id: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg/providers/Microsoft.Databricks/accessConnectors/ac
grants:
- principal: role-engineers
  privileges:
  - ACCESS
'''
credential = models.resources.databricks.Credential.model_validate_yaml(
    io.StringIO(credential_yaml)
)

References

• Databricks Credential

BASE	DESCRIPTION
aws_iam_role	TYPE: CredentialAwsIamRole | None | VariableType DEFAULT: None
azure_managed_identity	TYPE: CredentialAzureManagedIdentity | None | VariableType DEFAULT: None
azure_service_principal	TYPE: CredentialAzureServicePrincipal | None | VariableType DEFAULT: None
comment	TYPE: str | None | VariableType DEFAULT: None
created_at	TYPE: int | None | VariableType DEFAULT: None
created_by	TYPE: str | None | VariableType DEFAULT: None
databricks_gcp_service_account	TYPE: CredentialDatabricksGcpServiceAccount | None | VariableType DEFAULT: None
force_destroy	TYPE: bool | None | VariableType DEFAULT: None
force_update	TYPE: bool | None | VariableType DEFAULT: None
full_name	TYPE: str | None | VariableType DEFAULT: None
isolation_mode	TYPE: str | None | VariableType DEFAULT: None
metastore_id	TYPE: str | None | VariableType DEFAULT: None
name	TYPE: str | VariableType
owner	TYPE: str | None | VariableType DEFAULT: None
purpose	TYPE: str | VariableType
read_only	TYPE: bool | None | VariableType DEFAULT: None
skip_validation	TYPE: bool | None | VariableType DEFAULT: None
updated_at	TYPE: int | None | VariableType DEFAULT: None
updated_by	TYPE: str | None | VariableType DEFAULT: None
used_for_managed_storage	TYPE: bool | None | VariableType DEFAULT: None

LAKTORY	DESCRIPTION
grant	Non-destructive grant for specific principal(s). Adds or updates privileges for the listed principal(s) and leaves grants for all other principals untouched. Use when access is managed from multiple sources (Laktory, Databricks UI, etc.). Mutually exclusive with grants. TYPE: CredentialGrant | list[CredentialGrant] | VariableType DEFAULT: None
grants	Authoritative grant list for all principals. Replaces every existing grant on this Credential - including those set outside Laktory - with only the entries listed here. Use only when Laktory owns all access management for this resource. Mutually exclusive with grant. TYPE: list[CredentialGrant | VariableType] | VariableType DEFAULT: None

ATTRIBUTE	DESCRIPTION
additional_core_resources	credential grants TYPE: list

additional_core_resources property

• credential grants

---

laktory.models.resources.databricks.credential.CredentialAwsIamRole

Bases: BaseModel

PARAMETER	DESCRIPTION
external_id	TYPE: str | None | VariableType DEFAULT: None
role_arn	TYPE: str | None | VariableType DEFAULT: None
unity_catalog_iam_arn	TYPE: str | None | VariableType DEFAULT: None

---

laktory.models.resources.databricks.credential.CredentialAzureManagedIdentity

Bases: BaseModel

PARAMETER	DESCRIPTION
access_connector_id	TYPE: str | VariableType
credential_id	TYPE: str | None | VariableType DEFAULT: None
managed_identity_id	TYPE: str | None | VariableType DEFAULT: None

---

laktory.models.resources.databricks.credential.CredentialAzureServicePrincipal

Bases: BaseModel

PARAMETER	DESCRIPTION
application_id	TYPE: str | VariableType
client_secret	TYPE: str | VariableType
directory_id	TYPE: str | VariableType

---

laktory.models.resources.databricks.credential.CredentialDatabricksGcpServiceAccount

Bases: BaseModel

PARAMETER	DESCRIPTION
credential_id	TYPE: str | None | VariableType DEFAULT: None
email	TYPE: str | None | VariableType DEFAULT: None
private_key_id	TYPE: str | None | VariableType DEFAULT: None