Automatic deletion of unused OAuth client secrets in Databricks
Databricks now automatically deletes service principal OAuth secrets after 90 days of inactivity.
O que mudou
Databricks introduced an automated cleanup routine that removes a service principal's OAuth client secret if it remains unused for 90 days, aligning the behavior with access token policies.
Use cases
Imagine you created an OAuth secret for testing automation, stopped using it, and left it in the workspace. To prevent security risks from stale credentials, the platform now discards abandoned secrets.
- Clean up inactive credentials without manual intervention
- Reduce the attack surface from forgotten secrets
- Maintain consistency with access token cleanup policies
Limitations and requirements
- The inactivity threshold for deletion is fixed at 90 days without use.
- If a deleted secret is still needed, a new OAuth secret must be generated in the Databricks UI.
- oauth
- service principal
- security
- authentication
- governance
Unused OAuth client secrets are automatically deleted after 90 days
Resumo e explicação gerados por IA a partir da release note oficial. Em caso de dúvida, a documentação oficial da plataforma prevalece.
Relacionadas
- DatabricksGA
Repositórios de pacotes em nível de workspace para Databricks Apps
Administradores de workspace podem configurar repositórios padrão de pacotes Python e npm para Databricks Apps.
databricks apps · workspace settings - DatabricksGA
Redimensione partições de stateful streaming sem perder o checkpoint no Databricks
Agora é possível alterar o número de partições de shuffle em queries Structured Streaming e pipelines Lakeflow sem descartar o estado do checkpoint.
structured streaming · lakeflow - DatabricksAtualização
Google Gemini 4 Argon disponível no Unity Gateway do Databricks
O modelo multimodal Google Gemini 4 Argon já pode ser acessado via Foundation Model APIs e Unity Gateway.
unity catalog · foundation model apis