Now generally available for enhanced workspace security.
Context-based ingress control allows account admins to define allow and deny rules that combine user identities, network sources, and request types to manage access to Databricks workspaces. This feature works alongside existing IP access lists and enables granular control over who can access workspace endpoints. It supports both public and private access policies and can be configured at the account level to govern multiple workspaces simultaneously.
This update enhances security by ensuring that only trusted combinations of identity and network source can access sensitive workspace resources, thereby reducing the risk of unauthorized access. It benefits organizations by providing a flexible and detailed access control mechanism that can adapt to various user scenarios, improving governance and compliance while minimizing potential security breaches.