Field Engineering enablement · landing page
Azure Databricks Networking & Security — Lesson Library
Twelve consolidated, architect-altitude topics covering Azure Databricks networking and security end-to-end — from cloud foundations to Private Link, serverless, governance, compliance, and FDE field playbooks. Open any topic for its tabbed interactive lesson. Topics 1–9 also include a plain-English Simple Mode companion (blue button).
12 topics
45 subtopics
45 interactive diagrams
9 Simple-Mode companions
12 / 12 reviewer-approved
Foundations Cloud networking primitives + the two-plane / three-path model the whole track rests on.
1
Networking & Cloud Foundations ✅
IP addressing & CIDR VNets & subnets Firewalls, NSGs & routing DNS, endpoints & name resolution Common network topologies
2
Architecture & Default Connectivity ✅
Control plane vs compute plane The three connectivity paths Deployment & workspace storage
Azure Databricks networking Securing each connectivity path — classic VNet injection, Private Link, and serverless.
3
Classic Compute Plane Networking ✅
Default VNet vs VNet injection Subnets & address-space sizing Secure Cluster Connectivity / No Public IP Egress: NSG, UDR, NAT Gateway Compute → storage endpoints
4
Private Link, DNS & Topologies ✅
Private Link connection types Private DNS for Private Link Transit / hub-and-spoke Data exfiltration protection
5
Serverless Networking ✅
Serverless architecture Network Connectivity Configuration (NCC) Egress control / network policies Storage access patterns
Security Identity, authorization & governance, encryption, isolation, compliance and auditing.
6
Security: Identity & Access ✅
Identity & authentication Network access controls for users
7
Security: Authorization & Governance ✅
Unity Catalog hierarchy & grants ABAC, row filters & column masks Storage credentials & external locations Cluster policies & access modes
8
Security: Encryption, Isolation & Compliance ✅
Encryption (TLS, CMK) Compute security & isolation Compliance (ESC / ESM / CSP) Audit logs & system tables
Synthesis Putting it together — reference architectures, the best-practices checklist, and customer/interview prep.
9
Synthesis, Best Practices & Interview ✅
Reference architectures end-to-end Networking & security best-practices checklist Customer & interview scenarios
FDE field engineering Field playbooks, the interview capstone, and customer-facing collateral.
10
FDE Field Playbooks ✅
Troubleshooting compute & networking startup Troubleshooting connectivity Troubleshooting storage & serverless access Customer deployment patterns Diagnostics, support & escalation
11
FDE Interview Prep Capstone ✅
Whiteboard scenarios Rapid-fire Q&A bank Defending trade-offs & cost
12
Customer-Facing Collateral ✅
Sizing & architecture decision guide Customer security & networking overview Deployment & hardening checklist
Azure-first · FDE / RSA architect altitude · authored with databricks-netsec-tutor and
signed off by databricks-netsec-reviewer . Each topic is one consolidated page with a tabbed
"architect view" and an interactive architecture diagram per subtopic. Time-sensitive facts
(default-outbound retirement 2026-03-31, NSP/service-tag migration 2026-06-09, Standard-tier EOL
2026-10-01) are flagged in-lesson — reconfirm against docs before quoting a customer.