External secrets in Unity Catalog (Beta)

BetaSep 9, 2026VerifiedAdded Sep 22, 2026

External secrets connect a Unity Catalog schema to AWS Secrets Manager. The secrets appear in Unity Catalog as read-only securable objects that you govern with Unity Catalog privileges. Databricks reads their values from AWS Secrets Manager on demand. See External secrets in Unity Catalog .

Governance Security Observability

Read Databricks's release notes

https://docs.databricks.com/aws/en/release-notes/product/2026/september#external-secrets-in-unity-catalog-beta

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More Unity Catalog releases

Unity CatalogSep 8, 2026

ABAC DENY policies are in Beta

ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access-management operations. They always take precedence over any grant. For details, see ABAC DENY policies (Beta) .

BetaGovernanceObservabilitySource

Unity CatalogSep 11, 2026

Sharing foreign Iceberg tables with OpenSharing is now generally available

Sharing and reading foreign Iceberg tables with OpenSharing is now generally available. Providers can share Iceberg tables federated from foreign Iceberg catalogs using Lakehouse Federation, including to recipients using external Iceberg clients.

GAGovernanceApache IcebergObservabilitySource

Unity CatalogSep 11, 2026

Sharing foreign schemas and tables with OpenSharing is now generally available

Sharing and reading foreign schemas and foreign tables with OpenSharing is now generally available. Providers can share foreign schemas and tables federated from external data sources using Lakehouse Federation, without copying data into Databricks.

GAPricingDeveloper toolsSource

Unity CatalogSep 15, 2026

The READ METADATA privilege will soon be available by default for workspaces with the compliance security profile enabled

The READ METADATA privilege will be available by default for workspaces with the compliance security profile enabled in mid-October 2026. READ METADATA grants read-only visibility into an object's metadata, including security-sensitive information that BROWSE doesn't expose, such as privilege grants, row filters and column masks, and ABAC policies.

UpdateGovernanceSecuritySource

Unity CatalogSep 15, 2026

Sharing foreign Delta tables with OpenSharing is now generally available

Sharing and reading foreign Delta tables with OpenSharing is now generally available. Providers can share Delta-format tables federated from OneLake, a Hive metastore, or AWS Glue, without copying data into Databricks. See Add foreign Delta tables to a share .

GASource

Unity CatalogSep 15, 2026

Data Classification now scans Unity Catalog views (Beta)

Data Classification can now scan Unity Catalog views in addition to tables, classifying columns for sensitive data using the same detection engine. This is a Beta feature. See Classify views .

BetaGovernanceObservabilitySource

Unity CatalogSep 16, 2026

VARIANT cast extends to ARRAY and MAP columns in ABAC column masks

You can now use a single VARIANT function to mask columns of type ARRAY and MAP , in addition to STRUCT and other types. This requires Databricks Runtime 19 or above. See Masking multiple column types with a single function .

UpdateGovernanceSource

Unity CatalogSep 17, 2026

Metastore-level ABAC policies are in Beta

Metastore-level ABAC policies are in Beta in Unity Catalog. You can now attach an ABAC policy (row filter, column mask, GRANT, or DENY) at the metastore level, so a single policy applies across every catalog in the metastore, including catalogs created later.

BetaGovernanceObservabilityDeveloper toolsSource

Also shipped on Sep 9, 2026

Snowflake Snowflake OpenflowSep 9, 2026

Openflow gen 1 deployment creation retired

You can no longer create new first generation (gen 1) Openflow deployments (BYOC or Snowflake). All new deployments are second generation (gen 2), created with CREATE OPENFLOW DEPLOYMENT or the Openflow UI. Existing gen 1 deployments continue to work unchanged, and you can still create new gen 1 runtimes on an existing gen 1 deployment.

DeprecationData integrationSource

Google Cloud LookerSep 9, 2026

The deprecation of the Looker Mobile (Legacy) application has been postponed to January 31, 2027

The deprecation of the Looker Mobile (Legacy) application has been postponed to January 31, 2027. Starting on January 31, 2027, support for the Looker Mobile (Legacy) app will be discontinued and the app will be unavailable for download from the App Store or Play Store.

DeprecationBISource

Google Cloud Gemini EnterpriseSep 9, 2026

Gemini Notebook Enterprise: Website URL ingestion blocked by VPC Service Controls

Projects with VPC Service Controls enabled can't add website URLs as notebook sources in Gemini Notebook Enterprise. This is because direct website ingestion performs a live web crawl, generating outbound traffic beyond Google networks, which would violate VPC Service Controls perimeter policies.

DeprecationLLMsGovernanceData integrationSource

Google Cloud Gemini Enterprise Agent PlatformSep 9, 2026

Computer Use and Shell sandboxes are generally available

Computer Use and Shell sandboxes in Gemini Enterprise Agent Platform are now generally available (GA). This release also includes the following new features for Agent Platform sandboxes: Shell sandboxes : Run untrusted shell commands, install packages, and manipulate files in an isolated Linux container using direct API /exec calls.

GAAI agentsLLMsSecuritySource

Microsoft Microsoft FabricSep 9, 2026

Get ready for table discovery in OneLake Catalog search (Preview)

In late September, OneLake Catalog will begin surfacing tables as searchable objects in Microsoft Fabric. This change expands which table metadata users can discover based on their existing item permissions, so administrators may want to review the related tenant setting before rollout.

PreviewGovernanceSecurityPricingSource

AWS Amazon Quick SuiteSep 9, 2026

Amazon Quick desktop app is now generally available on macOS and Windows

The Amazon Quick desktop app is now generally available on macOS and Windows. The desktop app brings the full power of Amazon Quick to your computer, working directly with your local files and staying connected to your calendar, email, and business apps in the background.

GAAI agentsGovernanceDeveloper toolsSource