Bhavin Kukadia

Sharing data openly shouldn't mean sharing it insecurely. As enterprises scale Delta Sharing to hundreds of recipients across clouds and platforms, security and governance architectures quickly become the bottleneck. This session dives into how Databricks enables governed, zero‑copy collaboration using open Delta Sharing, Clean Rooms for multi‑party analytics without exposing raw data, and Private Exchanges in Databricks Marketplace for curated partner ecosystems. We'll tackle the three pillars of secure sharing at scale: OIDC token federation for secretless auth with external identity providers, attribute‑based access control (ABAC) for fine‑grained row/column policies, and the Storage Network Gateway for one‑time network setup that eliminates manual firewall/IP allowlisting. You'll see a live zero‑trust reference architecture, backed by Unity Catalog lineage and audit logging, powering cross‑cloud Databricks‑to‑Databricks and open recipients, plus monitoring. Expect code, configs, and field‑tested patterns, including a security checklist, ABAC policy templates, and an OIDC integration guide you can apply Monday morning to scale governed collaboration without replication.

This session will focus on the security aspects of Databricks Delta Sharing, Databricks Cleanrooms and Databricks Marketplace, providing an exploration of how these solutions enable secure and scalable data collaboration while prioritizing privacy. Highlights: - Use cases — Understand how Delta Sharing facilitates governed, real-time data exchange across platforms and how Cleanrooms support multi-party analytics without exposing sensitive information - Security internals — Dive into Delta Sharing's security frameworks - Dynamic views — Learn about fine-grained security controls - Privacy-first Cleanrooms — Explore how Cleanrooms enable secure analytics while maintaining strict data privacy standards - Private exchanges — Explore the role of private exchanges using Databricks Marketplace in securely sharing custom datasets and AI models with specific partners or subsidiaries - Network security & compliance — Review best practices for network configurations and compliance measures