Update-AzDatabricksWorkspace

Update-AzDatabricksWorkspace
    -Name <String>
    -ResourceGroupName <String>
    [-SubscriptionId <String>]
    [-PrepareEncryption]
    [-EncryptionKeySource <String>]
    [-EncryptionKeyVaultUri <String>]
    [-EncryptionKeyName <String>]
    [-EncryptionKeyVersion <String>]
    [-KeyVaultKeyName <String>]
    [-KeyVaultKeyVersion <String>]
    [-KeyVaultUri <String>]
    [-AmlWorkspaceId <String>]
    [-SkuTier <String>]
    [-Authorization <IWorkspaceProviderAuthorization[]>]
    [-DefaultCatalogInitialType <String>]
    [-ManagedDiskKeySource <String>]
    [-ManagedDiskKeyVaultPropertiesKeyName <String>]
    [-ManagedDiskKeyVaultPropertiesKeyVaultUri <String>]
    [-ManagedDiskKeyVaultPropertiesKeyVersion <String>]
    [-ManagedDiskRotationToLatestKeyVersionEnabled]
    [-ManagedServiceKeySource <String>]
    [-ManagedServicesKeyVaultPropertiesKeyName <String>]
    [-ManagedServicesKeyVaultPropertiesKeyVaultUri <String>]
    [-ManagedServicesKeyVaultPropertiesKeyVersion <String>]
    [-UiDefinitionUri <String>]
    [-Tag <Hashtable>]
    [-RequiredNsgRule <String>]
    [-PublicNetworkAccess <String>]
    [-EnableNoPublicIP]
    [-EnhancedSecurityMonitoring <String>]
    [-AutomaticClusterUpdate <String>]
    [-ComplianceStandard <String[]>]
    [-EnhancedSecurityCompliance <String>]
    [-AccessConnectorId <String>]
    [-AccessConnectorIdentityType <String>]
    [-AccessConnectorUserAssignedIdentityId <String>]
    [-DefaultStorageFirewall <String>]
    [-DefaultProfile <PSObject>]
    [-AsJob]
    [-NoWait]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

Update-AzDatabricksWorkspace
    -InputObject <IDatabricksIdentity>
    [-PrepareEncryption]
    [-EncryptionKeySource <String>]
    [-EncryptionKeyVaultUri <String>]
    [-EncryptionKeyName <String>]
    [-EncryptionKeyVersion <String>]
    [-KeyVaultKeyName <String>]
    [-KeyVaultKeyVersion <String>]
    [-KeyVaultUri <String>]
    [-AmlWorkspaceId <String>]
    [-SkuTier <String>]
    [-Authorization <IWorkspaceProviderAuthorization[]>]
    [-DefaultCatalogInitialType <String>]
    [-ManagedDiskKeySource <String>]
    [-ManagedDiskKeyVaultPropertiesKeyName <String>]
    [-ManagedDiskKeyVaultPropertiesKeyVaultUri <String>]
    [-ManagedDiskKeyVaultPropertiesKeyVersion <String>]
    [-ManagedDiskRotationToLatestKeyVersionEnabled]
    [-ManagedServiceKeySource <String>]
    [-ManagedServicesKeyVaultPropertiesKeyName <String>]
    [-ManagedServicesKeyVaultPropertiesKeyVaultUri <String>]
    [-ManagedServicesKeyVaultPropertiesKeyVersion <String>]
    [-UiDefinitionUri <String>]
    [-Tag <Hashtable>]
    [-RequiredNsgRule <String>]
    [-PublicNetworkAccess <String>]
    [-EnableNoPublicIP]
    [-EnhancedSecurityMonitoring <String>]
    [-AutomaticClusterUpdate <String>]
    [-ComplianceStandard <String[]>]
    [-EnhancedSecurityCompliance <String>]
    [-AccessConnectorId <String>]
    [-AccessConnectorIdentityType <String>]
    [-AccessConnectorUserAssignedIdentityId <String>]
    [-DefaultStorageFirewall <String>]
    [-DefaultProfile <PSObject>]
    [-AsJob]
    [-NoWait]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

ワークスペースを更新します。

Get-AzDatabricksWorkspace -ResourceGroupName azps_test_gp_db -Name azps-databricks-workspace-t1 | Update-AzDatabricksWorkspace -Tag @{"key"="value"}

Name                         ResourceGroupName Location Managed Resource Group ID
----                         ----------------- -------- -------------------------
azps-databricks-workspace-t1 azps_test_gp_db   eastus   /subscriptions/{subId}/resourceGroups/azps_test_gp_kv_t1

このコマンドは、Databricks ワークスペースのタグを更新します。

Update-AzDatabricksWorkspace -ResourceGroupName azps_test_gp_db -Name azps-databricks-workspace-t2 -PrepareEncryption
$updWsp = Get-AzDatabricksWorkspace -ResourceGroupName azps_test_gp_db -Name azps-databricks-workspace-t2
Set-AzKeyVaultAccessPolicy -VaultName azps-keyvault -ObjectId $updWsp.StorageAccountIdentityPrincipalId -PermissionsToKeys wrapkey,unwrapkey,get
Update-AzDatabricksWorkspace -ResourceGroupName azps_test_gp_db -Name azps-databricks-workspace-t2 -EncryptionKeySource 'Microsoft.KeyVault' -EncryptionKeyVaultUri https://azps-keyvault.vault.azure.net/ -EncryptionKeyName azps-k1 -EncryptionKeyVersion a563a8021cba47109d93bd6d690621a7

Name                         ResourceGroupName Location Managed Resource Group ID
----                         ----------------- -------- -------------------------
azps-databricks-workspace-t2 azps_test_gp_db   eastus   /subscriptions/{subId}/resourceGroups/azps_test_gp_kv_t2

Databricks ワークスペースで暗号化を有効にするには、次の 3 つの手順を実行します。1.KeyVault で消去保護が有効になっていることを確認してください。 2.ワークスペースを -PrepareEncryption で更新します (作成されていない場合)。 3.最後の手順の出力で StorageAccountIdentityPrincipalId を見つけ、プリンシパルにキーのアクセス許可を付与します。 4.ワークスペースをもう一度更新して、暗号化キーに関する情報を入力します。

• -EncryptionKeySource
• -EncryptionKeyVaultUri
• -EncryptionKeyName
• -EncryptionKeyVersion 5.重要! 詳細については、次のドキュメントを参照してください。 https://learn.microsoft.com/en-us/azure/databricks/security/keys/cmk-managed-services-azure/customer-managed-key-managed-services-azure?WT.mc_id=Portal-Microsoft_Azure_Databricks#--use-the-azure-portal

Update-AzDatabricksWorkspace -ResourceGroupName azps_test_gp_db -Name azps-databricks-workspace-t3 -EncryptionKeySource 'Default'

Name                         ResourceGroupName Location Managed Resource Group ID
----                         ----------------- -------- -------------------------
azps-databricks-workspace-t3 azps_test_gp_db   eastus   /subscriptions/{subId}/resourceGroups/azps_test_gp_kv_t3

暗号化を無効にするには、 -EncryptionKeySource を 'Default' に設定するだけです。

Update-AzDatabricksWorkspace -ResourceGroupName azps_test_gp_db -Name azps-databricks-workspace-t2 -RequiredNsgRule 'AllRules'

Name                         ResourceGroupName Location Managed Resource Group ID
----                         ----------------- -------- -------------------------
azps-databricks-workspace-t2 azps_test_gp_db   eastus   /subscriptions/{subId}/resourceGroups/azps_test_gp_kv_t2

このコマンドは、Databricks ワークスペースの NsgRule を更新します。

このコマンドレットは、共通パラメーター -Debug、-ErrorAction、-ErrorVariable、-InformationAction、-InformationVariable、-OutBuffer、-OutVariable、-PipelineVariable、-ProgressAction、-Verbose、-WarningAction、-WarningVariable をサポートします。 詳細については、about_CommonParametersを参照してください。