Hi Hurtn, thanks a lot for this guidance on access patterns, it's super useful! One thing that we found out in testing exfiltration protection solutions is that Service Endpoint Policy can't be applied to databricks subnets for data exfiltration purposes, as the policies for such purpose (allow outbound to storage A, restrict to storage B) is in conflict with network intent policy (the network intent policy allows databricks subnets to initiate outbound traffic to storage accounts, as in screenshot there are a few rules predefined and can't be violated)
Hi Hurtn, thanks a lot for this guidance on access patterns, it's super useful! One thing that we found out in testing exfiltration protection solutions is that Service Endpoint Policy can't be applied to databricks subnets for data exfiltration purposes, as the policies for such purpose (allow outbound to storage A, restrict to storage B) is in conflict with network intent policy (the network intent policy allows databricks subnets to initiate outbound traffic to storage accounts, as in screenshot there are a few rules predefined and can't be violated)
