-1

I need to create an ADF pipeline to restart a databricks cluster. I am trying to do this using web activity by using token authentication. Token is saved in keyvault but how to fetch the token from keyvault and pass it in web activity without exposing the secret in pipeline run logs.

3

1 Answer 1

0

I need to create an ADF pipeline to restart a databricks cluster. I am trying to do this using web activity by using token authentication. Token is saved in keyvault but how to fetch the token from keyvault and pass it in web activity without exposing the secret in pipeline run logs.

Make sure your ADF instance has permission to access your Key Vault. You can do this by assigning the appropriate role using either RBAC (IAM) or by adding an Access Policy directly in the Key Vault settings to allow Get permission on secrets.

enter image description here

This allows you to securely pass the token into headers or bodies of subsequent Web activities by using dynamic content. "@activity('Web1').output.value"

enter image description here

Make sure to turn on Secure Inputs and Secure Outputs for any activities dealing with the secret. This ensures that the token doesn’t show up in pipeline run history or logs, protecting it from being viewed by unauthorized users.

enter image description here

Output : enter image description here

Also you can refer SO

Sign up to request clarification or add additional context in comments.

1 Comment

Please do not answer off-topic questions. The OP showed zero work. Plus, as written, it's not a programming question. This is not the place for someone to post requirements and receive custom solutions. And your answer isn't actually fixing/solving/answering anything specific (aside from implementing a spec)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.