This Terraform folder is based on Databricks Terraform examples but without Front End Private Link. This latest addition also enables Default Workspace Storage Firewall (Private DBFS). The template will create all the resources needed to deploy databricks in Azure

1. Modify the env.tfas file to change resource names
2. My example assumes you have a UC Metastore in the same region. You will need the Metastore UUID
3. I added tagging in main.tf and dbfs.tf to ensure the Resource Group gets an owner and Dont remove before date. You may want to change these as well so they don't have my name / email
4. Perform an az login with an account that has Owner or Network Administrator privileges
5. From the main directory execute a Plan and if successful run apply

• terraform plan -var-file="env.tfvars"
• terraform apply -var-file="env.tfvars"

Serverless clusters need access to your storage accounts. VNet Whitelisting using Azure Storage Firewall is the simplest option. Private Link is an option not covered in these scripts. Refer to our documentation for additional information Once the new storage account is created, we will run AZ CLI commands to add all the Databricks VNets to the storage firewall. You will need to run the script for each storage account serverless needs to access

Clone or copy my databricks-tools repo

Navigate to the /azure-storage-fw directory

I am assuming you have access to a linux VM or MAC : you may have to add execute permissions to the .sh files 

You can modify my BASH script "create-storage-fw-rules-params.sh" to perform the operation.  The only value that needs to be changed in the file is the subscription ID, the rest are command line options. You will need to create a new file for your region and all the databricks VNet Resource IDs.  

Log into your accounts.azuredatabricks.net portal => Cloud resources,  Search for your NCC assigned to the workspace and open the NCC.  Click on "Default Rules" => View All.  Copy all the resource IDs and make a file such as databricks-rules.txt. 

Ensure azure CLI is installed on the machine you are running and your user has the appropriate permissions (Usually contributor to the storage account and network operator). Then execute the shell script ./create-storage-fw-rules-params.sh

az login