Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Databricks Provider
  4. API Docs
  5. MwsNccPrivateEndpointRule
Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

databricks.MwsNccPrivateEndpointRule

databricks logo databricks logo
Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

    API Documentation

    Allows you to create a private endpoint in a Network Connectivity Config that can be used to configure private connectivity from serverless compute.

    This resource can only be used with an account-level provider!

    This feature is available on Azure, and in Public Preview on AWS.

    Plugin Framework Opt-In

    A Plugin Framework implementation of this resource is available. The default remains the SDK V2 implementation; to opt in, set the environment variable export DATABRICKS_TF_ENABLED_PF_RESOURCES="databricks.MwsNccPrivateEndpointRule". Once opted in, pulumi up waits for the rule to leave CREATING before returning: PENDING and ESTABLISHED succeed, while a CREATE_FAILED, REJECTED, DISCONNECTED, or EXPIRED connection state surfaces as an apply-time error instead of on the next plan.

    Example Usage

    Create private endpoints to an Azure storage account and an Azure standard load balancer.

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const config = new pulumi.Config();
const region = config.requireObject<any>("region");
const prefix = config.requireObject<any>("prefix");
const ncc = new databricks.MwsNetworkConnectivityConfig("ncc", {
    name: `ncc-for-${prefix}`,
    region: region,
});
const storage = new databricks.MwsNccPrivateEndpointRule("storage", {
    networkConnectivityConfigId: ncc.networkConnectivityConfigId,
    resourceId: "/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Storage/storageAccounts/examplesa",
    groupId: "blob",
});
const slb = new databricks.MwsNccPrivateEndpointRule("slb", {
    networkConnectivityConfigId: ncc.networkConnectivityConfigId,
    resourceId: "/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Network/privatelinkServices/example-private-link-service",
    domainNames: ["my-example.exampledomain.com"],
});

    import pulumi
import pulumi_databricks as databricks

config = pulumi.Config()
region = config.require_object("region")
prefix = config.require_object("prefix")
ncc = databricks.MwsNetworkConnectivityConfig("ncc",
    name=f"ncc-for-{prefix}",
    region=region)
storage = databricks.MwsNccPrivateEndpointRule("storage",
    network_connectivity_config_id=ncc.network_connectivity_config_id,
    resource_id="/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Storage/storageAccounts/examplesa",
    group_id="blob")
slb = databricks.MwsNccPrivateEndpointRule("slb",
    network_connectivity_config_id=ncc.network_connectivity_config_id,
    resource_id="/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Network/privatelinkServices/example-private-link-service",
    domain_names=["my-example.exampledomain.com"])

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		var region interface{}
		cfg.RequireObject("region", &region)
		var prefix interface{}
		cfg.RequireObject("prefix", &prefix)
		ncc, err := databricks.NewMwsNetworkConnectivityConfig(ctx, "ncc", &databricks.MwsNetworkConnectivityConfigArgs{
			Name:   pulumi.Sprintf("ncc-for-%v", prefix),
			Region: pulumi.Any(region),
		})
		if err != nil {
			return err
		}
		_, err = databricks.NewMwsNccPrivateEndpointRule(ctx, "storage", &databricks.MwsNccPrivateEndpointRuleArgs{
			NetworkConnectivityConfigId: ncc.NetworkConnectivityConfigId,
			ResourceId:                  pulumi.String("/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Storage/storageAccounts/examplesa"),
			GroupId:                     pulumi.String("blob"),
		})
		if err != nil {
			return err
		}
		_, err = databricks.NewMwsNccPrivateEndpointRule(ctx, "slb", &databricks.MwsNccPrivateEndpointRuleArgs{
			NetworkConnectivityConfigId: ncc.NetworkConnectivityConfigId,
			ResourceId:                  pulumi.String("/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Network/privatelinkServices/example-private-link-service"),
			DomainNames: pulumi.StringArray{
				pulumi.String("my-example.exampledomain.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var region = config.RequireObject<dynamic>("region");
    var prefix = config.RequireObject<dynamic>("prefix");
    var ncc = new Databricks.MwsNetworkConnectivityConfig("ncc", new()
    {
        Name = $"ncc-for-{prefix}",
        Region = region,
    });

    var storage = new Databricks.MwsNccPrivateEndpointRule("storage", new()
    {
        NetworkConnectivityConfigId = ncc.NetworkConnectivityConfigId,
        ResourceId = "/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Storage/storageAccounts/examplesa",
        GroupId = "blob",
    });

    var slb = new Databricks.MwsNccPrivateEndpointRule("slb", new()
    {
        NetworkConnectivityConfigId = ncc.NetworkConnectivityConfigId,
        ResourceId = "/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Network/privatelinkServices/example-private-link-service",
        DomainNames = new[]
        {
            "my-example.exampledomain.com",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.MwsNetworkConnectivityConfig;
import com.pulumi.databricks.MwsNetworkConnectivityConfigArgs;
import com.pulumi.databricks.MwsNccPrivateEndpointRule;
import com.pulumi.databricks.MwsNccPrivateEndpointRuleArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var region = config.require("region");
        final var prefix = config.require("prefix");
        var ncc = new MwsNetworkConnectivityConfig("ncc", MwsNetworkConnectivityConfigArgs.builder()
            .name(String.format("ncc-for-%s", prefix))
            .region(region)
            .build());

        var storage = new MwsNccPrivateEndpointRule("storage", MwsNccPrivateEndpointRuleArgs.builder()
            .networkConnectivityConfigId(ncc.networkConnectivityConfigId())
            .resourceId("/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Storage/storageAccounts/examplesa")
            .groupId("blob")
            .build());

        var slb = new MwsNccPrivateEndpointRule("slb", MwsNccPrivateEndpointRuleArgs.builder()
            .networkConnectivityConfigId(ncc.networkConnectivityConfigId())
            .resourceId("/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Network/privatelinkServices/example-private-link-service")
            .domainNames("my-example.exampledomain.com")
            .build());

    }
}

    configuration:
  region:
    type: object
  prefix:
    type: object
resources:
  ncc:
    type: databricks:MwsNetworkConnectivityConfig
    properties:
      name: ncc-for-${prefix}
      region: ${region}
  storage:
    type: databricks:MwsNccPrivateEndpointRule
    properties:
      networkConnectivityConfigId: ${ncc.networkConnectivityConfigId}
      resourceId: /subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Storage/storageAccounts/examplesa
      groupId: blob
  slb:
    type: databricks:MwsNccPrivateEndpointRule
    properties:
      networkConnectivityConfigId: ${ncc.networkConnectivityConfigId}
      resourceId: /subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Network/privatelinkServices/example-private-link-service
      domainNames:
        - my-example.exampledomain.com

    pulumi {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

resource "databricks_mwsnetworkconnectivityconfig" "ncc" {
  name   ="ncc-for-${var.prefix}"
  region = var.region
}
resource "databricks_mwsnccprivateendpointrule" "storage" {
  network_connectivity_config_id = databricks_mwsnetworkconnectivityconfig.ncc.network_connectivity_config_id
  resource_id                    = "/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Storage/storageAccounts/examplesa"
  group_id                       = "blob"
}
resource "databricks_mwsnccprivateendpointrule" "slb" {
  network_connectivity_config_id = databricks_mwsnetworkconnectivityconfig.ncc.network_connectivity_config_id
  resource_id                    = "/subscriptions/653bb673-1234-abcd-a90b-d064d5d53ca4/resourcegroups/example-resource-group/providers/Microsoft.Network/privatelinkServices/example-private-link-service"
  domain_names                   = ["my-example.exampledomain.com"]
}
variable "region" {
}
variable "prefix" {
}

    Create a private endpoint rule to an AWS VPC endpoint and to an S3 bucket.

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const config = new pulumi.Config();
const region = config.requireObject<any>("region");
const prefix = config.requireObject<any>("prefix");
const ncc = new databricks.MwsNetworkConnectivityConfig("ncc", {
    name: `ncc-for-${prefix}`,
    region: region,
});
const storage = new databricks.MwsNccPrivateEndpointRule("storage", {
    networkConnectivityConfigId: ncc.networkConnectivityConfigId,
    endpointService: "com.amazonaws.us-east-1.s3",
    resourceNames: ["bucket"],
});
const vpce = new databricks.MwsNccPrivateEndpointRule("vpce", {
    networkConnectivityConfigId: ncc.networkConnectivityConfigId,
    endpointService: "com.amazonaws.vpce.us-west-2.vpce-svc-xyz",
    domainNames: ["subdomain.internal.net"],
});

    import pulumi
import pulumi_databricks as databricks

config = pulumi.Config()
region = config.require_object("region")
prefix = config.require_object("prefix")
ncc = databricks.MwsNetworkConnectivityConfig("ncc",
    name=f"ncc-for-{prefix}",
    region=region)
storage = databricks.MwsNccPrivateEndpointRule("storage",
    network_connectivity_config_id=ncc.network_connectivity_config_id,
    endpoint_service="com.amazonaws.us-east-1.s3",
    resource_names=["bucket"])
vpce = databricks.MwsNccPrivateEndpointRule("vpce",
    network_connectivity_config_id=ncc.network_connectivity_config_id,
    endpoint_service="com.amazonaws.vpce.us-west-2.vpce-svc-xyz",
    domain_names=["subdomain.internal.net"])

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		var region interface{}
		cfg.RequireObject("region", &region)
		var prefix interface{}
		cfg.RequireObject("prefix", &prefix)
		ncc, err := databricks.NewMwsNetworkConnectivityConfig(ctx, "ncc", &databricks.MwsNetworkConnectivityConfigArgs{
			Name:   pulumi.Sprintf("ncc-for-%v", prefix),
			Region: pulumi.Any(region),
		})
		if err != nil {
			return err
		}
		_, err = databricks.NewMwsNccPrivateEndpointRule(ctx, "storage", &databricks.MwsNccPrivateEndpointRuleArgs{
			NetworkConnectivityConfigId: ncc.NetworkConnectivityConfigId,
			EndpointService:             pulumi.String("com.amazonaws.us-east-1.s3"),
			ResourceNames: pulumi.StringArray{
				pulumi.String("bucket"),
			},
		})
		if err != nil {
			return err
		}
		_, err = databricks.NewMwsNccPrivateEndpointRule(ctx, "vpce", &databricks.MwsNccPrivateEndpointRuleArgs{
			NetworkConnectivityConfigId: ncc.NetworkConnectivityConfigId,
			EndpointService:             pulumi.String("com.amazonaws.vpce.us-west-2.vpce-svc-xyz"),
			DomainNames: pulumi.StringArray{
				pulumi.String("subdomain.internal.net"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var region = config.RequireObject<dynamic>("region");
    var prefix = config.RequireObject<dynamic>("prefix");
    var ncc = new Databricks.MwsNetworkConnectivityConfig("ncc", new()
    {
        Name = $"ncc-for-{prefix}",
        Region = region,
    });

    var storage = new Databricks.MwsNccPrivateEndpointRule("storage", new()
    {
        NetworkConnectivityConfigId = ncc.NetworkConnectivityConfigId,
        EndpointService = "com.amazonaws.us-east-1.s3",
        ResourceNames = new[]
        {
            "bucket",
        },
    });

    var vpce = new Databricks.MwsNccPrivateEndpointRule("vpce", new()
    {
        NetworkConnectivityConfigId = ncc.NetworkConnectivityConfigId,
        EndpointService = "com.amazonaws.vpce.us-west-2.vpce-svc-xyz",
        DomainNames = new[]
        {
            "subdomain.internal.net",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.MwsNetworkConnectivityConfig;
import com.pulumi.databricks.MwsNetworkConnectivityConfigArgs;
import com.pulumi.databricks.MwsNccPrivateEndpointRule;
import com.pulumi.databricks.MwsNccPrivateEndpointRuleArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var region = config.require("region");
        final var prefix = config.require("prefix");
        var ncc = new MwsNetworkConnectivityConfig("ncc", MwsNetworkConnectivityConfigArgs.builder()
            .name(String.format("ncc-for-%s", prefix))
            .region(region)
            .build());

        var storage = new MwsNccPrivateEndpointRule("storage", MwsNccPrivateEndpointRuleArgs.builder()
            .networkConnectivityConfigId(ncc.networkConnectivityConfigId())
            .endpointService("com.amazonaws.us-east-1.s3")
            .resourceNames("bucket")
            .build());

        var vpce = new MwsNccPrivateEndpointRule("vpce", MwsNccPrivateEndpointRuleArgs.builder()
            .networkConnectivityConfigId(ncc.networkConnectivityConfigId())
            .endpointService("com.amazonaws.vpce.us-west-2.vpce-svc-xyz")
            .domainNames("subdomain.internal.net")
            .build());

    }
}

    configuration:
  region:
    type: object
  prefix:
    type: object
resources:
  ncc:
    type: databricks:MwsNetworkConnectivityConfig
    properties:
      name: ncc-for-${prefix}
      region: ${region}
  storage:
    type: databricks:MwsNccPrivateEndpointRule
    properties:
      networkConnectivityConfigId: ${ncc.networkConnectivityConfigId}
      endpointService: com.amazonaws.us-east-1.s3
      resourceNames:
        - bucket
  vpce:
    type: databricks:MwsNccPrivateEndpointRule
    properties:
      networkConnectivityConfigId: ${ncc.networkConnectivityConfigId}
      endpointService: com.amazonaws.vpce.us-west-2.vpce-svc-xyz
      domainNames:
        - subdomain.internal.net

    pulumi {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

resource "databricks_mwsnetworkconnectivityconfig" "ncc" {
  name   ="ncc-for-${var.prefix}"
  region = var.region
}
resource "databricks_mwsnccprivateendpointrule" "storage" {
  network_connectivity_config_id = databricks_mwsnetworkconnectivityconfig.ncc.network_connectivity_config_id
  endpoint_service               = "com.amazonaws.us-east-1.s3"
  resource_names                 = ["bucket"]
}
resource "databricks_mwsnccprivateendpointrule" "vpce" {
  network_connectivity_config_id = databricks_mwsnetworkconnectivityconfig.ncc.network_connectivity_config_id
  endpoint_service               = "com.amazonaws.vpce.us-west-2.vpce-svc-xyz"
  domain_names                   = ["subdomain.internal.net"]
}
variable "region" {
}
variable "prefix" {
}

    The following resources are used in the context:

    • databricks.MwsNetworkConnectivityConfig to create Network Connectivity Config objects.
    • databricks.MwsNccBinding to attach an NCC to a workspace.

    Create MwsNccPrivateEndpointRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new MwsNccPrivateEndpointRule(name: string, args: MwsNccPrivateEndpointRuleArgs, opts?: CustomResourceOptions);
    @overload
def MwsNccPrivateEndpointRule(resource_name: str,
                              args: MwsNccPrivateEndpointRuleArgs,
                              opts: Optional[ResourceOptions] = None)

@overload
def MwsNccPrivateEndpointRule(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              network_connectivity_config_id: Optional[str] = None,
                              domain_names: Optional[Sequence[str]] = None,
                              enabled: Optional[bool] = None,
                              endpoint_service: Optional[str] = None,
                              gcp_endpoint: Optional[MwsNccPrivateEndpointRuleGcpEndpointArgs] = None,
                              group_id: Optional[str] = None,
                              resource_id: Optional[str] = None,
                              resource_names: Optional[Sequence[str]] = None)
    func NewMwsNccPrivateEndpointRule(ctx *Context, name string, args MwsNccPrivateEndpointRuleArgs, opts ...ResourceOption) (*MwsNccPrivateEndpointRule, error)
    public MwsNccPrivateEndpointRule(string name, MwsNccPrivateEndpointRuleArgs args, CustomResourceOptions? opts = null)
    public MwsNccPrivateEndpointRule(String name, MwsNccPrivateEndpointRuleArgs args)
public MwsNccPrivateEndpointRule(String name, MwsNccPrivateEndpointRuleArgs args, CustomResourceOptions options)

    type: databricks:MwsNccPrivateEndpointRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "databricks_mws_ncc_private_endpoint_rule" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args MwsNccPrivateEndpointRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args MwsNccPrivateEndpointRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args MwsNccPrivateEndpointRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args MwsNccPrivateEndpointRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args MwsNccPrivateEndpointRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var mwsNccPrivateEndpointRuleResource = new Databricks.MwsNccPrivateEndpointRule("mwsNccPrivateEndpointRuleResource", new()
{
    NetworkConnectivityConfigId = "string",
    DomainNames = new[]
    {
        "string",
    },
    Enabled = false,
    EndpointService = "string",
    GcpEndpoint = new Databricks.Inputs.MwsNccPrivateEndpointRuleGcpEndpointArgs
    {
        AllVpcScServices = false,
        GoogleApiEndpoints = new Databricks.Inputs.MwsNccPrivateEndpointRuleGcpEndpointGoogleApiEndpointsArgs
        {
            Endpoints = new[]
            {
                "string",
            },
        },
        PscEndpointUri = "string",
        ServiceAttachment = "string",
    },
    GroupId = "string",
    ResourceId = "string",
    ResourceNames = new[]
    {
        "string",
    },
});

    example, err := databricks.NewMwsNccPrivateEndpointRule(ctx, "mwsNccPrivateEndpointRuleResource", &databricks.MwsNccPrivateEndpointRuleArgs{
	NetworkConnectivityConfigId: pulumi.String("string"),
	DomainNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	Enabled:         pulumi.Bool(false),
	EndpointService: pulumi.String("string"),
	GcpEndpoint: &databricks.MwsNccPrivateEndpointRuleGcpEndpointArgs{
		AllVpcScServices: pulumi.Bool(false),
		GoogleApiEndpoints: &databricks.MwsNccPrivateEndpointRuleGcpEndpointGoogleApiEndpointsArgs{
			Endpoints: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		PscEndpointUri:    pulumi.String("string"),
		ServiceAttachment: pulumi.String("string"),
	},
	GroupId:    pulumi.String("string"),
	ResourceId: pulumi.String("string"),
	ResourceNames: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    resource "databricks_mws_ncc_private_endpoint_rule" "mwsNccPrivateEndpointRuleResource" {
  lifecycle {
    create_before_destroy = true
  }
  network_connectivity_config_id = "string"
  domain_names                   = ["string"]
  enabled                        = false
  endpoint_service               = "string"
  gcp_endpoint = {
    all_vpc_sc_services = false
    google_api_endpoints = {
      endpoints = ["string"]
    }
    psc_endpoint_uri   = "string"
    service_attachment = "string"
  }
  group_id       = "string"
  resource_id    = "string"
  resource_names = ["string"]
}

    var mwsNccPrivateEndpointRuleResource = new MwsNccPrivateEndpointRule("mwsNccPrivateEndpointRuleResource", MwsNccPrivateEndpointRuleArgs.builder()
    .networkConnectivityConfigId("string")
    .domainNames("string")
    .enabled(false)
    .endpointService("string")
    .gcpEndpoint(MwsNccPrivateEndpointRuleGcpEndpointArgs.builder()
        .allVpcScServices(false)
        .googleApiEndpoints(MwsNccPrivateEndpointRuleGcpEndpointGoogleApiEndpointsArgs.builder()
            .endpoints("string")
            .build())
        .pscEndpointUri("string")
        .serviceAttachment("string")
        .build())
    .groupId("string")
    .resourceId("string")
    .resourceNames("string")
    .build());

    mws_ncc_private_endpoint_rule_resource = databricks.MwsNccPrivateEndpointRule("mwsNccPrivateEndpointRuleResource",
    network_connectivity_config_id="string",
    domain_names=["string"],
    enabled=False,
    endpoint_service="string",
    gcp_endpoint={
        "all_vpc_sc_services": False,
        "google_api_endpoints": {
            "endpoints": ["string"],
        },
        "psc_endpoint_uri": "string",
        "service_attachment": "string",
    },
    group_id="string",
    resource_id="string",
    resource_names=["string"])

    const mwsNccPrivateEndpointRuleResource = new databricks.MwsNccPrivateEndpointRule("mwsNccPrivateEndpointRuleResource", {
    networkConnectivityConfigId: "string",
    domainNames: ["string"],
    enabled: false,
    endpointService: "string",
    gcpEndpoint: {
        allVpcScServices: false,
        googleApiEndpoints: {
            endpoints: ["string"],
        },
        pscEndpointUri: "string",
        serviceAttachment: "string",
    },
    groupId: "string",
    resourceId: "string",
    resourceNames: ["string"],
});

    type: databricks:MwsNccPrivateEndpointRule
properties:
    domainNames:
        - string
    enabled: false
    endpointService: string
    gcpEndpoint:
        allVpcScServices: false
        googleApiEndpoints:
            endpoints:
                - string
        pscEndpointUri: string
        serviceAttachment: string
    groupId: string
    networkConnectivityConfigId: string
    resourceId: string
    resourceNames:
        - string

    MwsNccPrivateEndpointRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The MwsNccPrivateEndpointRule resource accepts the following input properties:

    NetworkConnectivityConfigId string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    DomainNames List<string>
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    Enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    EndpointService string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    GcpEndpoint MwsNccPrivateEndpointRuleGcpEndpoint
    GroupId string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    ResourceId string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    ResourceNames List<string>
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    NetworkConnectivityConfigId string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    DomainNames []string
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    Enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    EndpointService string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    GcpEndpoint MwsNccPrivateEndpointRuleGcpEndpointArgs
    GroupId string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    ResourceId string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    ResourceNames []string
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    network_connectivity_config_id string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    domain_names list(string)
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpoint_service string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    gcp_endpoint object
    group_id string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    resource_id string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resource_names list(string)
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    networkConnectivityConfigId String
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    domainNames List<String>
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled Boolean
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpointService String
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    gcpEndpoint MwsNccPrivateEndpointRuleGcpEndpoint
    groupId String
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    resourceId String
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resourceNames List<String>
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    networkConnectivityConfigId string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    domainNames string[]
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled boolean
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpointService string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    gcpEndpoint MwsNccPrivateEndpointRuleGcpEndpoint
    groupId string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    resourceId string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resourceNames string[]
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    network_connectivity_config_id str
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    domain_names Sequence[str]
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpoint_service str
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    gcp_endpoint MwsNccPrivateEndpointRuleGcpEndpointArgs
    group_id str
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    resource_id str
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resource_names Sequence[str]
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    networkConnectivityConfigId String
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    domainNames List<String>
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled Boolean
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpointService String
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    gcpEndpoint Property Map
    groupId String
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    resourceId String
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resourceNames List<String>
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the MwsNccPrivateEndpointRule resource produces the following output properties:

    AccountId string
    The Databricks account ID that owns this private endpoint rule.
    ConnectionState string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    CreationTime int
    Time in epoch milliseconds when this object was created.
    Deactivated bool
    Whether this private endpoint is deactivated.
    DeactivatedAt int
    Time in epoch milliseconds when this object was deactivated.
    EndpointName string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    ErrorMessage string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    Id string
    The provider-assigned unique ID for this managed resource.
    RuleId string
    the ID of a private endpoint rule.
    UpdatedTime int
    Time in epoch milliseconds when this object was updated.
    VpcEndpointId string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    AccountId string
    The Databricks account ID that owns this private endpoint rule.
    ConnectionState string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    CreationTime int
    Time in epoch milliseconds when this object was created.
    Deactivated bool
    Whether this private endpoint is deactivated.
    DeactivatedAt int
    Time in epoch milliseconds when this object was deactivated.
    EndpointName string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    ErrorMessage string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    Id string
    The provider-assigned unique ID for this managed resource.
    RuleId string
    the ID of a private endpoint rule.
    UpdatedTime int
    Time in epoch milliseconds when this object was updated.
    VpcEndpointId string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    account_id string
    The Databricks account ID that owns this private endpoint rule.
    connection_state string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creation_time number
    Time in epoch milliseconds when this object was created.
    deactivated bool
    Whether this private endpoint is deactivated.
    deactivated_at number
    Time in epoch milliseconds when this object was deactivated.
    endpoint_name string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    error_message string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    id string
    The provider-assigned unique ID for this managed resource.
    rule_id string
    the ID of a private endpoint rule.
    updated_time number
    Time in epoch milliseconds when this object was updated.
    vpc_endpoint_id string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    accountId String
    The Databricks account ID that owns this private endpoint rule.
    connectionState String
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creationTime Integer
    Time in epoch milliseconds when this object was created.
    deactivated Boolean
    Whether this private endpoint is deactivated.
    deactivatedAt Integer
    Time in epoch milliseconds when this object was deactivated.
    endpointName String
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    errorMessage String
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    id String
    The provider-assigned unique ID for this managed resource.
    ruleId String
    the ID of a private endpoint rule.
    updatedTime Integer
    Time in epoch milliseconds when this object was updated.
    vpcEndpointId String
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    accountId string
    The Databricks account ID that owns this private endpoint rule.
    connectionState string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creationTime number
    Time in epoch milliseconds when this object was created.
    deactivated boolean
    Whether this private endpoint is deactivated.
    deactivatedAt number
    Time in epoch milliseconds when this object was deactivated.
    endpointName string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    errorMessage string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    id string
    The provider-assigned unique ID for this managed resource.
    ruleId string
    the ID of a private endpoint rule.
    updatedTime number
    Time in epoch milliseconds when this object was updated.
    vpcEndpointId string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    account_id str
    The Databricks account ID that owns this private endpoint rule.
    connection_state str
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creation_time int
    Time in epoch milliseconds when this object was created.
    deactivated bool
    Whether this private endpoint is deactivated.
    deactivated_at int
    Time in epoch milliseconds when this object was deactivated.
    endpoint_name str
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    error_message str
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    id str
    The provider-assigned unique ID for this managed resource.
    rule_id str
    the ID of a private endpoint rule.
    updated_time int
    Time in epoch milliseconds when this object was updated.
    vpc_endpoint_id str
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    accountId String
    The Databricks account ID that owns this private endpoint rule.
    connectionState String
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creationTime Number
    Time in epoch milliseconds when this object was created.
    deactivated Boolean
    Whether this private endpoint is deactivated.
    deactivatedAt Number
    Time in epoch milliseconds when this object was deactivated.
    endpointName String
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    errorMessage String
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    id String
    The provider-assigned unique ID for this managed resource.
    ruleId String
    the ID of a private endpoint rule.
    updatedTime Number
    Time in epoch milliseconds when this object was updated.
    vpcEndpointId String
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.

    Look up Existing MwsNccPrivateEndpointRule Resource

    Get an existing MwsNccPrivateEndpointRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: MwsNccPrivateEndpointRuleState, opts?: CustomResourceOptions): MwsNccPrivateEndpointRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        connection_state: Optional[str] = None,
        creation_time: Optional[int] = None,
        deactivated: Optional[bool] = None,
        deactivated_at: Optional[int] = None,
        domain_names: Optional[Sequence[str]] = None,
        enabled: Optional[bool] = None,
        endpoint_name: Optional[str] = None,
        endpoint_service: Optional[str] = None,
        error_message: Optional[str] = None,
        gcp_endpoint: Optional[MwsNccPrivateEndpointRuleGcpEndpointArgs] = None,
        group_id: Optional[str] = None,
        network_connectivity_config_id: Optional[str] = None,
        resource_id: Optional[str] = None,
        resource_names: Optional[Sequence[str]] = None,
        rule_id: Optional[str] = None,
        updated_time: Optional[int] = None,
        vpc_endpoint_id: Optional[str] = None) -> MwsNccPrivateEndpointRule
    func GetMwsNccPrivateEndpointRule(ctx *Context, name string, id IDInput, state *MwsNccPrivateEndpointRuleState, opts ...ResourceOption) (*MwsNccPrivateEndpointRule, error)
    public static MwsNccPrivateEndpointRule Get(string name, Input<string> id, MwsNccPrivateEndpointRuleState? state, CustomResourceOptions? opts = null)
    public static MwsNccPrivateEndpointRule get(String name, Output<String> id, MwsNccPrivateEndpointRuleState state, CustomResourceOptions options)
    resources:  _:    type: databricks:MwsNccPrivateEndpointRule    get:      id: ${id}
    import {
  to = databricks_mws_ncc_private_endpoint_rule.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The Databricks account ID that owns this private endpoint rule.
    ConnectionState string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    CreationTime int
    Time in epoch milliseconds when this object was created.
    Deactivated bool
    Whether this private endpoint is deactivated.
    DeactivatedAt int
    Time in epoch milliseconds when this object was deactivated.
    DomainNames List<string>
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    Enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    EndpointName string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    EndpointService string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    ErrorMessage string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    GcpEndpoint MwsNccPrivateEndpointRuleGcpEndpoint
    GroupId string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    NetworkConnectivityConfigId string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    ResourceId string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    ResourceNames List<string>
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    RuleId string
    the ID of a private endpoint rule.
    UpdatedTime int
    Time in epoch milliseconds when this object was updated.
    VpcEndpointId string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    AccountId string
    The Databricks account ID that owns this private endpoint rule.
    ConnectionState string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    CreationTime int
    Time in epoch milliseconds when this object was created.
    Deactivated bool
    Whether this private endpoint is deactivated.
    DeactivatedAt int
    Time in epoch milliseconds when this object was deactivated.
    DomainNames []string
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    Enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    EndpointName string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    EndpointService string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    ErrorMessage string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    GcpEndpoint MwsNccPrivateEndpointRuleGcpEndpointArgs
    GroupId string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    NetworkConnectivityConfigId string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    ResourceId string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    ResourceNames []string
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    RuleId string
    the ID of a private endpoint rule.
    UpdatedTime int
    Time in epoch milliseconds when this object was updated.
    VpcEndpointId string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    account_id string
    The Databricks account ID that owns this private endpoint rule.
    connection_state string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creation_time number
    Time in epoch milliseconds when this object was created.
    deactivated bool
    Whether this private endpoint is deactivated.
    deactivated_at number
    Time in epoch milliseconds when this object was deactivated.
    domain_names list(string)
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpoint_name string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    endpoint_service string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    error_message string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    gcp_endpoint object
    group_id string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    network_connectivity_config_id string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    resource_id string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resource_names list(string)
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    rule_id string
    the ID of a private endpoint rule.
    updated_time number
    Time in epoch milliseconds when this object was updated.
    vpc_endpoint_id string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    accountId String
    The Databricks account ID that owns this private endpoint rule.
    connectionState String
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creationTime Integer
    Time in epoch milliseconds when this object was created.
    deactivated Boolean
    Whether this private endpoint is deactivated.
    deactivatedAt Integer
    Time in epoch milliseconds when this object was deactivated.
    domainNames List<String>
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled Boolean
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpointName String
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    endpointService String
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    errorMessage String
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    gcpEndpoint MwsNccPrivateEndpointRuleGcpEndpoint
    groupId String
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    networkConnectivityConfigId String
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    resourceId String
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resourceNames List<String>
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    ruleId String
    the ID of a private endpoint rule.
    updatedTime Integer
    Time in epoch milliseconds when this object was updated.
    vpcEndpointId String
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    accountId string
    The Databricks account ID that owns this private endpoint rule.
    connectionState string
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creationTime number
    Time in epoch milliseconds when this object was created.
    deactivated boolean
    Whether this private endpoint is deactivated.
    deactivatedAt number
    Time in epoch milliseconds when this object was deactivated.
    domainNames string[]
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled boolean
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpointName string
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    endpointService string
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    errorMessage string
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    gcpEndpoint MwsNccPrivateEndpointRuleGcpEndpoint
    groupId string
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    networkConnectivityConfigId string
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    resourceId string
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resourceNames string[]
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    ruleId string
    the ID of a private endpoint rule.
    updatedTime number
    Time in epoch milliseconds when this object was updated.
    vpcEndpointId string
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    account_id str
    The Databricks account ID that owns this private endpoint rule.
    connection_state str
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creation_time int
    Time in epoch milliseconds when this object was created.
    deactivated bool
    Whether this private endpoint is deactivated.
    deactivated_at int
    Time in epoch milliseconds when this object was deactivated.
    domain_names Sequence[str]
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled bool
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpoint_name str
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    endpoint_service str
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    error_message str
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    gcp_endpoint MwsNccPrivateEndpointRuleGcpEndpointArgs
    group_id str
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    network_connectivity_config_id str
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    resource_id str
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resource_names Sequence[str]
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    rule_id str
    the ID of a private endpoint rule.
    updated_time int
    Time in epoch milliseconds when this object was updated.
    vpc_endpoint_id str
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.
    accountId String
    The Databricks account ID that owns this private endpoint rule.
    connectionState String
    The current status of this private endpoint. The private endpoint rules are effective only if the connection state is ESTABLISHED. Remember that you must approve new endpoints on your resources in the cloud console before they take effect. The possible values are:

    • PENDING: The endpoint has been created and pending approval.
    • ESTABLISHED: The endpoint has been approved and is ready to be used in your serverless compute resources.
    • REJECTED: Connection was rejected by the private link resource owner.
    • DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
    • EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
    • CREATING: The endpoint creation is in progress. Once successfully created, the state transitions to PENDING.
    • CREATE_FAILED: The endpoint creation failed; see errorMessage for details.
    creationTime Number
    Time in epoch milliseconds when this object was created.
    deactivated Boolean
    Whether this private endpoint is deactivated.
    deactivatedAt Number
    Time in epoch milliseconds when this object was deactivated.
    domainNames List<String>
    • On Azure: List of domain names of target private link service. Only used by private endpoints to customer-managed private endpoint services. Conflicts with groupId.
    • On AWS: List of target resource FQDNs accessible via the VPC endpoint service. Only used by private endpoints towards a VPC endpoint service behind a customer-managed VPC endpoint service. Conflicts with resourceNames.
    enabled Boolean
    Activation status. Only used by private endpoints towards an AWS S3 service. Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources. Can only be updated after a private endpoint rule towards an AWS S3 service is successfully created.
    endpointName String
    The name of the Azure private endpoint resource, e.g. "databricks-088781b3-77fa-4132-b429-1af0d91bc593-pe-3cb31234"
    endpointService String
    Example com.amazonaws.vpce.us-east-1.vpce-svc-123abcc1298abc123. The full target AWS endpoint service name that connects to the destination resources of the private endpoint. Change forces creation of a new resource.
    errorMessage String
    Error message describing why the rule is in a CREATE_FAILED or otherwise failed state, if any.
    gcpEndpoint Property Map
    groupId String
    Not used by customer-managed private endpoint services. The sub-resource type (group ID) of the target resource. Must be one of supported resource types (i.e., blob, dfs, sqlServer , etc. Consult the Azure documentation for full list of supported resources). Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs. Change forces creation of a new resource. Conflicts with domainNames.
    networkConnectivityConfigId String
    Canonical unique identifier of Network Connectivity Config in Databricks Account. Change forces creation of a new resource.
    resourceId String
    The Azure resource ID of the target resource. Change forces creation of a new resource.
    resourceNames List<String>
    Only used by private endpoints towards AWS S3 service. List of globally unique S3 bucket names that will be accessed via the VPC endpoint. The bucket names must be in the same region as the NCC/endpoint service. Conflict with domainNames.
    ruleId String
    the ID of a private endpoint rule.
    updatedTime Number
    Time in epoch milliseconds when this object was updated.
    vpcEndpointId String
    The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by Databricks.

    Supporting Types

    MwsNccPrivateEndpointRuleGcpEndpoint, MwsNccPrivateEndpointRuleGcpEndpointArgs

    MwsNccPrivateEndpointRuleGcpEndpointGoogleApiEndpoints, MwsNccPrivateEndpointRuleGcpEndpointGoogleApiEndpointsArgs

    Endpoints List<string>
    Endpoints []string
    endpoints list(string)
    endpoints List<String>
    endpoints string[]
    endpoints Sequence[str]
    endpoints List<String>

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo databricks logo
    Viewing docs for Databricks v1.109.0
    published on Tuesday, Sep 8, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-databricks

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial