mlops-aws-infrastructure
databricks/mlops-aws-infrastructure/databricks
This module sets up multi-workspace model registry between a Databricks AWS development (dev) workspace, staging workspace, and production (prod) workspace, allowing READ access from dev/staging workspaces to staging & prod model registries.
MLOps AWS Infrastructure Module This module sets up multi-workspace model registry between a development (dev) workspace, a staging workspace, and a production (prod) workspace, allowing READ access from dev/staging workspaces to staging & prod model registries. The module performs this setup by creating service principals in the staging and prod workspaces with READ-only access to their respective model registries. It will also create secret scopes and store the necessary secrets in the dev and staging workspaces, and only give READ access to this secret scope to the "users" group and the generated service principals group. The output of this module will be the secret scope names and prefixes since these values are needed to be able to access the remote model registry. _NOTE:_ 1. This mod
| Name | Type | Description | Default |
|---|---|---|---|
| staging_workspace_id | string | Workspace ID of the staging workspace (can be often found in the URL) used for r | |
| prod_workspace_id | string | Workspace ID of the prod workspace (can be often found in the URL) used for remo | |
| additional_token_usage_groups | list(string) | List of groups that should have token usage permissions in the staging and prod | [] |
staging_secret_scope_name_for_prod — The name of the secret scope created in the staging workspace that is used for remote model registrydev_secret_scope_prefix_for_staging — The prefix used in the dev workspace secret scope for remote model registry access to the staging wodev_secret_scope_prefix_for_prod — The prefix used in the dev workspace secret scope for remote model registry access to the prod worksstaging_secret_scope_prefix_for_prod — The prefix used in the staging workspace secret scope for remote model registry access to the prod wservice_principal_group_name — The name of the service principal group created in the staging and prod workspace.dev_secret_scope_name_for_staging — The name of the secret scope created in the dev workspace that is used for remote model registry accdev_secret_scope_name_for_prod — The name of the secret scope created in the dev workspace that is used for remote model registry acc