databricks unity catalog credentials fetching intended to be accessible externally? #2
Description
Someone pointed me to the duckdb-uc implementation delta-io/delta-rs#2066 (reply in thread), https://github.com/duckdb/uc_catalog/blob/4a2ba143eb8686becf69f759caa731742c2d7c81/src/uc_api.cpp#L120, so I started trying out the temporary table credentials api last week.
However seems to be disallowed to do this from a non-databricks environment. Can someone shed some light on this?
{'error_code': 'UNAUTHENTICATED',
'message': "Request to generate access credential for table '<redacted>' from outside of Databricks Unity Catalog enabled compute environment is denied for security. Please contact Databricks support for integrations with Unity Catalog.",
'details': [{'@type': 'type.googleapis.com/google.rpc.ErrorInfo',
'reason': 'UNITY_CATALOG_EXTERNAL_GENERATE_TABLE_CREDENTIALS_DENIED',
'domain': 'unity-catalog.databricks.com',
'metadata': {'tableId': '<redacted>'}},
{'@type': 'type.googleapis.com/google.rpc.RequestInfo',
'request_id': '<redacted>',
'serving_data': ''}]}