...

• AWS Secrets Manager needs to be configured with the following secret key value pairs. Suggested name for the secret is ‘bplm-credentials’:

  • storage-access-key - Optional, AWS Access Key used for accessing Amazon DynamoDB and Amazon SQS by the telemetry agent

  • storage-secret-key - Optional, AWS Secret Key DynamoDB secret key

    • DynamoDB is the telemetry data store, access from the LHM services or telemetry agents in Databricks workspaces can be enabled either with the access key/secret key pair or via IAM Roles/Credentials and Instance Profiles, in which case the key pair above becomes optional

  • service-account-username - Databricks service account username

  • service-account-password - Databricks service account password

    • required for access to the Billable Usage Logs of Databricks Accounts API

  • mssql-password - SQL Login password for the SQL Database

  • application-encryption-secret - encryption key for storing PATs (Personal Access Tokens) and the Databricks Accounts credentials (billable usage logs) in the LHM SQL database

  • msft-provider-auth-secret - Optional, Client secret value from azure app registration
    

• Note:

  • the storage-access-key and storage-secret-key are optional. They become required only if you choose to NOT use the IAM Role for accessing DynamoDB and SQS.

  • the msft-provider-auth-secret is optional, needed in case you want LHM configured with Azure Active Directory. If you choose to use Databricks authentication only this is not needed.

Step 3) Installation procedure

...