A Generative AI Engineer is ready to deploy an LLM application written using Foundation Model APIs. They want to follow security best practices for production scenarios. Which authentication method…

Question

Options

• AUse OAuth machine-to-machine authentication
• BUse an access token belonging to service principals
• CUse an access token belonging to any workspace user
• DUse a frequently rotated access token belonging to either a workspace user or a service principal

• A
  75% (12)
• B
  6% (1)
• C
  6% (1)
• D
  13% (2)

Explanation

OAuth machine-to-machine (M2M) authentication is the recommended best practice for production service-to-service calls in Databricks. It uses short-lived, automatically rotated tokens issued via the OAuth 2.0 client-credentials flow, so no long-lived secret needs to be stored or managed. Service principal access tokens (B) are valid for automation but are static secrets requiring manual rotation, which is operationally riskier. Personal access tokens belonging to workspace users (C) tie access to an individual's identity and violate least-privilege for production systems. Option D (frequently rotated tokens for either entity) acknowledges rotation but manual rotation is error-prone and inferior to the automatic rotation inherent in OAuth M2M.

No community discussion yet for this question.