Platform teams managing Databricks at scale often struggle with inconsistent cluster policies, runaway costs, and security gaps from manual configuration. This tutorial shows how to use Pulumi with the @pulumi/databricks provider to provision a governed workspace baseline in TypeScript, covering cluster policies (interactive and job), a shared cluster with group permissions, secret scopes with ACLs, a workspace notebook, and a scheduled nightly ETL job. Credentials are managed via Pulumi ESC. The pattern supports multi-stack promotion workflows (dev → prod) so governance controls travel through the same review path as application code.
Table of contents
What you’ll buildThe Databricks management boundaryConfiguring credentials with Pulumi ESCDefining your data infrastructureValidationConclusion549 Impressions