Manually create a workspace (new Databricks accounts)
Note
These instructions apply to accounts created after November 8, 2023. If your Databricks account was created before November 8, 2023, see Manually create a workspace (existing Databricks accounts).
This article describes how to manually create a workspace using the account console and custom AWS configurations. You can use this process if you want to create your own AWS resources or need to deploy a workspace in your own VPC. If you don’t need to create custom configurations for your deployment, Databricks recommends you create workspaces using the AWS Quick Start template.
You can also create workspaces using the Account API or Terraform.
Create a workspace with custom AWS configurations
Go to the account console and click the Workspaces icon.
Click Create Workspace, then Manual.
In the Workspace name field, enter a human-readable name for this workspace. It can contain spaces.
In the Region field, select an AWS region for your workspace’s network and clusters. Click Next.
In the Storage configuration field, select or create a storage configuration. If you create a new storage credential, follow the steps listed in the UI. For more on storage configurations, see Create an S3 bucket for workspace deployment.
Click Next.
In the Credential configuration field, select or create the credential configuration you’ll use for this workspace. To create a new credential configuration, follow the steps listed in the UI (also available in Create an IAM role for workspace deployment).
(Optional) Set up any Advanced configurations. See Advanced configurations.
Click Next.
Review your workspace details and click Create workspace.
Advanced configurations
The following configurations are optional when creating a new workspace.
Select a metastore
Confirm the metastore assignment for your workspace. If a Unity Catalog metastore already exists in the workspace region and the metastore is configured to be automatically assigned to new workspaces, a metastore will be selected for you.
Create workspace in your own VPC
To create the workspace in your own VPC, select or add a Network configuration. For instructions on configuring your own VPC, see Configure a customer-managed VPC.
Important
If you are using a customer-managed VPC, ensure your IAM role uses an access policy that supports customer-managed VPCs.
Enable PrivateLink
To enable PrivateLink, select or add a private access setting under Private Link.
To enable PrivateLink, you must also have created the correct regional VPC endpoints, registered them, and referenced them from your network configuration. For more guidance, see Enable private connectivity using AWS PrivateLink.
Add encryption keys
You can add encryption keys to your workspace deployment for managed services and workspace storage. The key for managed services encrypts notebooks, secrets, and Databricks SQL query data in the control plane. The key for workspace storage encrypts your workspace storage bucket (which contains DBFS root) and the EBS volumes of compute resources in the classic compute plane. For more guidance, see Configure customer-managed keys for encryption.
Enable enhanced security and compliance features
You can enable the compliance security profile, add compliance standards, and enable enhanced security monitoring during workspace creation. For more information, see Configure enhanced security and compliance settings.
View workspace status
After you create a workspace, you can view its status on the Workspaces page.
Provisioning: In progress. Wait a few minutes and refresh the page.
Running: Successful workspace deployment.
Failed: Failed deployment.
Banned: Contact your Databricks representative.
Cancelling: In the process of cancellation.
If the status for your new workspace is Failed, click the workspace to view a detailed error message. You can make updates to the configuration and try to deploy the workspace again. See Troubleshooting creating workspaces.
Log into a workspace
Go to the account console and click the Workspaces icon.
On the row with your workspace, click Open.
To log in as a workspace administrator, log in with your account owner or account administrator email address and password. If you configured single-sign on, click the Single Sign On button.
Next steps
Now that you have deployed a workspace, you can start building out your data strategy. Databricks recommends the following articles:
Add users, groups, and service principals to your workspace. Manage users, service principals, and groups.
Learn about data governance and managing data access in Databricks. See What is Unity Catalog?.
Connect your Databricks workspace to your external data sources. See Connect to data sources.
Ingest your data into the workspace. See Ingest data into a Databricks lakehouse.
Learn about managing access to workspace objects like notebooks, compute, dashboards, queries. See Access control lists.