Launch a compute resource with an instance profile

This article explains how to add an instance profile to a compute resource. For information about configuring SQL warehouses to use an instance profile, see Enable data access configuration.

Instance profiles allow users, groups, and service principals to access S3 data through compute resources. Workspace administrators configure instance profiles and assign access permissions. See Configure S3 access with instance profiles.

To create a compute resource that uses an instance profile:

1. Select or create a compute resource.

2. Select the instance profile from the Instance Profile dropdown list. This dropdown includes all the instance profiles available to the user.

3. Verify that you can access the S3 bucket using the following command:

   dbutils.fs.ls("s3a://<s3-bucket-name>/")
   

4. If the command succeeds, that compute resource can access the S3 bucket.

Warning

Once a compute resource launches with an instance profile, anyone who has attach permission to the compute resource can access the underlying resources controlled by this role. To limit unwanted access, you can use cluster ACLs to restrict attach permissions.