Skip to main content
Last updated on

Ingest data from 1Password

Beta

This feature is in Beta. To use it, a workspace admin must turn on Lakeflow Connect for 1Password Event Logs from the Previews page. See Manage Databricks previews.

Create a managed 1Password Event Logs ingestion pipeline in Lakeflow Connect to ingest Events API data into Databricks.

Requirements​

  • To create an ingestion pipeline, first meet the following requirements:

    • Your workspace must be enabled for Unity Catalog.

    • Serverless compute must be enabled for your workspace. See Serverless compute requirements.

    • To create a new connection, you must have CREATE CONNECTION privileges on the metastore. See Manage privileges in Unity Catalog.

      If the connector supports UI-based pipeline authoring, an admin can create the connection and the pipeline at the same time by completing the steps on this page. However, if the users who create pipelines use API-based pipeline authoring or are non-admin users, an admin must first create the connection in Catalog Explorer. See Connect to managed ingestion sources.

    • To use an existing connection, you must have USE CONNECTION privileges or ALL PRIVILEGES on the connection object.

    • You must have USE CATALOG privileges on the target catalog.

    • You must have USE SCHEMA and CREATE TABLE privileges on an existing schema or CREATE SCHEMA privileges on the target catalog.

  • To ingest from 1Password, first configure authentication from Databricks and create a connection. See Configure authentication to 1Password and Create a 1Password Event Logs connection.

Create an ingestion pipeline​

For the list of supported source tables, see Supported source tables.

Use Declarative Automation Bundles to manage 1Password Event Logs pipelines as code. Bundles can contain YAML definitions of jobs and tasks, are managed using the Databricks CLI, and can be shared and run in different target workspaces (such as development, staging, and production). For more information, see What are Declarative Automation Bundles?.

  1. Create a bundle using the Databricks CLI:

    Bash
    databricks bundle init

  2. Add two new resource files to the bundle:

    • A pipeline definition file (for example, resources/one_password_event_logs_pipeline.yml). See pipeline.ingestion_definition and Examples.
    • A job definition file that controls the frequency of data ingestion (for example, resources/one_password_event_logs_job.yml).

  3. Deploy the pipeline using the Databricks CLI:

    Bash
    databricks bundle deploy

Examples​

The 1Password Event Logs connector makes available 3 source tables in the default source schema. Ingest selected tables or the entire schema.

Ingest specific tables​

Use this option to customize destination naming for each table.

The following pipeline definition file ingests the three 1Password Event Logs tables:

YAML
resources:
  pipelines:
    one_password_event_logs_pipeline:
      name: one_password_event_logs_pipeline
      catalog: 'main'
      target: 'one_password_event_logs_data'
      ingestion_definition:
        connection_name: one_password_event_logs_connection
        objects:
          - table:
              source_schema: 'default'
              source_table: 'audit_events'
              destination_catalog: 'main'
              destination_schema: 'one_password_event_logs_data'
              destination_table: 'audit_events'
          - table:
              source_schema: 'default'
              source_table: 'item_usages'
              destination_catalog: 'main'
              destination_schema: 'one_password_event_logs_data'
              destination_table: 'item_usages'
          - table:
              source_schema: 'default'
              source_table: 'sign_in_attempts'
              destination_catalog: 'main'
              destination_schema: 'one_password_event_logs_data'
              destination_table: 'sign_in_attempts'

Ingest the entire schema​

Use this option to ingest all 1Password Event Logs source tables into a single destination schema with one declaration.

The following pipeline definition file ingests all supported 1Password Event Logs tables into a destination schema:

YAML
resources:
  pipelines:
    one_password_event_logs_pipeline:
      name: one_password_event_logs_pipeline
      catalog: 'main'
      target: 'one_password_event_logs_data'
      ingestion_definition:
        connection_name: one_password_event_logs_connection
        objects:
          - schema:
              source_schema: 'default'
              destination_catalog: 'main'
              destination_schema: 'one_password_event_logs_data'

Declarative Automation Bundles job definition file​

The following is an example job definition file for use with Declarative Automation Bundles. The job runs daily.

YAML
resources:
  jobs:
    one_password_event_logs_job:
      name: one_password_event_logs_job
      schedule:
        quartz_cron_expression: '0 0 0 * * ?'
        timezone_id: 'UTC'
      tasks:
        - task_key: one_password_event_logs_ingestion
          pipeline_task:
            pipeline_id: ${resources.pipelines.one_password_event_logs_pipeline.id}

Common patterns​

For advanced pipeline configurations, see Common patterns for managed ingestion pipelines.

Next steps​

Start, schedule, and set alerts on your pipeline. See Common pipeline maintenance tasks.

Additional resources​

On this page