Skip to main content

Configure authentication to Strac

Beta

This feature is in Beta. Workspace admins can control access to this feature from the Previews page. See Manage Databricks previews.

This page shows how to obtain the credentials that enable authentication to Strac from Databricks. The Strac connector uses a Strac API key to ingest data into Databricks. Use the authentication details that you retrieve from the steps on this page to create a Unity Catalog connection in Databricks.

Prerequisites

  • A Strac account with data-security audit events enabled.
  • Administrator access to request a Strac API key.

Request a Strac API key

Strac does not have a self-serve API key console. To request a key, contact Strac at hello@strac.io.

When you receive your key, note the following:

  • Strac API keys use the sk_ prefix. Test-mode keys use the sk_test_ prefix, and live-mode keys use the sk_live_ prefix. Use the key that matches the environment you want to ingest from.
  • Store the key securely. You enter this value as the API Key when you create a connection in Databricks.
important

All Strac API requests must be made over HTTPS. Plain HTTP requests fail.

Find your API host and stage

You must also have the base host and stage of your Strac API endpoint. You enter this value as the API Endpoint when you create a connection in Databricks.

  • Strac provides generic API hosts: api.live.tokenidvault.com for live mode and api.test.tokenidvault.com for test mode.
  • A dedicated API gateway host and stage front some tenants, for example abc123.execute-api.us-west-2.amazonaws.com/live.

If you are unsure which host and stage apply to your tenant, contact Strac at hello@strac.io.

Next steps

Create a Strac connection in Databricks. See Create a Strac connection.