Databricks Unity Catalog ABAC context attributes mask data for agent requests, with three uncovered access paths

AI Strategy · Aug 23, 2026 · 12 min read

Databricks shipped agent-aware ABAC masking on 21 August 2026 with 3 gaps

Unity Catalog ABAC can now mask columns and filter rows for requests an agent makes on a user's behalf. Databricks names three access paths the control misses, starting with personal access tokens.

Manu Shukla

#Databricks #Unity Catalog #ai-agent-governance

DynamoDB Streams ABAC: seven-day opt-out window, 50 tags per stream, aws:ResourceTag condition key

Cloud & FinOps · Aug 22, 2026 · 12 min read

DynamoDB Streams ABAC shipped 19 August 2026 with a 7-day opt-out and a policy trap

DynamoDB Streams ABAC went live 19 August 2026: 50 tags per stream, a 10 KB cap, existing accounts disabled by default, and a seven-calendar-day opt-out window.

Manu Shukla

#DynamoDB #aws-iam #abac