Unified Data + AI Governance with Unity Catalog

Michelle Leon, Databricks, Victoria Bukta, Databricks24:56 · Oct 2024 · 289 views
Thumbnail for Unified Data + AI Governance with Unity Catalog Watch on YouTube
TL;DR
  1. 1

    A multi-vendor data platform often has separate catalogs, formats, access policies, audit logs, and lineage systems.

  2. 2

    Unity Catalog is presented as one catalog for tables, files, models, vector indexes, functions, and other data and AI assets.

  3. 3

    Unity Catalog uses open interfaces, including its REST API and the Iceberg REST Catalog API, so external tools can access governed assets without copying data.

Summary

Michelle Leon and Victoria Bukta describe how data platforms become difficult to govern when teams use several catalogs, storage formats, engines, and AI tools. Victoria walks through an architecture with object storage, Hive, Iceberg REST Catalog, Glue, Delta, structured files, and unstructured assets. In that setup, discovery, permissions, auditing, and lineage are split across systems. Michelle presents Unity Catalog as a single governance layer for data and AI assets. The proposed catalog supports multiple table formats, non-tabular files, models, vector indexes, functions, and other AI resources. It can provide a unified view, end-to-end lineage, auditing, and temporary credentials for external tools. The speakers also describe access through the Unity REST API and Iceberg REST Catalog API, with examples involving DuckDB, Trino, MLflow, Unstructured IO, LangChain, and LlamaIndex. They close by explaining that Unity Catalog is open source and inviting contributions through GitHub, Slack, and community meetups.

Key ideas
03:08

A data catalog gives assets names, locations, formats, schemas, and metadata

Victoria defines a data catalog as infrastructure that acts as the source of truth for critical data and machine learning assets and their metadata. Without one, an organization may have object storage containing Parquet, JSON, CSV, Delta, and Iceberg data, alongside logs, audio, video, images, and other unstructured files. Different applications write and process these assets, while engines such as Spark, MLflow, Snowflake, and Trino create refined datasets. The catalog records how assets can be interpreted and accessed.

05:42

Without a unified catalog, discovery and lineage are spread across storage and permissions systems

When data sits directly in object storage, users have to traverse folders to find it. Access depends on IAM permissions and groups, while teams need separate answers about who accessed an asset, when it was used, which engine handled it, and which datasets produced another dataset. Victoria says a Hive metastore improves this by registering tables, locations, formats, schemas, and properties. That approach becomes less complete when organizations add Iceberg REST Catalog, Glue, Delta, and unstructured assets.

09:41

Multiple catalogs create duplicated policies and gaps in governance

With Hive, Glue, and an Iceberg REST Catalog in the same organization, metadata becomes siloed. Victoria describes fragmented discovery, governance, auditing, and lineage. Access may use file paths and IAM roles in one system, while another system relies on catalog permissions. Administrators must reconcile different logs, and lineage tools may not work across every catalog. The result is a fragmented view of data and AI assets, along with more opportunities for security and audit errors.

11:07

Organizations want one governed view while keeping their choice of tools

Michelle says customers want to manage data and AI assets in one place and govern them through a single source of truth. She describes the burden of requesting permissions from several administrators just to access a dataset for analysis or model training. At the same time, teams want to use specialized engines and platforms for different workloads. The proposed open lakehouse model keeps the underlying data owned by the customer and lets different tools work with a single copy.

14:23

Unity Catalog is designed to govern tables, files, and AI assets together

Michelle describes Unity Catalog as an open catalog that creates a unified view across tables, unstructured and semi-structured data, volumes, functions, models, and vector indexes. It is intended to support discovery across these asset types, trace lineage from data to trained models and vector databases, and provide monitoring and auditing across the environment. The catalog is described through three pillars: multiformat support, multimodal asset coverage, and unified governance.

18:47

Open interfaces let external engines access governed data

Unity Catalog is presented as an interoperability layer for a broad ecosystem of engines and platforms. Michelle says it implements the Unity REST API and the Iceberg REST Catalog API. Engines that support the Iceberg interface, such as Trino, can access Unity Catalog tables. She also describes temporary credential vending, where Unity Catalog gives a tool a credential scoped to the files and metadata for a particular table instead of exposing the whole storage system.

20:27

Temporary credentials provide the access primitive behind higher-level policies

For a DuckDB example, Michelle explains that DuckDB can talk to Unity Catalog, receive a temporary credential scoped to the files for a table, and read the table through the Unity REST APIs. She calls temporary credential vending the underlying primitive on which higher-level controls such as rules-based and attribute-based access control can be built. This approach avoids separately connecting every tool to the catalog and the underlying storage.

21:27

The same governance model extends to volumes and agent tools

Michelle describes volumes as a named abstraction for sets of files, with metadata that tools such as MLflow and Unstructured IO can use for data ingestion, training, and serving. She also says Python and SQL functions can be registered in Unity Catalog with names, descriptions, parameters, and other metadata. Frameworks such as LangChain and LlamaIndex can then use those registered functions in agent applications while retaining shared governance, lineage, auditability, and monitoring.

23:29

Unity Catalog is open source and invites community participation

Michelle closes by saying Unity Catalog became open source during the summer before this session. She directs viewers to the Unity Catalog website, GitHub repository, Slack, GitHub discussions, and community meetups for documentation, integrations, roadmap information, and discussion of additional data and AI asset types. She presents open source as a way to give users freedom from vendor lock-in and to encourage contributions to the project.

"This is basically the core primitive of governance, upon which higher-level governance such as rules-based access control or attribute-based access control is built upon."Michelle Leon20:47
Who should watch
  • You are responsible for governance in a data platform that has multiple catalogs, storage formats, engines, or cloud environments.
  • Your data science or AI teams need access to shared data without creating separate copies or managing storage permissions for every tool.
  • You are evaluating open interfaces and want to understand how Unity Catalog handles tables, files, models, functions, lineage, and temporary credentials.