hdinsight-migration
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- Secure Secret Management: The instructions guide users to use
notebookutils.credentials.getSecretfor retrieving sensitive information from Azure Key Vault. This approach follows industry best practices for avoiding hardcoded credentials in migration scripts and notebooks. - Modernized Authentication: The skill facilitates a transition from legacy storage paths that traditionally relied on account keys or SAS tokens to native OneLake paths. This encourages the adoption of Entra ID token-based authentication, which provides better auditability and centralized access control.
- Controlled Execution Environment: Guidance is provided to replace unmanaged shell actions (
%sh) and direct subprocess calls with official Spark utilities and platform-native pipeline activities. This minimizes the risk associated with arbitrary command execution in automated workflows. - Standardized Configuration: Migration patterns for session initialization and schema definition are aligned with current platform standards, ensuring that migrated environments operate within modern security and resource governance frameworks.
Audit Metadata