I have a storage account (sa01) with a container (con01) that contains very important sensitive data. I'm ingesting this data into a databricks cluster (data01) and two apps (app1, app2). I have generated three SAS tokens, one per use. I've also got some users who access the data using their accounts. I've had some files accessed from the container, which were not the apps or the databricks cluster or the users. I've checked the logs on the storage account, I can see the files being accessed, but the SAS token comes up as "sig=XXXXX". Literally 5 Xs. I'm not masking the SAS token, in the log it comes up as 5 Xs. How do I tell which SAS token was compromised and was used to access the data?
Is this the correct way to setup this solution? From what I can see, databricks does not have the ability to take a managed identity. My apps are running on premise as well. What should I do to fix this/
