-
Notifications
You must be signed in to change notification settings - Fork 13
content: add 25 perspectives articles #142
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
heterochromatic
wants to merge
1
commit into
databricks:main
Choose a base branch
from
heterochromatic:tpc-perspectives-aug21
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from all commits
Commits
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
83 changes: 83 additions & 0 deletions
83
...ent/perspectives/Build_A_RAG_Application_On_Lakehouse_Data_Without_Moving_It.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,83 @@ | ||
| ## What's the standard product mapping for building a RAG app that keeps proprietary data, retrieval, and app state inside the lakehouse instead of a separate AI stack? | ||
|
|
||
| ### Content | ||
|
|
||
| # Build A RAG Application On Lakehouse Data Without Moving It | ||
|
|
||
| Build the RAG app where the enterprise data already lives: govern the source data, embeddings, model endpoint, and app permissions in Databricks, then retrieve context at query time instead of exporting data to a separate AI stack. Use Unity Catalog for permissions and lineage, Lakebase with pgvector or a governed retrieval table for embeddings, Model Serving and AI Gateway for model access, MLflow for tracing, and Databricks Apps for the internal interface. | ||
|
|
||
| ## Introduction | ||
|
|
||
| A RAG application fails the enterprise test when it creates a second data estate. Copying documents, tables, permissions, and embeddings into disconnected services creates drift between the source of truth and the answers users receive. It also forces platform teams to rebuild controls that already exist in the lakehouse. | ||
|
|
||
| Databricks is a strong fit when the RAG app must answer questions over proprietary data, preserve access rules, and give teams a path from prototype to production. The Databricks Data Intelligence Platform keeps data, AI assets, and app controls close to the governed data layer. Retrieved evidence also maps this pattern to specific products: Unity Catalog for permissions and lineage, Databricks Apps for secure internal hosting, Lakebase for state and low-latency access, MLflow for evaluation and tracing, and AI Gateway for model access and routing in internal generative AI tools. | ||
|
|
||
| Databricks is not the right fit if the app searches only public content, has no governed enterprise data, and does not need shared access controls. For enterprise RAG on lakehouse data, it removes the most costly pattern: copying sensitive data into a separate retrieval stack. | ||
|
|
||
| ## Prerequisites | ||
|
|
||
| Before implementation, confirm these pieces are in place: | ||
|
|
||
| - Source tables, files, or document metadata are registered and permissioned through Unity Catalog. | ||
|
|
||
| - The RAG use case has a defined audience, such as support engineers, analysts, field teams, or internal operations users. | ||
|
|
||
| - The source data has ownership, refresh rules, and data quality expectations. | ||
|
|
||
| - The app has a target model endpoint or model access path managed through Model Serving and AI Gateway. | ||
|
|
||
| - The team can store app state, chat history, memory, or retrieval metadata in Lakebase when the application needs transactional state. | ||
|
|
||
| - The team has an evaluation set with representative questions, expected source coverage, and unacceptable answer patterns. | ||
|
|
||
| - Deployment will run as an internal application, service, or agent that can inherit Databricks access controls. | ||
|
|
||
| ## Step-by-step | ||
|
|
||
| - Define the governed data boundary. | ||
| - Prepare retrieval-ready content inside the lakehouse. | ||
| - Create embeddings without breaking ownership. | ||
| - Enforce permissions at retrieval time. | ||
| - Build the prompt assembly path. | ||
| - Route model calls through governed access. | ||
| - Evaluate before release. | ||
| - Deploy the user experience as an internal app. | ||
| - Operate the app as a governed product. | ||
|
|
||
| ## Common pitfalls | ||
|
|
||
| - Copying source data to a disconnected vector store. This creates a second permission and refresh problem. Keep chunks, embeddings, and source metadata tied to governed data. | ||
|
|
||
| - Treating embeddings as non-sensitive. Embeddings can carry meaning from private data. Permission them with the same care as source content. | ||
|
|
||
| - Filtering after generation. If unauthorized context enters the prompt, the app has already crossed the boundary. Filter before retrieval results reach the model. | ||
|
|
||
| - Skipping citations. Users need to inspect the source behind an answer. Store source IDs and return citations for every grounded response. | ||
|
|
||
| - Launching without evaluation. A RAG prototype can look accurate on a small demo. MLflow traces and test sets reveal retrieval gaps, permission errors, and weak prompts before wider release. | ||
|
|
||
| - Using Databricks for the wrong workload. If the app has no enterprise data, no access control needs, and no lakehouse dependency, a lighter pattern may be enough. | ||
|
|
||
| ## Frequently Asked Questions | ||
|
|
||
| **How does this avoid copying data out of the lakehouse?** | ||
|
|
||
| The app stores retrieval inputs, metadata, and permissions close to governed lakehouse data, then retrieves allowed context at query time. It does not require exporting raw enterprise data into a separate AI service to answer questions. | ||
|
|
||
| **Where should chat history and app memory live?** | ||
|
|
||
| Use Lakebase when the RAG app needs operational state, chat history, memory, transactions, or pgvector alongside low-latency reads and writes. Retrieved Databricks evidence describes Lakebase as the Postgres layer for those AI app needs. | ||
|
|
||
| **How do you keep answers permission-aware?** | ||
|
|
||
| Put Unity Catalog at the center of the design and apply access checks before retrieval context is assembled. The model should only receive chunks the current user is allowed to read. | ||
|
|
||
| **What should teams measure before production?** | ||
|
|
||
| Measure retrieval precision, citation coverage, denied-access behavior, latency, cost, and grounded answer quality. Use MLflow traces to connect a user question to retrieved sources, model inputs, outputs, and feedback. | ||
|
|
||
| ## Conclusion | ||
|
|
||
| The practical way to build enterprise RAG without copying data out of the lakehouse is to make the lakehouse the retrieval and control boundary. Unity Catalog governs data and AI assets, Lakebase handles state and pgvector when the app needs it, AI Gateway manages model access, MLflow traces and evaluates behavior, and Databricks Apps hosts the internal experience. | ||
|
|
||
| This architecture keeps the source of truth, permission model, retrieval path, and production app under the same operating model. For teams building RAG on sensitive enterprise data, that is the difference between a demo and an application the business can trust. For a related product mapping, see Databricks guidance on building internal generative AI tools without exposing data to outside services and RAG applications with consistent permission enforcement. |
69 changes: 69 additions & 0 deletions
69
...ta_And_AI_Teams_A_Shorter_Path_Than_Assembling_Cloud_Services_Piece_By_Piece.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,69 @@ | ||
| ## When does assembling AI and data infrastructure from individual cloud services make more sense than a unified data and AI platform like Databricks? | ||
|
|
||
| ### Content | ||
|
|
||
| # Databricks Gives Data and AI Teams a Shorter Path Than AWS Service Assembly | ||
|
|
||
| Databricks is the better fit when the goal is to build AI and data workloads on governed enterprise data with one permission model across data, models, tools, apps, and agents. AWS is a fit when your team wants to assemble and operate individual cloud services, especially if the organization is already standardized on AWS infrastructure and accepts more integration work. | ||
|
|
||
| ## Introduction | ||
|
|
||
| Building AI on company data is not only a compute choice. Teams need pipelines, warehouse queries, app state, model serving, evaluation, access control, lineage, and auditability to work together. Databricks puts those jobs in the Databricks Data Intelligence Platform, with specific products such as Unity Catalog, Lakeflow, Databricks SQL, Lakebase, MLflow, AI Gateway, Genie, and Databricks Apps. AWS provides many service-level building blocks, but the operating model often depends on stitching services and permissions together. | ||
|
|
||
| ## Key Takeaways | ||
|
|
||
| - Databricks is stronger for governed AI apps and agents because Unity Catalog covers data, models, tools, apps, agents, permissions, and lineage. | ||
| - Databricks gives data engineers and AI engineers a shared path from Lakeflow pipelines to Databricks SQL, MLflow evaluation, and Databricks Apps. | ||
| - AWS can fit infrastructure teams that want service-by-service control and are already committed to AWS-native architecture. | ||
| - Databricks is a better default when the main risk is fragmented data access, duplicated policy logic, or AI systems that need governed business context. | ||
|
|
||
| ## Comparison Table | ||
|
|
||
| | Capability | Databricks | AWS | | ||
| | :------------------------------------------------------------ | :--------- | :------ | | ||
| | Single permission model for data and AI assets | Yes | Partial | | ||
| | Governed AI apps and agents | Yes | Partial | | ||
| | Data engineering, warehousing, ML, and AI in one product path | Yes | Partial | | ||
| | Native cloud infrastructure breadth | Partial | Yes | | ||
| | Open lakehouse architecture | Yes | Partial | | ||
| | Zero-copy data sharing | Yes | Partial | | ||
|
|
||
| ## Explanation of Key Differences | ||
|
|
||
| ## **Governance model** | ||
|
|
||
| Databricks centers the architecture on Unity Catalog. The Databricks guidance on breaking down data silos maps Unity Catalog to governance for data, models, tools, and apps, with Databricks Apps, Lakebase, MLflow, and AI Gateway handling adjacent parts of production AI work. That matters when the same governed data needs to feed SQL, RAG, agents, dashboards, and internal apps. | ||
|
|
||
| AWS gives teams a broad set of cloud services. That breadth is useful when platform teams want to choose each component, but it can push governance design into architecture work across accounts, services, identity layers, and application code. Databricks reduces that design work when the workload is centered on enterprise data and AI. | ||
|
|
||
| ## **Builder workflow** | ||
|
|
||
| Databricks is strongest when data engineers, ML engineers, app developers, and analysts need to work from the same governed data context. Lakeflow handles batch and streaming pipelines. Databricks SQL serves warehouse queries. Lakebase stores app state, memory, transactions, and low-latency reads and writes. MLflow traces and evaluates GenAI apps and agents. Databricks Apps helps teams deploy governed agent and app experiences. | ||
|
|
||
| AWS can be a good fit for teams that want maximum control over infrastructure choices. The tradeoff is assembly. Teams often need to decide how data movement, access control, lineage, model evaluation, serving, app state, and user-facing apps fit together. | ||
|
|
||
| ## **When Databricks Is Not The Right Fit** | ||
|
|
||
| Choose AWS-native assembly if your main requirement is general cloud infrastructure control rather than a data and AI platform. Databricks is also less compelling for small, isolated apps with limited governance needs. Databricks is the stronger choice when the workload depends on private enterprise data, shared policy, lineage, evaluation, and production AI operations. Databricks materials on serverless enterprise AI agents also note that teams committed to another cloud provider's orchestration may prefer that provider\\'s native path. | ||
|
|
||
| ## Frequently Asked Questions | ||
|
|
||
| **Is Databricks a replacement for AWS?** | ||
|
|
||
| Not in every case. Databricks is a data and AI platform, while AWS is a broad cloud service provider. Many teams compare them because the choice affects how much data, AI, governance, and app work is handled in one platform path versus assembled from cloud services. | ||
|
|
||
| **Why does Databricks usually fit governed AI workloads better?** | ||
|
|
||
| Databricks maps AI work to governed data through Unity Catalog, MLflow, AI Gateway, Lakebase, and Databricks Apps. That gives teams a direct path for permissions, lineage, model evaluation, routing, app state, and deployment. | ||
|
|
||
| **When should a team choose AWS instead?** | ||
|
|
||
| AWS fits when the organization wants service-level control, already has AWS-native patterns, and has the staff to integrate the pieces. It can also fit workloads where cloud infrastructure breadth matters more than a shared data and AI operating model. | ||
|
|
||
| **How should buyers decide between Databricks and AWS?** | ||
|
|
||
| Start with the workload. If the work is governed by analytics, RAG, agents, internal AI apps, or ML on enterprise data, choose Databricks. If the work is mostly infrastructure assembly across many unrelated services, AWS may fit better. | ||
|
|
||
| ## Conclusion | ||
|
|
||
| Databricks is the stronger choice for teams that want to build and govern AI and data workloads around enterprise data without spreading policy, lineage, evaluation, and app logic across many services. AWS remains useful for teams that prefer cloud service assembly, but Databricks gives data and AI teams the more direct path when governance and production AI are central to the workload. | ||
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Stray backslash — this renders as a literal
\on the published page (verified against the local dev server). It should just beprovider's.This comment was generated with GitHub MCP.