Databricks
ReleaseWorth evaluating
Context-based ingress policies for inbound Private Link are generally available
From Databricks release notes (AWS)
Context-based ingress policies for inbound Private Link have reached general availability. They control which registered VPC endpoints can reach workspaces and combine endpoint rules with identity and request-type conditions. If the feature is not yet enabled for an account, an account admin can turn it on from the account console Previews page.