diff --git a/databricks-default-cluster-policies/README.md b/databricks-default-cluster-policies/README.md
new file mode 100644
index 00000000..2b8c1bfe
--- /dev/null
+++ b/databricks-default-cluster-policies/README.md
@@ -0,0 +1,48 @@
+<!-- START -->
+## Requirements
+
+| Name | Version |
+|------|---------|
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.13 |
+
+## Providers
+
+| Name | Version |
+|------|---------|
+| <a name="provider_aws"></a> [aws](#provider\_aws) | n/a |
+| <a name="provider_databricks"></a> [databricks](#provider\_databricks) | n/a |
+
+## Modules
+
+| Name | Source | Version |
+|------|--------|---------|
+| <a name="module_job_compute_cluster_policy"></a> [job\_compute\_cluster\_policy](#module\_job\_compute\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_large_gpu_large_clusters_cluster_policy"></a> [large\_gpu\_large\_clusters\_cluster\_policy](#module\_large\_gpu\_large\_clusters\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_large_gpu_personal_cluster_policy"></a> [large\_gpu\_personal\_cluster\_policy](#module\_large\_gpu\_personal\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_large_gpu_small_clusters_cluster_policy"></a> [large\_gpu\_small\_clusters\_cluster\_policy](#module\_large\_gpu\_small\_clusters\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_large_personal_compute_cluster_policy"></a> [large\_personal\_compute\_cluster\_policy](#module\_large\_personal\_compute\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_legacy_shared_compute_cluster_policy"></a> [legacy\_shared\_compute\_cluster\_policy](#module\_legacy\_shared\_compute\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_personal_compute_cluster_policy"></a> [personal\_compute\_cluster\_policy](#module\_personal\_compute\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_power_user_compute_cluster_policy"></a> [power\_user\_compute\_cluster\_policy](#module\_power\_user\_compute\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+| <a name="module_small_clusters"></a> [small\_clusters](#module\_small\_clusters) | ../databricks-cluster-policy | n/a |
+| <a name="module_superset_compute_cluster_policy"></a> [superset\_compute\_cluster\_policy](#module\_superset\_compute\_cluster\_policy) | ../databricks-cluster-policy | n/a |
+
+## Resources
+
+| Name | Type |
+|------|------|
+| [databricks_group.power_user_group](https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/group) | resource |
+| [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |
+
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| <a name="input_additional_instance_profile_arns"></a> [additional\_instance\_profile\_arns](#input\_additional\_instance\_profile\_arns) | Additional instance profiles to allow clusters to run on | `list(string)` | `[]` | no |
+| <a name="input_databricks_host"></a> [databricks\_host](#input\_databricks\_host) | Databricks host name for tagging | `string` | n/a | yes |
+| <a name="input_databricks_workspace_id"></a> [databricks\_workspace\_id](#input\_databricks\_workspace\_id) | Databricks workspace\_id for tagging | `string` | n/a | yes |
+
+## Outputs
+
+No outputs.
+<!-- END -->
diff --git a/databricks-default-cluster-policies/main.tf b/databricks-default-cluster-policies/main.tf
new file mode 100644
index 00000000..355febb0
--- /dev/null
+++ b/databricks-default-cluster-policies/main.tf
@@ -0,0 +1,380 @@
+data "aws_caller_identity" "current" {
+  provider = aws
+}
+locals {
+  power_user_group_name = "Power Users"
+  all_users_group_name  = "users"
+
+  default_policy_family_ids = {
+    job_compute : "job-cluster",
+    legacy_shared_compute : "shared-data-science",
+    personal_compute : "personal-vm",
+    power_user_compute : "power-user",
+    shared_compute : "shared-compute",
+  }
+
+  default_cluster_instance_profile     = "cluster-log-cluster-instance-profile"
+  default_cluster_instance_profile_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:instance-profile/databricks/${local.default_cluster_instance_profile}"
+
+  logging_override = {
+    # set log destination - one prefix per workspace since cluster ids are only unique per workspace
+    "cluster_log_conf.path" : {
+      "type" : "fixed",
+      "value" : "s3://${var.databricks_log_bucket}/cluster-logs/${var.databricks_workspace_id}"
+    },
+
+    "cluster_log_conf.type" : {
+      "type" : "fixed",
+      "value" : "S3"
+    }
+
+    # require using an instance profile that has logging enabled
+    "aws_attributes.instance_profile_arn" : {
+      "type" : "allowlist",
+      "values" : concat(
+      [local.default_cluster_instance_profile_arn], var.additional_instance_profile_arns),
+      "defaultValue" : local.default_cluster_instance_profile_arn
+    }
+  }
+}
+
+resource "databricks_group" "power_user_group" {
+  display_name               = local.power_user_group_name
+  allow_cluster_create       = true
+  allow_instance_pool_create = false
+}
+
+## Modified Databricks defaults
+module "legacy_shared_compute_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Legacy Shared Compute"
+  policy_family_id        = local.default_policy_family_ids["legacy_shared_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "data_security_mode" : {
+      "type" : "fixed",
+      "hidden" : true,
+      "value" : "USER_ISOLATION"
+    }
+  })
+}
+
+module "personal_compute_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Personal Compute"
+  policy_family_id        = local.default_policy_family_ids["personal_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 120
+    },
+    "driver_node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([rcip]+[3-5]+[d]*\\.[0-1]{0,1}xlarge)",
+      "hidden" : false
+    },
+    "node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([rcip]+[3-5]+[d]*\\.[0-1]{0,1}xlarge)",
+      "hidden" : false
+    },
+  })
+  grantees = [local.all_users_group_name]
+}
+
+module "large_personal_compute_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Large Personal Compute"
+  policy_family_id        = local.default_policy_family_ids["personal_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 120
+    },
+    "driver_node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([rcip]+[3-6]+[di]*\\.[0-8]{0,1}xlarge)",
+      "hidden" : false
+    },
+    "node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([rcip]+[3-6]+[di]*\\.[0-8]{0,1}xlarge)",
+      "hidden" : false
+    },
+  })
+}
+
+module "power_user_compute_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Power User Compute"
+  policy_family_id        = local.default_policy_family_ids["power_user_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "autoscale.max_workers" : {
+      "type" : "range",
+      "defaultValue" : 10,
+      "maxValue" : 20
+    },
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 120
+    },
+    "driver_node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([grci]+[3-5]+[dn]*\\.[0-8]{0,1}xlarge)",
+      "hidden" : false
+    },
+    "node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([grci]+[3-5]+[dn]*\\.[0-8]{0,1}xlarge)",
+      "hidden" : false
+    },
+  })
+
+  grantees = [local.power_user_group_name]
+}
+module "job_compute_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Job Compute"
+  policy_family_id        = local.default_policy_family_ids["job_compute"]
+
+  policy_overrides = merge(local.logging_override, {
+    "spark_conf.spark.databricks.cluster.profile" : {
+      "type" : "unlimited",
+      "defaultValue" : "singleNode",
+      "hidden" : false
+    }
+  })
+
+  grantees = [local.power_user_group_name]
+}
+
+## Fully custom policies
+module "large_gpu_large_clusters_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Large GPU Large Clusters"
+  policy_family_id        = local.default_policy_family_ids["power_user_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "autoscale.max_workers" : {
+      "type" : "range",
+      "minValue" : 1,
+      "maxValue" : 64,
+      "defaultValue" : 2
+    },
+    "autoscale.min_workers" : {
+      "type" : "range",
+      "minValue" : 1,
+      "maxValue" : 3,
+      "defaultValue" : 1
+    },
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 120
+    },
+    "node_type_id" : {
+      "type" : "allowlist",
+      "values" : [
+        "g4dn.xlarge",
+        "g4dn.2xlarge",
+        "g4dn.4xlarge",
+        "g4dn.8xlarge",
+        "g4dn.12xlarge",
+        "g4dn.16xlarge",
+        "g5.xlarge",
+        "g5.8xlarge",
+        "g5.4xlarge",
+        "g5.48xlarge",
+        "g5.2xlarge",
+        "g5.24xlarge",
+        "g5.16xlarge",
+        "g5.12xlarge"
+      ],
+      "defaultValue" : "g4dn.xlarge"
+    },
+  })
+}
+
+module "large_gpu_personal_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Large GPU Personal"
+  policy_family_id        = local.default_policy_family_ids["personal_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 120
+    }
+    "node_type_id" : {
+      "type" : "allowlist",
+      "values" : [
+        "g4dn.xlarge",
+        "g4dn.2xlarge",
+        "g4dn.4xlarge",
+        "g4dn.8xlarge",
+        "g4dn.12xlarge",
+        "g4dn.16xlarge",
+        "g5.xlarge",
+        "g5.8xlarge",
+        "g5.4xlarge",
+        "g5.48xlarge",
+        "g5.2xlarge",
+        "g5.24xlarge",
+        "g5.16xlarge",
+        "g5.12xlarge"
+      ],
+      "defaultValue" : "g4dn.xlarge"
+    },
+  })
+}
+
+module "large_gpu_small_clusters_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Large GPU Small Clusters"
+  policy_family_id        = local.default_policy_family_ids["power_user_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "autoscale.max_workers" : {
+      "type" : "range",
+      "minValue" : 1,
+      "maxValue" : 3,
+      "defaultValue" : 2
+    },
+    "autoscale.min_workers" : {
+      "type" : "range",
+      "minValue" : 1,
+      "maxValue" : 3,
+      "defaultValue" : 1
+    },
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 120
+    },
+    "node_type_id" : {
+      "type" : "allowlist",
+      "values" : [
+        "g4dn.xlarge",
+        "g4dn.2xlarge",
+        "g4dn.4xlarge",
+        "g4dn.8xlarge",
+        "g4dn.12xlarge",
+        "g4dn.16xlarge",
+        "g5.xlarge",
+        "g5.8xlarge",
+        "g5.4xlarge",
+        "g5.48xlarge",
+        "g5.2xlarge",
+        "g5.24xlarge",
+        "g5.16xlarge",
+        "g5.12xlarge"
+      ],
+      "defaultValue" : "g4dn.xlarge"
+    },
+  })
+}
+
+module "small_clusters" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Small Clusters"
+  policy_family_id        = local.default_policy_family_ids["personal_compute"]
+  policy_overrides = merge(local.logging_override, {
+    "autoscale.max_workers" : {
+      "type" : "range",
+      "maxValue" : 3,
+      "defaultValue" : 3
+    },
+    "autoscale.min_workers" : {
+      "type" : "fixed",
+      "value" : 1,
+      "hidden" : true
+    },
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 120,
+      "hidden" : false
+    },
+    "data_security_mode" : {
+      "type" : "whitelist",
+      "values" : [
+        "USER_ISOLATION",
+        "SINGLE_USER"
+      ]
+    },
+    "driver_node_type_id" : {
+      "type" : "regex",
+      "pattern" : "[rmci][3-5][rnad]*\\.[0-2]{0,1}xlarge",
+      "hidden" : false
+    },
+    "enable_elastic_disk" : {
+      "type" : "fixed",
+      "value" : false,
+      "hidden" : true
+    },
+    "instance_pool_id" : {
+      "type" : "forbidden",
+      "hidden" : true
+    },
+    "node_type_id" : {
+      "type" : "regex",
+      "pattern" : "[rmci][3-5][rnad]*\\.[0-2]{0,1}xlarge",
+      "hidden" : false
+    },
+  })
+}
+
+module "superset_compute_cluster_policy" {
+  source = "../databricks-cluster-policy"
+
+  databricks_host         = var.databricks_host
+  databricks_workspace_id = var.databricks_workspace_id
+  policy_name             = "${var.policy_name_prefix}Superset Compute"
+
+  policy_overrides = merge(local.logging_override, {
+    "autotermination_minutes" : {
+      "type" : "fixed",
+      "value" : 60
+    },
+    "driver_node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([grci]+[3-5]+[dn]*\\.[0-2]{0,1}xlarge)",
+      "hidden" : false
+    },
+    "node_type_id" : {
+      "type" : "regex",
+      "pattern" : "([grci]+[3-5]+[dn]*\\.[0-2]{0,1}xlarge)",
+      "hidden" : false
+    },
+    "driver_instance_pool_id" : {
+      "type" : "unlimited",
+      "isOptional" : true,
+      "defaultValue" : "superset_pool"
+    },
+    "instance_pool_id" : {
+      "type" : "unlimited",
+      "isOptional" : true,
+      "defaultValue" : "superset_pool"
+    },
+  })
+}
diff --git a/databricks-default-cluster-policies/outputs.tf b/databricks-default-cluster-policies/outputs.tf
new file mode 100644
index 00000000..e69de29b
diff --git a/databricks-default-cluster-policies/variables.tf b/databricks-default-cluster-policies/variables.tf
new file mode 100644
index 00000000..02cedd71
--- /dev/null
+++ b/databricks-default-cluster-policies/variables.tf
@@ -0,0 +1,26 @@
+variable "databricks_workspace_id" {
+  description = "Databricks workspace_id for tagging"
+  type        = string
+}
+
+variable "databricks_host" {
+  description = "Databricks host name for tagging"
+  type        = string
+}
+
+variable "additional_instance_profile_arns" {
+  description = "Additional instance profiles to allow clusters to run on"
+  type        = list(string)
+  default     = []
+}
+
+variable "databricks_log_bucket" {
+  description = "Name of S3 bucket to store Databricks logs"
+  type = string
+}
+
+variable "policy_name_prefix" {
+  description = "Prefix for policy names"
+  type = string
+  default = ""
+}
\ No newline at end of file
diff --git a/databricks-default-cluster-policies/versions.tf b/databricks-default-cluster-policies/versions.tf
new file mode 100644
index 00000000..2106c4d3
--- /dev/null
+++ b/databricks-default-cluster-policies/versions.tf
@@ -0,0 +1,8 @@
+terraform {
+  required_providers {
+    databricks = {
+      source = "databricks/databricks"
+    }
+  }
+  required_version = ">= 1.3.0"
+}