According to this wonderful bog post, it should be possible to restrict access to a catalog from only certain workspaces i.e. this section
However, when I look at the terraform samples here and the create catalog options here, I do not see any option which shows how to do this.
Is it still in preview and not really GA? Azure is the cloud provider in my case.
This feature is now available in Databricks (Azure at least).
Go to Data, then find the catalog and you see a "Workspaces" tab.
In that screen, you untick the option "All workspaces have access" and assign it to the specific workspace.
We use this to assign environment specific catalog to their corresponding workspaces (i.e DEV, TEST and PROD).