Browse All Azure Content (553)

Kristen Womack reviews October’s Azure Developer CLI releases, covering deployment previews, Container Apps express support, environment value removal, and extension-aware pipelines. The recap also explains stable extension APIs, breaking Go API changes, reliability fixes, and new templates for deploying semantic search and streaming AI applications to Azure.

John Savill reviews this week's Azure updates, covering Container Apps logging, confidential VMs, network security, storage quotas, and cross-tenant backup restore. The Halloween edition also covers Azure AI Foundry model cost management, Azure MCP Server 3.0, new model topics, and GitHub Universe.

yunishussein explains how Azure Advisor identifies disconnected Azure Arc-enabled servers before their agent credentials expire. The guide covers heartbeat and certificate thresholds, recommended recovery actions, and ways to review affected machines through the Azure portal or query recommendations across subscriptions with Azure Resource Graph.

Microsoft Developer explores model selection using the Microsoft Foundry model catalog. By swapping only the model deployment and running the same evaluation on both options, the episode compares results alongside measured cost and latency to show when a smaller model is suitable for production and when it is not.

spurthikommajos explains how Microsoft Fabric Eventstream’s preview support for workspace-level private connectivity lets custom applications publish events without public internet access. The article covers Azure private endpoints, workspace-scoped network restrictions, setup prerequisites, and supported analytics destinations, including important capacity requirements and ingestion limitations.

spurthikommajos introduces preview support for variable libraries in Microsoft Fabric Eventstream. Connection and item references let teams reuse eventstream definitions across development, staging, and production, while each workspace supplies its own resource values. The article explains configuration steps, deployment prerequisites, and how references remain intact through Git integration and deployment pipelines.

Microsoft Developer shows how to build a prompt agent in Microsoft Foundry using a model, instructions, and MCP tools, without managing containers or servers. The video explains when custom orchestration or a different framework calls for a hosted agent, while keeping name-based invocation consistent for callers.

Salim Chawro introduces Hardware Audit Logging for Azure Cloud HSM, which records supported management operations directly from the hardware. Signed audit data and certificates enable independent verification, while Azure Monitor Log Analytics delivery supports investigations and monitoring. The feature is rolling out across public regions and is automatically enabled on new resources where available.

Microsoft Threat Intelligence examines how North Korean threat actors use AI to accelerate reconnaissance, identity deception, malware development, and operational scaling. The report distinguishes observed activity from suspected AI use, explains why operations remain human-directed, and provides Microsoft Defender detections and practical guidance for protecting identities, endpoints, and software repositories.

John Edward compares Azure Bicep and ARM templates, explaining their shared deployment engine and differences in syntax, validation, dependencies, and reuse. Practical Azure CLI examples show how to compile templates, preview changes, and deploy resources, while migration guidance helps teams decide when to adopt Bicep or retain existing JSON workflows.

Michael MacKenzie explains how IoT, industrial AI, and physical AI connect machine data to decisions and actions. He outlines the roles of Azure IoT Hub, Azure IoT Operations, and Azure Device Registry, including operational inference and the policy, access, and certificate controls that bridge IT and operational technology.

vinilv explains how to upgrade Azure CycleCloud Slurm node OS images without recreating the entire VM Scale Set. The walkthrough separates cluster configuration, scale-set models, and instance state, then covers draining nodes, applying updates, validating HPC dependencies, rolling back failures, and aligning CycleCloud configuration while acknowledging node downtime and capacity limitations.

JPCalhau explains how to give Azure API Management v2 predictable outbound public IP addresses using virtual network integration and Azure NAT Gateway. The walkthrough covers subnet configuration, network security groups, NAT association, and validation, while explaining why backend IP allowlisting should complement rather than replace service-to-service authentication.

Satya Nadella outlines GitHub updates announced at Universe, including Copilot Fusion performance and cost claims, a unified Copilot harness in Foundry, and Copilot Projects for coordinating multiple agents across repositories. The post also notes plans to expand GitHub capacity and strengthen its architecture.

Lynn Dai introduces Trusted Publishing for Visual Studio Marketplace, enabling extension releases from GitHub Actions and Azure Pipelines without long-lived personal access tokens. The article explains federated identity setup, GitHub policy activation, Azure Pipelines service connections, and how to migrate existing publishing workflows while verifying access before removing stored secrets.

Jeff Hollan, Viswajeeet Balaji, and Anthony Chu introduce the Microsoft Copilot harness public preview in Foundry Agent Service and generally available resilience for hosted agents. They demonstrate reusable skills and declarative deployment, explain recovery responsibilities and preview limitations, and outline consumption-based runtime billing beginning December 1, 2026.

Jay Parikh outlines GitHub’s Universe 2026 announcements, including multi-repository Copilot projects, model orchestration, deeper code review, and enterprise access billed through AI credits. He also describes GitHub’s infrastructure expansion, redesigned Git architecture, and ongoing migration to a multi-region Azure deployment.

WSilveira introduces the public preview of the Logic Apps Standard CLI extension, covering local workflow creation, connector discovery, validation, execution diagnostics, and packaging. An Outlook-to-Blob walkthrough explains managed-identity setup and preview limitations, while a GitHub Copilot skill provides procedures for agent-assisted development with explicit approval for cloud changes.

Sandeep Sen summarizes October's Azure SDK releases, including authentication changes in Azure Core for .NET, managed identity improvements for Python and Java, and the first stable Cosmos DB libraries for Rust. The update also lists new stable management libraries and initial previews for AI and provisioning libraries.

yunishussein outlines the general availability of Automatic Agent Upgrade for Azure Arc-enabled servers. Microsoft manages enabled agents’ updates through regional batches during off-peak hours, while Azure Policy, command-line onboarding, and portal-generated scripts provide options for enabling upgrades across server environments.

KashanK introduces an out-of-tree MANA driver for Azure Accelerated Networking on supported Linux LTS kernels. The package uses upstream driver source with a compatibility layer, allowing users to keep their existing kernel. The announcement explains supported versions, when to use it, and potential Linux distribution support implications.

KalyanKaki outlines updates to Oracle AI Database@Azure, including planned Azure Government availability, EU Data Boundary and Azure Policy support, and generally available Proximity Placement Group integration. The changes address regulated workload deployment, cross-cloud sovereignty controls, and lower latency between Azure application VMs and Oracle Exadata infrastructure.

Venkat_Ramakrishnan explains how generally available Azure proximity placement groups bring application VMs closer to Oracle AI Database@Azure infrastructure. The article covers database-first placement, deployment prerequisites, measured network latency reductions, and constraints around VM capacity, existing Network Anchors, and multi-zone resilience.

RamKakani explains sovereignty controls for Oracle AI Database@Azure, including EU Data Boundary support, customer-managed encryption keys, private networking, policy enforcement, and operator access auditing. The guidance also highlights OCI tenancy configuration and data-flow exceptions that customers must review rather than assuming every connected service stays within the EU and EFTA.

RamyaSharma describes how the Microsoft Intune team used GitHub Copilot modernization to migrate an enrollment service to .NET 8. Engineer-owned plans, progress records, and dependency mappings preserved context across sessions, reduced repeated work, and kept changes reviewable, while internal library mappings and deployment decisions remained manual.

Karthik Uthaman explains how Azure Front Door engineers distinguish legitimate traffic surges from DDoS attacks. Using whiteboard examples, he explores resource-based defenses, traffic contributors in multi-tenant services, and how threat intelligence and JA4 client fingerprints provide signals beyond per-IP rate limiting while helping protect legitimate users.

praveensri benchmarks Hybrid Logic Apps using SQL Server 2025 for workflow state on a shared on-premises host. The analysis compares throughput, execution latency, database I/O, and lock waiting across two tests, explaining why low CPU usage and faster workflow completion do not establish storage headroom or product-wide capacity.

Wuyi_Weng walks through running Qwen3.8-27B locally on a 64 GB Lenovo laptop using vLLM, speculative decoding, and OpenCode. Benchmarks and a three-hour coding session show how memory allocation and request concurrency affect performance, while Azure Monitor and Grafana track inference, GPU usage, and operational limits.

Rena Liu introduces Azure AI Speech LLM 09-2026, adding 25 languages and faster multilingual transcription. The announcement covers recognition improvements, locale selection, phrase lists, and REST API configuration, with automatic service-side deployment requiring no customer action.

Sverre Brandsberg Dahl describes how SLB agile reservoir modeling connects with Azure Data Manager for Energy to run reservoir ensembles at cloud scale. The architecture combines parallel simulation, shared Azure Files storage, OSDU-aligned data services, and Microsoft Entra ID access controls to keep modeling workflows connected to governed corporate data.

FaizaanMerchant explains how Azure Arc connects on-premises Windows and Linux servers to Azure SRE Agent without migrating workloads. The guide outlines the telemetry foundation, approval controls, and rollout steps, with examples covering SQL Server crash diagnosis, patch planning, inventory drift, and configuration assessment.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Visual Studio Code demonstrates a PostgreSQL performance troubleshooting workflow, tracing an application slowdown from initial signals to database workload and query evidence. The episode covers Azure Advisor guidance, controlled actions, result verification, and a Database Agent experience that brings issue context and recommendations together while retaining review and approval.

Visual Studio Code demonstrates how to bring PostgreSQL workflows into the editor using Microsoft’s PostgreSQL extension. Learn to install the extension, connect to a PostgreSQL database on Azure with Microsoft Entra ID, save connection profiles, and explore database objects without switching tools.

Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.

Welcome to this week's Azure roundup, covering sovereign AI infrastructure, new monitoring capabilities, and upgrade planning. Azure Local announcements expand options for local inference and disconnected operations, while generally available registry and Azure Monitor metrics help teams investigate traffic, throttling, storage usage, and telemetry growth. We review the December retirement of Foundry workflows and the September 2027 Java support deadline for App Service and Functions, then explore agent development, database modernization, and private connectivity, distinguishing available features from previews and planned releases.

Hidde de Smet's Blog compares Bicep and Terraform for Azure, focusing on resource ownership rather than syntax preferences. The guide explains deletion behavior, deployment previews, ARM API coverage, module defaults, and existing-resource adoption, then outlines a disposable pilot for testing each tool against your team's infrastructure requirements.

Microsoft Developer highlights three updates: .NET 11 is ready for serious production validation, Python 3.15 defaults to a native Arm64 runtime on Windows on ARM, and browser automation in Microsoft Foundry is generally available. The video outlines what these changes mean for developers.

Microsoft Developer demonstrates how to protect an AI agent from malicious user input and instructions hidden in tool responses. The walkthrough configures Microsoft Foundry guardrails and Prompt Shields, replays both attacks, and uses traces to show where protections intervene before the agent acts.

John Savill reviews this week's Azure and AI updates, including networking, backup, monitoring, storage, and identity changes. Topics include Traffic Manager integration with Azure DNS, keyless TLS, Cosmos DB key rotation, Azure Databricks private networking, and Copilot Studio agent identity.