Browse Azure Roundups (13)

Azure Arc Automatic Agent Upgrade is now generally available, letting teams automate Connected Machine agent maintenance through Azure Policy and onboarding settings, while Azure Advisor flags disconnected servers before certificate expiration forces re-onboarding. Azure Cloud HSM is rolling out hardware audit logging with independently verifiable signed records, giving security teams evidence of supported management and key operations. Developer tooling adds deployment inspection through `azd deploy --preview`, a public-preview local CLI for Logic Apps Standard, and the first stable Cosmos DB SDK for Rust, which requires migration changes for preview users. Foundry Agent Service introduces the Microsoft Copilot harness in public preview and makes long-running resilience generally available, although applications must still save progress and prevent duplicate actions after restarts. Together, these updates emphasize automated operations and reviewable deployment and security workflows

Welcome to this week's Azure roundup, covering sovereign AI infrastructure, new monitoring capabilities, and upgrade planning. Azure Local announcements expand options for local inference and disconnected operations, while generally available registry and Azure Monitor metrics help teams investigate traffic, throttling, storage usage, and telemetry growth. We review the December retirement of Foundry workflows and the September 2027 Java support deadline for App Service and Functions, then explore agent development, database modernization, and private connectivity, distinguishing available features from previews and planned releases.

Welcome to this week's Weekly Azure Roundup, where the common thread is making change safer: governed data access, more predictable resiliency operations, and production-grade AI agent tooling. Azure Databricks cross-engine ABAC reaches GA to keep Unity Catalog policies enforced even for external Spark reads, while VMSS Automatic Zone Balance and Cosmos DB region-move guidance help teams automate infrastructure shifts with clearer guardrails. On the AI side, MCP Server 3.0, threat modeling guidance, SRE Agent workflows, and Foundry updates (including GPT-6 GA) all point toward agents that are easier to audit, constrain, and operate in real environments.

This week's Azure roundup focuses on making production operations more predictable across clusters, workflows, and clouds. AKS adds multi-NIC capabilities for stricter network separation, Argo CD GitOps on AKS reaches GA, and Azure Arc simplifies onboarding for EKS and GKE to unify policy and inventory. On the app and integration side, Functions previews bring structured, durable AI workflows and agent bindings, while API Management expands into MCP tool governance and requires action on service-tag network rules for classic tiers. Cost and reliability updates round out the week with Databricks cost controls, measurable token economics for self-hosted LLM serving, and concrete resiliency steps like Site Recovery for Azure Local plus new PostgreSQL backup options.

This week's Weekly Azure Roundup focuses on what it takes to run action-taking AI agents like real production services: clear ownership, cross-tenant identity, and audit-ready controls. Microsoft shared concrete multitenant governance patterns (central visibility with federated control) and deeper guidance on sandboxing agent execution using AKS or Azure Container Apps, plus managed MCP tools like Playwright Workspaces with strong evidence capture. On the platform side, Azure AI Foundry expanded routing, tool management, and agent features, while data teams got practical updates across Azure SQL vector indexing, Fabric MCP servers and modernization paths, and Databricks governance for coding agents. The rest of the stack rounded things out with new VM SKUs, private AI connectivity via ExpressRoute, clearer VM lifecycle rules, and a steady stream of security, FinOps, and developer tooling improvements.

Welcome to this week's Azure roundup, where the focus shifted from agent prototypes to agent platforms you can standardize and run. Microsoft Foundry expanded model options (including new GPT-6 SKUs and Claude Opus 5.5), added production primitives like Routines scheduling, hosted long-running execution, and deeper trace-driven evaluation and optimization. In parallel, Azure doubled down on controlling blast radius with Entra-backed identities and security guidance after real-world service principal abuse, while the container stack (AKS and Container Apps Sandboxes) pushed stronger isolation and scaling patterns for AI workloads. We also cover practical platform work: managed connectors in Azure Functions (preview), resilience validation beyond diagrams, experimental Bicep doc generation, and several storage and integration gotchas that can affect day-2 operations.

This week's Azure updates focus on making platforms easier to run, easier to govern, and safer to change. Plan for an action-required Azure Monitor Workspace shift to spec-compliant PromQL regex matching, and take a look at Azure Policy custom policy versioning to roll out guardrails with less risk. On the build-and-ship side, guided Copilot flows in VS Code, GA TLS improvements for Functions Flex Consumption, and Durable Functions-based dynamic workflows show a move toward repeatable delivery and long-running orchestration. The agent story gets more concrete too, with MCP hosting and tool-call governance patterns, Foundry setup and observability guidance, and Databricks pushing continuous evaluation and retention controls as standard production hygiene.

This week's Azure roundup focuses on turning enterprise AI from pilots into repeatable platform work. Microsoft sharpened the recommended path: start with Azure landing zones for identity, networking, and policy, then use Microsoft Foundry to operationalize agents and Retrieval-Augmented Generation (RAG) with consistent guardrails. Governance and cost control are treated as day-2 requirements, with token limits, rate controls, and Azure API Management's AI Gateway highlighted as practical enforcement points. If you are building internal copilots, the guidance reads like a deployment checklist for standard auth (Microsoft Entra ID), telemetry (Azure Monitor), and spend attribution you can tie back to outcomes.

Welcome to this week's Azure roundup, where the story centers on making AI agents and hybrid fleets operable, governable, and cost-aware. GPT-6 Astra reached general availability in Microsoft Foundry with production-ready deployment and governance options, while multiple guides dug into context engineering, egress lockdown, and secure agent infrastructure patterns for Kubernetes and edge. On the platform side, Azure Firewall explicit proxy went GA, Azure Arc shipped GA improvements for Arc-enabled Kubernetes certificates and Azure Virtual Desktop Hybrid, and API Management advanced GitOps workflows plus preview spend controls and OTLP telemetry for AI gateways.

This week in Azure, the focus shifted from agent prototypes to the concrete work of shipping and operating agents in production using Azure AI Foundry, Microsoft Agent Framework, and MCP-based tool calling. Updates covered deployment and governance patterns (evaluation, tracing, and secret handling), plus real-world operational upgrades like Foundry Hosted Agents via azd and Azure SRE Agent VNet integration and Live Reports. Security guidance added urgency by calling out AI gateways and orchestrators as high-value targets, while networking and platform news (BGP route summarization, DNS plus Traffic Manager linked records, and zonal APIM Standard v2) rounded out the reliability story.

This week's Azure roundup centers on making production systems easier to run: agent runtimes get stronger isolation and safer tool access, while platform updates improve how you modernize apps and review infrastructure changes. Azure Web PubSub adds a chat-native layer in preview, App Service Managed Instance reaches GA for minimal-change migrations, and Deployment Stacks What-If now supports durable, reviewable diffs. On the reliability side, GitHub's outage write-up is a timely reminder to design for capacity and retries, and core platform updates (DNS, VM CPU controls, and Foundry model tooling) round out a week focused on practical ops and governance.

This week in Azure, the story is how teams turn agent prototypes into production systems with repeatable runtimes, safer execution, and enforceable tool governance. Updates across Foundry Agent Service, Azure Functions Serverless Agents, and Container Apps Sandboxes show practical patterns for observability, isolation, and policy-driven control over tool calls and MCP-based integrations. On the operations side, Azure Monitor expands lower-cost logging options, Application Insights improves tracing in API Management policies, and the Reliability Starter Kit provides a runnable path from SLIs/SLOs to automated response. Rounding things out are workflow improvements in azd and App Service deployment, plus concrete guidance on cost control, retrieval quality (vector indexing and reranking), and the infrastructure work that supports faster, cheaper AI serving.

This week's Azure roundup focuses on what it takes to run AI agents reliably in production: durable execution, clear guardrails, and better day-2 visibility. Highlights include a durable pattern for MCP Tasks on App Service, built-in OpenTelemetry tracing for Functions Agents, and an approval-gated operations assistant architecture that keeps humans in control of write actions. We also cover Kubernetes isolation with Kars, broader model choice through Azure AI Foundry (including Fireworks AI GA), and practical guidance on evaluation and red teaming with Foundry and PyRIT.