Browse All Community (370)

Rafia Aqil outlines how to enable Azure Databricks’ Compliance Security Profile (CSP) for HIPAA workloads, including the September 1, 2026 deadline, required prerequisites like Azure VNet encryption and supported VM series, and a rollout approach to validate cluster startup and end-to-end connectivity before production.

stevenbucher introduces a new Compliance Substate property for Azure Policy exemptions, making it possible to see whether exempt resources would be compliant or non-compliant if the exemption were removed. The post shows where to enable the column in the Azure portal and how to query the field at scale using Azure Resource Graph.

Chris Noring explains how to investigate unexpected GitHub Copilot Enterprise AI-credit spend and then control it using GitHub Billing guardrails. The post walks through identifying the SKU driving costs, attributing usage to organizations and cost centers, and applying budgets, alerts, and per-user limits without breaking productive workflows.

prateekwrites explains why “cost per token” is a misleading metric for agentic systems, and proposes “cost per accepted task” as the unit that matters. The post maps this idea to an Azure reference architecture using APIM’s GenAI gateway, Azure AI Foundry evaluations, and a policy loop driven by telemetry and alerts.

Nora Zhan introduces “Physical-World Intelligence” and explains how GeoAI combines geospatial data (weather, satellite imagery, sensors, and maps) with enterprise context and AI. The article outlines Microsoft Foundry’s geospatial model catalog, Planetary Computer Pro as a GeoAI data plane, and a GeoAI SDK for production-scale inference workflows.

tonimontez explains how to govern GitHub Copilot’s usage-based spend using GitHub’s native budget controls first, then adds an Azure API Management gateway in front of an Azure AI Foundry (Azure OpenAI) deployment for real-time, token-granular quotas and per-developer telemetry.

vladvino announces the public preview of the AI Gateway tier for Azure API Management, focused on publishing and governing AI models and MCP servers. The post explains the new portal experience, policy-card governance (rate limits, quotas, Content Safety, fallback), and OpenTelemetry token metrics to destinations like Application Insights.

Kumar Kaushal demonstrates a transitional Azure networking pattern for phased migrations where an application is hard-coded to a legacy private IP. The lab uses Private Link Service Direct Connect plus a Private Endpoint and a site-to-site VPN so Azure-hosted tiers can keep calling the same on-premises address during the interim phase.

Lee Stott explains why the Model Context Protocol (MCP) is becoming the standard way AI agents connect to tools and data, then shows minimal runnable MCP server examples in Python and TypeScript plus practical guidance for VS Code hosting, security, and production operations.

Naba Kumar and the MLVC team announce the open-source release of MLVC, a learned video codec that replaces traditional codec primitives with end-to-end neural compression. The post shares bitrate savings versus H.264/H.265, real-time performance targets on commodity NPUs, and what’s included in the GitHub release (models, weights, training scripts, and conversion tooling).

carlottacaste shares a short walkthrough of the Foundry Toolkit for Visual Studio Code and a companion VS Code Learn course, focused on keeping model selection, prompt iteration, and agent development inside VS Code, with links to a full video playlist and a featured setup episode.

AbodeSaafan explains how the Azure Logic Apps team migrated roughly 60,000 per-customer Azure Functions apps from the end-of-life v1/v2 runtime to Functions v4 (isolated worker) under live load, using shadow traffic, strict parity checks, and a progressive rollout with fast rollback and careful retirement of the old fleet.

stevenbucher explains how Azure Policy for Kubernetes can now enforce policies using Kubernetes Validating Admission Policy (VAP) with CEL, via Gatekeeper’s integration. The post contrasts the older webhook/Rego flow with in-process validation, then walks through packaging a CEL constraint template into an Azure Policy definition and rolling it out across AKS clusters.

OfirSarfaty announces a public preview feature for Azure DDoS Protection: custom policies that let teams set protocol-specific detection thresholds and manage per-resource mitigation behavior, while keeping existing Azure Monitor visibility and DDoS telemetry.

junjieli introduces the Foundry Agent Canvas (public preview), a GitHub Copilot App extension that lets developers discover resources, scaffold and configure a Foundry hosted agent, test it locally with an embedded Agent Inspector, and deploy it to Foundry Agent Service using azd-driven workflows.

anandgmenon walks through running Azure Logic Apps Hybrid on a self-managed RKE2 Kubernetes cluster, including how to provide an ingress IP with MetalLB, connect the cluster to Azure Arc, install the Container Apps extension, and fix the RKE2-specific DNS and inotify issues that can break deployments.

brauerblogs shares a reminder to register for Microsoft’s “Path to Production for Agents” webinar series (July 27–28), focused on taking AI agent solutions from experimentation to secure, scalable production with guidance on governance, platform design, AgentOps, and multi-agent architecture patterns.

saniya0307 explains how Azure Local adds iSCSI SAN integration alongside Fibre Channel, enabling hybrid (S2D + SAN) and SAN-only disaggregated deployments so organizations can reuse existing storage arrays, scale compute and storage independently, and modernize virtualization infrastructure with Azure-consistent management.

Kalaivanan explains how to use Azure API Management (APIM) as a control plane for Model Context Protocol (MCP) servers, focusing on enterprise-ready authentication, access control, observability, and governance. The post lays out practical patterns for putting APIM in front of MCP endpoints and using Entra ID, OAuth flows, and API Center for discovery.

Ricardo Duncan describes how CDK Global migrated a business-critical automotive CRM platform to Azure SQL Managed Instance, including the architecture choices, migration approach, and operational practices used to move more than 1,000 databases with minimal downtime.

richpaw describes a reference architecture for running Microsoft Discovery on a Windows VM in Azure and connecting it to an Azure CycleCloud HPC cluster via Azure NetApp Files (NFS) and SSH, so agentic workflows can submit Slurm jobs, read/write POSIX files, and stay inside a private network boundary.

richpaw explains how Microsoft Discovery combines agentic AI with Azure HPC to speed up semiconductor EDA workflows, focusing on closed-loop orchestration across tools, data, and compute so teams can triage regressions, explore physical design tradeoffs, and converge on signoff faster.

Ron Frenkel explains how the Azure Copilot Observability Agent (now generally available in Azure Monitor) helps teams investigate Azure AI Foundry and GenAI agent issues using Application Insights telemetry, including failures, latency, tool-call errors, token spikes, and dependency bottlenecks with evidence-backed root cause analysis.

Pamela Fox announces MCP Live, a free livestream focused on the Model Context Protocol (MCP), including updates from MCP maintainers and teams at Microsoft and GitHub, plus sessions on building MCP servers in VS Code and upcoming MCP authorization work.

Lee Stott invites AI engineers to a Microsoft Foundry Discord round table on using the Browser Automation Tool (BAT) to let agents drive real browser workflows via Playwright Workspaces, with a focus on setup basics, practical use cases, and the guardrails needed for responsible, auditable automation.

Jordan Selig explains how Microsoft Foundry’s new AI Gateway control plane lets platform teams create or associate an Azure API Management (APIM) gateway from the Foundry admin console, while keeping the runtime on Azure App Service. The post breaks down what Foundry now governs, what still belongs in APIM, and how to adapt an existing App Service agent sample.

VimalVerma outlines Hypervelocity Engineering (HVE) as an operating model for building and continuously evolving Azure AI Landing Zones, with a focus on platform engineering, Infrastructure as Code, Policy as Code, and security-by-design so enterprise AI platforms can scale without losing governance.

redsa explains how Azure Cobalt CPUs enable per-VM power monitoring and workload-aware power capping in Azure datacenters, combining hardware and software changes across the stack to protect critical VM performance while improving power efficiency and allowing higher power oversubscription.

Lee Stott invites AI engineers to a Microsoft Foundry Discord round table on scaling agent apps beyond demos, focusing on how Foundry Toolbox, Skills, and Tool Search reduce tool sprawl, prompt bloat, and auth plumbing by centralizing tools behind a governed MCP endpoint with runtime discovery.

Rafia Aqil explains Microsoft’s IQ Platform (Work IQ, Fabric IQ, and Foundry IQ) and how it adds business and organizational context to AI systems. The post breaks down Fabric’s OneLake-based data layer, ontology-driven meaning, and Foundry IQ’s managed services for RAG, memory, ranking, and citations.

Pritha Das announces a public preview feature that adds autoscale to Azure Event Grid namespaces, letting Standard tier namespaces automatically adjust Throughput Units based on real-time utilization while you set the minimum and maximum bounds.

jordanselig explains the new stable Enterprise-Managed Authorization (EMA) extension for MCP and how it differs from a centrally governed OAuth setup using Microsoft Entra ID and Azure App Service Authentication. The post includes a working sample, a local EMA lab, and practical security details for deploying an Entra-governed MCP endpoint.

Noa Kuperberg breaks down how billing works for the Azure Copilot Observability Agent in Azure Monitor, including what gets metered, which operations are billable, where users can see per-response usage, and how to track costs in Azure Cost Management alongside standard Azure Monitor charges.

Suma SaganeGowda explains how Microsoft 365 built COSMIC, an internal platform layer on Azure Kubernetes Service (AKS), to standardize provisioning, deployments, security/compliance guardrails, and observability across globally distributed services so product teams can ship faster without taking on Kubernetes operational overhead.

Manasa Ramalinga lays out a practical reference map for governing enterprise AI and autonomous agents, focusing on how to turn responsible AI policy into enforceable controls, runtime visibility, and audit-ready proof using Microsoft’s governance, security, and observability services.

jordanselig shares a reference implementation for giving an AI agent both short-term conversation history and durable, user-scoped memory on Azure App Service, using Redis for bounded session history and Cosmos DB vector search for recall, with keyless auth via managed identity and a one-command azd + Bicep deployment.

alyssaschimm announces a public preview in Azure Monitor that adds advanced platform metrics for Azure Storage, giving container-level visibility into blob capacity and blob count so teams can investigate growth drivers, set better alerts, and improve cost and capacity planning without building custom reporting pipelines.

Krishna Roy shows how to load test Copilot Studio agents by simulating real multi-turn conversations over Direct Line (HTTP + WebSockets) with Locust, then running the same workload in Azure Load Testing. The post covers measuring TTFB vs full turn completion, handling turn.complete, file uploads, and secret handling with Key Vault.

Pamela Fox shows how to build an MCP server that returns more than plain text: image thumbnails as binary tool results and an interactive MCP app (a carousel) rendered inside VS Code, so GitHub Copilot can search, inspect, and present curated image results.

hetvip explains how to use Apache Airflow as an orchestrator for Azure Container Apps (ACA) Jobs, enabling dependency ordering, parallel fan-out, and per-task retries. The post introduces two open-source templates and a shared Airflow operator that triggers ACA Job executions via the ACA Jobs API.