Browse All Azure Content (716)

John Edward outlines practical Azure architecture best practices for enterprise applications, covering the Azure Well-Architected Framework, scalability and high availability patterns, security with Zero Trust, observability, infrastructure as code, CI/CD, cost controls, networking, disaster recovery, and governance.

This week's Azure roundup focuses on practical ways to put AI agents behind enterprise guardrails, with Azure API Management (APIM) emerging as the control point for identity, spend limits, routing, and observability. Azure AI Foundry now adds an AI Gateway control plane that can create or associate an APIM AI Gateway from the Foundry admin console, giving platform teams a clearer governance surface while keeping the data path and policies in APIM. The posts also show how to enforce per-consumer entitlements, emit per-model token metrics to Azure Monitor and Application Insights without changing client code, and layer Azure Front Door plus WAF for defense in depth. The theme running through all of it is moving from policy to proof, where continuous telemetry and audit-ready evidence become part of operating agent platforms at scale.

Lee Stott invites AI engineers to a Microsoft Foundry Discord round table on using the Browser Automation Tool (BAT) to let agents drive real browser workflows via Playwright Workspaces, with a focus on setup basics, practical use cases, and the guardrails needed for responsible, auditable automation.

Jordan Selig explains how Microsoft Foundry’s new AI Gateway control plane lets platform teams create or associate an Azure API Management (APIM) gateway from the Foundry admin console, while keeping the runtime on Azure App Service. The post breaks down what Foundry now governs, what still belongs in APIM, and how to adapt an existing App Service agent sample.

Elliot Volkman shares Microsoft Security’s Black Hat USA 2026 agenda, focused on how attackers abuse “trust paths” across software supply chains, identities, cloud services, and AI systems. The post highlights sessions on npm supply chain campaigns, Azure Automation research, GitHub-focused detection ideas, and hands-on skilling with Defender and Sentinel.

VimalVerma outlines Hypervelocity Engineering (HVE) as an operating model for building and continuously evolving Azure AI Landing Zones, with a focus on platform engineering, Infrastructure as Code, Policy as Code, and security-by-design so enterprise AI platforms can scale without losing governance.

redsa explains how Azure Cobalt CPUs enable per-VM power monitoring and workload-aware power capping in Azure datacenters, combining hardware and software changes across the stack to protect critical VM performance while improving power efficiency and allowing higher power oversubscription.

Lee Stott invites AI engineers to a Microsoft Foundry Discord round table on scaling agent apps beyond demos, focusing on how Foundry Toolbox, Skills, and Tool Search reduce tool sprawl, prompt bloat, and auth plumbing by centralizing tools behind a governed MCP endpoint with runtime discovery.

Rafia Aqil explains Microsoft’s IQ Platform (Work IQ, Fabric IQ, and Foundry IQ) and how it adds business and organizational context to AI systems. The post breaks down Fabric’s OneLake-based data layer, ontology-driven meaning, and Foundry IQ’s managed services for RAG, memory, ranking, and citations.

Pablo Lopes announces a free, open-source course that guides developers through modernizing a legacy ASP.NET app to .NET 10 using the GitHub Copilot modernization agent, including assessment and planning artifacts, an execution workflow, and a final deployment to Azure App Service.

Pritha Das announces a public preview feature that adds autoscale to Azure Event Grid namespaces, letting Standard tier namespaces automatically adjust Throughput Units based on real-time utilization while you set the minimum and maximum bounds.

Microsoft Developer walks through what’s new in Data API builder (DAB) 2.0, focusing on how it sits between an app and a database to expose APIs without writing custom CRUD endpoints. The overview highlights new secrets management, broader authentication options, improved authorization controls, and integration points.

Lily Ma explains why synchronous MCP tool calls break down for long-running work, and shows a practical Azure Functions + Durable Functions pattern you can use today while the MCP Tasks extension rolls out across clients and SDKs.

jordanselig explains the new stable Enterprise-Managed Authorization (EMA) extension for MCP and how it differs from a centrally governed OAuth setup using Microsoft Entra ID and Azure App Service Authentication. The post includes a working sample, a local EMA lab, and practical security details for deploying an Entra-governed MCP endpoint.

Noa Kuperberg breaks down how billing works for the Azure Copilot Observability Agent in Azure Monitor, including what gets metered, which operations are billable, where users can see per-response usage, and how to track costs in Azure Cost Management alongside standard Azure Monitor charges.

Suma SaganeGowda explains how Microsoft 365 built COSMIC, an internal platform layer on Azure Kubernetes Service (AKS), to standardize provisioning, deployments, security/compliance guardrails, and observability across globally distributed services so product teams can ship faster without taking on Kubernetes operational overhead.

mk_sunitha explains a secure pattern for calling Microsoft Fabric REST APIs from User Data Functions (UDFs), using a service principal plus Azure Key Vault to keep secrets out of application code while still enabling governed automation like triggering Fabric pipelines and managing workspaces.

Manasa Ramalinga lays out a practical reference map for governing enterprise AI and autonomous agents, focusing on how to turn responsible AI policy into enforceable controls, runtime visibility, and audit-ready proof using Microsoft’s governance, security, and observability services.

jordanselig shares a reference implementation for giving an AI agent both short-term conversation history and durable, user-scoped memory on Azure App Service, using Redis for bounded session history and Cosmos DB vector search for recall, with keyless auth via managed identity and a one-command azd + Bicep deployment.

Giles Odigwe announces the production release of Agent Skills for Python in Microsoft Agent Framework, explaining how to package reusable domain expertise (instructions, resources, and scripts) that agents can load on demand, with governance features like approvals, filtering, caching, and controlled script execution.

Davide Mauri shares a practical first tip for developers who are new to Microsoft Azure and want to start building a full-stack AI application while keeping costs under control, pointing viewers toward Azure’s Budget Bytes guidance and related Azure services.

alyssaschimm announces a public preview in Azure Monitor that adds advanced platform metrics for Azure Storage, giving container-level visibility into blob capacity and blob count so teams can investigate growth drivers, set better alerts, and improve cost and capacity planning without building custom reporting pipelines.

Krishna Roy shows how to load test Copilot Studio agents by simulating real multi-turn conversations over Direct Line (HTTP + WebSockets) with Locust, then running the same workload in Azure Load Testing. The post covers measuring TTFB vs full turn completion, handling turn.complete, file uploads, and secret handling with Key Vault.

Pamela Fox shows how to build an MCP server that returns more than plain text: image thumbnails as binary tool results and an interactive MCP app (a carousel) rendered inside VS Code, so GitHub Copilot can search, inspect, and present curated image results.

Thomas Maurer explains what AKS on bare metal is and where it fits for on-premises, edge, and sovereign deployments, focusing on how it keeps the AKS experience while running directly on physical hardware. He also outlines a deployment path using Azure Local SFF with Arc-based management.

hetvip explains how to use Apache Airflow as an orchestrator for Azure Container Apps (ACA) Jobs, enabling dependency ordering, parallel fan-out, and per-task retries. The post introduces two open-source templates and a shared Airflow operator that triggers ACA Job executions via the ACA Jobs API.

goupadhy announces a preview of autoscaling for Microsoft Fabric Virtual Network (VNet) Data Gateway, explaining how gateway node counts scale in and out based on workload signals to balance performance, reliability, and cost, plus where admins configure limits and review diagnostics logs.

akhilkarmalkar announces Azure Front Door edge actions (public preview), a way to run lightweight JavaScript during request processing at Microsoft’s global edge. The post explains where edge actions run in the Front Door pipeline, what scenarios they enable (routing, headers, auth checks), and how Hyperlight micro-VM isolation is used to keep execution secure.

Simona Liao, Wendy Breiding, and Yun Jung Choi introduce Visual Studio 18.8’s built-in Agent Skills, a set of reusable Copilot capabilities for common .NET and Azure tasks. The post explains where to find and enable skills, why they’re off by default, and highlights starter skills for API work, performance reviews, Azure deployments, and Kusto queries.

arindamc shows how to build a “row-to-intelligent-action” pipeline in Microsoft Fabric: capture Azure SQL changes via CDC into Fabric Eventstreams, reshape them with DeltaFlow, enrich each micro-batch in Spark Structured Streaming using AI Functions for PySpark, and publish Business Events for real-time routing and dashboards.

Lee Stott tours Microsoft’s open-source course on taking AI agents from prototype to production using Microsoft Agent Framework and Microsoft Foundry, covering agent design, multi-agent orchestration, evaluation, deployment, data sovereignty, and tool governance with concrete commands and code patterns.

jisunchoi explains how to replace “multi-model chaos” with a governed AI gateway on Azure using Azure API Management, covering cost controls (token quotas and budget-based model downgrades), security hardening (managed identity + private endpoints), observability with Application Insights, and a Terraform-based deployment you can integrate with GitHub Copilot.

James Rempt explains how Azure Dev/Test pricing (included with eligible Visual Studio subscriptions) can reduce the cost of running non-production Azure environments, making it easier to provision production-like resources for testing, validation, and CI/CD workflows without letting cloud spend slow down iteration.

abhimittal shows how to use Azure API Management (APIM) as an AI gateway in front of Azure AI Foundry to capture per-model token usage for governance. The post walks through an inbound policy that authenticates with managed identity, emits token metrics to Azure Monitor/Application Insights, and adds edge protection with Azure Front Door + WAF.

EldertGrootenboer breaks down Azure Service Bus reliability as a set of layered choices rather than a single SLA number, explaining what each layer protects you from and where the real trade-offs show up when you plan for zone and regional failures.

kinfey shares a reference implementation for running long-lived autonomous coding agents from Microsoft Teams, using MCP as the control plane and Azure Container Apps dynamic sessions as a Hyper-V-isolated sandbox. The post focuses on multi-agent orchestration, deployment reliability under platform timeouts, and practical security guardrails like auth, allowlists, private ingress, and managed identities.

Welcome to this week's Weekly Azure Roundup, where the theme is getting agentic systems and cloud operations closer to production reality. Microsoft Foundry and Agent Framework both shipped concrete building blocks (hosted agents, orchestration patterns 1.0, skills packaging, tracing, and cost controls) while Azure also leaned into "agent-ready" design workflows with Diagram Builder generating WAF checks, pricing estimates, and Bicep. On the platform side, resiliency work showed up from edge routing improvements in Azure Front Door to new operational agents in Azure Monitor and GA for Azure SRE Agent, with security and integration updates rounding out the week (external key management for Managed HSM, Service Bus network posture guidance, and Logic Apps features for legacy formats and hybrid deployments).

supriyas lays out a practical, end-to-end lifecycle for building enterprise AI agents, using a banking “loan agent” example to show how to design guardrails, build with safety controls, test with evaluations and red teaming, deploy gradually, and continuously monitor and iterate using Microsoft Foundry and Azure services.

Abhishek Tiwari explains how Azure Front Door’s tenant isolation work (completed after the October 2025 incidents) reduces blast radius in a dense, multi-tenant edge fleet, using configuration isolation and a micro-cellular, layered ingress-sharding design to keep one tenant’s bad config or traffic from impacting others.

Arturo Quiroga shares major updates to the open-source Azure Architecture Diagram Builder, including a multi-turn Architecture Chat, a Blueprint (whiteboard-style) rendering mode, and a new MCP server interface so AI agents can generate, validate, cost, and render Azure architectures programmatically.