Browse Azure Roundups (11)

This week in Azure, the story is how teams turn agent prototypes into production systems with repeatable runtimes, safer execution, and enforceable tool governance. Updates across Foundry Agent Service, Azure Functions Serverless Agents, and Container Apps Sandboxes show practical patterns for observability, isolation, and policy-driven control over tool calls and MCP-based integrations. On the operations side, Azure Monitor expands lower-cost logging options, Application Insights improves tracing in API Management policies, and the Reliability Starter Kit provides a runnable path from SLIs/SLOs to automated response. Rounding things out are workflow improvements in azd and App Service deployment, plus concrete guidance on cost control, retrieval quality (vector indexing and reranking), and the infrastructure work that supports faster, cheaper AI serving.

This week's Azure roundup focuses on what it takes to run AI agents reliably in production: durable execution, clear guardrails, and better day-2 visibility. Highlights include a durable pattern for MCP Tasks on App Service, built-in OpenTelemetry tracing for Functions Agents, and an approval-gated operations assistant architecture that keeps humans in control of write actions. We also cover Kubernetes isolation with Kars, broader model choice through Azure AI Foundry (including Fireworks AI GA), and practical guidance on evaluation and red teaming with Foundry and PyRIT.

This week in Azure, the focus shifted from AI prototypes to production agentic apps, with GPT-5.6 now GA in Microsoft Foundry, stronger Agent Service hosting and observability, and practical IDE support in the Foundry Toolkit for VS Code. FinOps and governance got more actionable too, as MCP toolsets exposed cost and pricing data to agents, and APIM patterns tightened real-time enforcement for BYOK and token controls. On the platform side, Azure API Management introduced an AI Gateway tier in preview, Azure Monitor logs moved closer to Fabric and OneLake via zero-copy style previews, and Terraform AzureRM provider 5.0 GA landed with upgrade-impacting changes. The thread running through everything is clearer operational controls (identity, telemetry, policy, and budgets) that help teams ship AI and cloud workloads with fewer surprises.

Welcome to this week's Weekly Azure Roundup, where the theme is tightening the path from prototype to production across governance, security, and operations. AKS governance takes a Kubernetes-native step forward with CEL and Validating Admission Policy support, while networking and protection updates add practical controls like IPv6 for VPN Gateway and custom DDoS policy tuning. On the platform side, Azure Functions runtime updates and a large-scale migration case study highlight what it takes to keep serverless estates current under live load, and the agent stack continues to fill in with Foundry design tooling, delegated auth, a released Agent Framework runtime, and GA observability in Azure Monitor. We also cover new AI model options, expanding HPC capacity, and data streaming and network controls across Azure SQL and Fabric, plus hybrid updates spanning Azure Local storage and Logic Apps Hybrid on self-managed Kubernetes.

This week's Azure roundup focuses on practical ways to put AI agents behind enterprise guardrails, with Azure API Management (APIM) emerging as the control point for identity, spend limits, routing, and observability. Azure AI Foundry now adds an AI Gateway control plane that can create or associate an APIM AI Gateway from the Foundry admin console, giving platform teams a clearer governance surface while keeping the data path and policies in APIM. The posts also show how to enforce per-consumer entitlements, emit per-model token metrics to Azure Monitor and Application Insights without changing client code, and layer Azure Front Door plus WAF for defense in depth. The theme running through all of it is moving from policy to proof, where continuous telemetry and audit-ready evidence become part of operating agent platforms at scale.

Welcome to this week's Weekly Azure Roundup, where the theme is getting agentic systems and cloud operations closer to production reality. Microsoft Foundry and Agent Framework both shipped concrete building blocks (hosted agents, orchestration patterns 1.0, skills packaging, tracing, and cost controls) while Azure also leaned into "agent-ready" design workflows with Diagram Builder generating WAF checks, pricing estimates, and Bicep. On the platform side, resiliency work showed up from edge routing improvements in Azure Front Door to new operational agents in Azure Monitor and GA for Azure SRE Agent, with security and integration updates rounding out the week (external key management for Managed HSM, Service Bus network posture guidance, and Logic Apps features for legacy formats and hybrid deployments).

Welcome to this week's Azure roundup, where reliability and agentic workloads got more concrete across the platform. Chaos Studio moved closer to repeatable resilience testing with Workspaces and scenario reports tied to Azure Monitor, while Azure Monitor added Dynamic Thresholds for Prometheus and OpenTelemetry to catch anomalies without constant retuning. On the agent side, updates ranged from the kars runtime on AKS and MCP tooling patterns on Azure Functions to new security guidance on tool description poisoning, with a consistent message: automation only works in production when identity, governance, and auditability come first.

Welcome to this week's Weekly Azure Roundup, where the focus shifts from AI demos to operable systems. Azure Monitor's Copilot Observability Agent reached GA (with autonomous operations in preview), while MCP moved closer to production through Azure Functions tooling, a stateless protocol update for easier scale-out, and clearer security patterns using Entra ID and API Management. On the platform side, ACR added IPv6 dual-stack endpoints in preview and shared practical guidance on tuning image-pull performance, alongside updates across SQL and PostgreSQL tooling, confidential computing, and day-to-day ops improvements like azd and Kudu logging.

This week's Azure roundup focuses on platform migrations where waiting can turn a routine change into a risky cutover. Logic Apps Standard is preparing to move from in-proc hosting to the Azure Functions out-of-proc model as part of the path to .NET 10, so teams should validate early and avoid depending on temporary redirect behavior. On the networking side, Azure Firewall explicit proxy shifts PAC retrieval to Azure Storage with SAS and identity-based access, while large hub-and-spoke topologies get a practical playbook for moving ExpressRoute MSEE hairpin routing to AVNM mesh without weakening segmentation or inspection.

This week's Azure roundup focuses on turning agentic AI from demos into production systems, with Microsoft Foundry and Azure AI Foundry leaning into orchestration, observability, governance, and clearer token-based cost controls. On the operations side, Azure Monitor expanded its OpenTelemetry and DCR toolbox with GA features for metrics export and platform SLI/SLOs, while App Service added MCP support and improved Linux startup diagnostics to shorten troubleshooting loops. We also saw practical guidance for running AI workloads on Azure Container Apps, plus new security guardrails like Network Security Perimeter for Service Bus and LAPS for Azure Arc to standardize controls across cloud and hybrid environments.

This week's Azure roundup focuses on what it takes to run real workloads safely: small platform updates worth testing early (Functions, App Service TLS), repeatable deployment patterns, and stronger operational guardrails for AI systems. Azure AI Foundry content moved from agent demos to production plumbing like model routing evals, scalable RAG design, and App Service reference architectures with gateways, MCP scale-out, and self-healing behaviors. On the security side, incident writeups and threat research reinforced hardening priorities across identity, edge appliances, Key Vault, and software supply chains, while AKS, networking, and hybrid updates added practical tools for GitOps, safer rule changes, and lower-downtime patching with Arc.