Azure Update 20th March 2026

Key Concepts

• Generative AI & Agents: Foundry Agent Service, AI Observability, and multi-modal models (GPT-4o mini/nano).
• Data & Analytics: Microsoft Fabric (Mirroring, Shortcuts, Fabric IQ), Azure Databricks (Lakeflow Connect, Unity Catalog Federation).
• Compute & Infrastructure: AKS (Azure Kubernetes Service), Azure Batch, Azure VMware Solution, and Managed Identities.
• Security & Governance: Entra ID integration, Web Application Firewall (WAF), and Entra ID Backup/Recovery.
• Database: Azure SQL Database (Versionless TDE), SQL Database Projects in VS Code.

1. Compute and Infrastructure Updates

• AKS (Azure Kubernetes Service): The Flatcar Container Linux-based node pools are being retired on June 8, 2026. Users are advised to migrate to Azure Linux or Ubuntu.
• Azure Batch: Several retirements are scheduled for September 30, 2026, including NVv3 and NVv4 GPU-enabled SKUs. Windows Server 2016 images will be retired on January 12, 2027. "Low priority" VMs are officially replaced by Spot VMs.
• Azure VMware Solution: AV36P and AV52 nodes are retiring on June 30, 2029.
• Azure Red Hat OpenShift: Now supports Managed Identities in General Availability (GA), eliminating the need to manage secrets or keys for cross-resource communication.
• Storage: Standard Hard Disk Drives (HDD) will be retired on September 8, 2028, with automatic conversion to Standard SSDs.

2. Data and Analytics

• Azure Databricks:
  • Lakeflow Connect: Now in GA with a free tier (100 free DBUs per workspace/day), allowing ingestion from SaaS apps (Dynamics 365, ServiceNow) and databases (SQL Server, Oracle, etc.).
  • Unity Catalog Federation: Now in preview, allowing Databricks to access data directly from Microsoft Fabric’s OneLake without data duplication.
• Microsoft Fabric:
  • Mirroring: Now supports SharePoint lists and Trino (preview), and Oracle/SAP Datasphere (GA).
  • Shortcuts: Transformations are now in GA, allowing structured files (CSV, Parquet, JSON) to be converted to Delta Lake format on the fly.
  • Fabric IQ: Introduces semantic models, ontologies, and Data Agents (GA), which allow AI to understand business context and perform operational tasks.

3. AI and Agent Services

• Foundry Agent Service (GA): A managed platform for building, running, and observing AI agents. It supports no-code (prompt agents) and coded frameworks (LangGraph). It includes native Live Voice capabilities (700+ voices, 140 locales).
• Foundry Observability (GA): Provides critical trust metrics for AI, including:
  • Groundedness: Ensuring responses are based on real data.
  • Relevance/Coherence: Evaluating the quality of retrieval.
  • Tracing: End-to-end monitoring via Azure Monitor.
• Model Updates:
  • Nvidia Neatron Models: Ranging from "Nano" (low latency) to "Ultra" (high reasoning).
  • GPT-4o mini/nano: Now available in Foundry; "mini" is also integrated into GitHub Copilot for multimodal, tool-using tasks.

4. Security and Governance

• Web Application Firewall (WAF): Default Rule Set 2.2 is now in GA for both App Gateway and Front Door. It acts as a superset of the OWASP core rule set, enhanced with Microsoft Threat Intelligence.
• Blob Storage: SFTP access now integrates with Entra ID for permissioning, supporting Managed Identities to eliminate password/key management.
• Azure SQL Database: Versionless Transparent Data Encryption (TDE) is now in GA. This allows for seamless key rotation without needing to update the consuming resource.
• Entra ID Backup & Recovery (Preview): Backs up the state of users, groups, apps, and policies daily, maintaining a 5-day retention period to revert malicious or accidental configuration changes.

5. Synthesis and Conclusion

The updates from March 20th highlight a strategic shift toward managed, identity-based security and AI-driven data operations. Microsoft is heavily investing in the "Agentic" era, providing the infrastructure (Foundry) and the observability tools necessary to move AI from experimental to enterprise-grade. Simultaneously, the consolidation of data via Fabric and the simplification of database management (Versionless TDE) reflect a broader push to reduce operational overhead for developers and data engineers. Users should prioritize migrating away from retiring compute SKUs and adopting Managed Identities to align with the platform's long-term security roadmap.