Azure Update - 23rd January 2026

Azure Update - January 23rd, 2024

Key Concepts: AKS Deployment Safeguards, v2 NAT Gateway, User Delegated SAS, Azure File Sync, App Volume Groups (Oracle), Azure Load Testing, Azure App Testing, GitHub Copilot SDK, Foundry IQ, Fabric IQ, Work IQ.

Compute Updates

Azure Kubernetes Service (AKS) now features Generally Available (GA) deployment safeguards, specifically new Pod Security Standards. These standards allow centralized management of baseline, restricted, and privileged profiles across all namespaces. Configurations controlled include privileged containers, exposed capabilities, mount types, volume usage, and root access. These standards can be enabled on both new and existing clusters, with the option to exclude specific namespaces as needed. This provides granular control over security posture within AKS deployments.

Networking Updates

A significant update involves the deprecation of the standard v2 NAT Gateway and its associated public IP. The previous NAT Gateway version had limitations, particularly lacking support for zone-redundant configurations. The new v2 NAT Gateway does support zone redundancy, enabling architectures that weren’t previously feasible. Key specifications include 100 Gbps throughput, 10 million packets per second, dual-stack support (up to 16 IPv4/IPv6 addresses for outbound traffic source), and the ability to enable flow logs for traffic insight. This eliminates the need to align architectures with specific zonal subnets, simplifying network design.

Storage Updates

User Delegated Shared Access Signatures (SAS) are now available for Azure Tables, Files, and Queues, extending functionality previously available for Blob storage. User Delegated SAS is more secure than Account or Service SAS because it’s signed by the delegated identity (Entra ID account) creating it, limiting permissions to those of the creating identity and having a maximum validity of 7 days. This contrasts with Account/Service SAS, which are signed by the storage account keys, granting broader permissions.

Azure File Sync is now available in the Israel Central region. Azure File Sync allows Windows file servers (SMB shares) to synchronize with Azure File Shares, providing a near-infinite storage capacity. When local SMB share capacity is exhausted, content is tiered to the Azure File Share, retrieved on demand with increased latency. This service’s availability in Israel Central addresses data residency requirements and reduces latency for users in that region.

For Azure NetApp Files, the App Volume Group for Oracle now supports data protection volume replication, both cross-zone and cross-region. Replication transmits only changed blocks, optimizing efficiency. Currently, this functionality is enabled via the REST API. The goal is to enhance data safeguarding and ensure continuous availability for Oracle databases.

Miscellaneous Updates

Azure Load Testing is now available in Switzerland North. This managed service facilitates high-scale load testing using Apache JMeter, Locust scripts, or a web-based experience that generates scripts. It provides detailed analytics to identify performance bottlenecks.

Azure App Testing has received a reporting update (GA). This includes Playwright workspaces reporting for cloud-scale web testing, offering enhanced debugging capabilities. Users can specify a storage account to store debugging data and then utilize a trace viewer within the portal for in-depth analysis and all-out reporting.

GitHub Copilot now has an SDK, extending its agentic capabilities beyond VS Code integration. Developers can now integrate Copilot into their own applications and experiences, leveraging advanced features like multi-step planning, multiple model support, and MCP (Microsoft Copilot Platform) servers to build custom agents.

AI & Intelligence Updates

A deep dive video was released on Foundry IQ, explaining how it builds upon existing Azure AI Search to enhance AI app and agent interaction with knowledge, accelerating development. The update also briefly touched on the relationship between Foundry IQ, Fabric IQ, and Work IQ.

Notable Quotes

There were no explicitly stated quotes in the transcript.

Data & Statistics

• NAT Gateway v2: 100 Gbps throughput, 10 million packets per second.
• User Delegated SAS: Validity limited to 7 days.
• NAT Gateway v2: Supports up to 16 IPv4/IPv6 addresses.

Logical Connections

The update follows a logical flow, starting with compute, then networking, storage, and finally miscellaneous services. The AI section is presented separately as a focused deep dive. Each section builds upon previous Azure capabilities, demonstrating a continuous evolution of the platform. The updates often address limitations of previous versions, such as the zonal restrictions of the previous NAT Gateway.

Synthesis/Conclusion

This Azure update highlights a focus on enhancing security, scalability, and developer flexibility. The introduction of features like User Delegated SAS and the v2 NAT Gateway demonstrate a commitment to robust security practices and improved architectural options. The expansion of regional availability (Azure File Sync in Israel Central, Azure Load Testing in Switzerland North) broadens access to key services. The GitHub Copilot SDK empowers developers to integrate AI-powered assistance directly into their applications. Overall, the updates aim to provide a more secure, scalable, and versatile platform for building and deploying applications on Azure.