Azure Update - 2nd May 2025

Key Concepts

• Storage Migrations
• Compute Fleet
• Azure Functions (Python 3.12)
• API Management (Service Update Configuration, Inbound Private Endpoint)
• Azure Container Instances (Larger Instances)
• Dev Test Lab (Trusted Launch)
• Logic Apps (Agent Tool)
• Azure Firewall (Security Copilot Integration)
• Azure Virtual WAN (Next-Hop IP Support)
• Azure Front Door (WAF CAPTCHA Challenge)
• Virtual Network TAP
• Azure NetApp Files (CMK Cross-Tenant)
• MSQL Extension for VS Code (Schema Compare)
• 54B Reasoning Model
• Cost Management (Detailed Updates)
• Microsoft Dev Box (UAE North)
• API Center (RBAC, Copilot Studio, MCP, Semantic Search)

Compute

• Compute Fleet (GA): Enables provisioning up to 10,000 VMs in a single fleet.

  • Supports various VM SKUs, locations, and availability zones.
  • Includes spot and non-spot capabilities.
  • Reacts to spot instance eviction by provisioning pay-as-you-go VMs to maintain capacity.
  • Ideal for large data systems, batch workloads, and large-scale rendering.

• Azure Functions (Python 3.12 GA): Python 3.12 support is now generally available, bringing performance and feature enhancements.

API Management

• Service Update Configuration (GA): Allows configuring when and how API Management instances receive updates.

  • Update groups: Early, Default, Late.
  • Ability to get gateway updates early while keeping the rest late.
  • Specific maintenance time windows can be set.
  • Example: Test environment on early updates, production on default/late, staggered maintenance windows across instances.

• Inbound Private Endpoint (Preview): For Standard v2 tier.

  • Uses an IP within a virtual network corresponding to a specific API Management instance.
  • Supports multiple private endpoints for a single instance.
  • Allows different policies based on traffic source (public vs. private endpoint).
  • Combined with outbound VNET integration, provides end-to-end private connectivity.

Containers

• Azure Container Instances (Larger Instances in Preview):
  • Supports up to 30 vCPUs and 256 GB of RAM per container group.
  • Confidential container groups support up to 32 vCPUs and 192 GB of RAM.
  • Designed for more complex tasks, applications, and larger data sets.

Developer Tools

• Dev Test Lab (Trusted Launch in Preview):

  • Enables Trusted Launch on Gen 2 Dev Test Labs VMs.
  • Leverages virtual TPM and UEFI for secure boot.
  • Provides attestation from hardware to OS, preventing boot kits and rootkits.

• Logic Apps (Agent Tool):

  • Logic Apps can be defined as tools within Azure AI Foundry's AI agent service.
  • Simplifies adding tools to AI agents.
  • Provides templates and access to all Logic Apps connectors.

• MSQL Extension for VS Code (Schema Compare):

  • Compares schemas across multiple databases.
  • Identifies differences and applies updates.
  • Simplifies tracking and implementing schema changes.

Networking

• Azure Firewall (Security Copilot Integration):

  • Integrates with Security Copilot to assist security analysts.
  • Enables investigation of malicious traffic intercepted by Azure Firewall's intrusion detection.
  • Analyzes threats based on IDPS signals.
  • Generates recommendations based on observed activity.

• Azure Virtual WAN (Next-Hop IP Support in GA):

  • Supports IP addresses as next-hop endpoints, including Azure Load Balancers.
  • Allows NVAs to sit behind Azure Load Balancers.
  • Ensures flow symmetry, crucial for stateful inspection by NVAs.

• Azure Front Door (WAF CAPTCHA Challenge in Preview):

  • CAPTCHA challenge protects against bots, web scrapers, and brute force attacks.
  • Interactive puzzle verifies human user interaction.
  • Real-time assessment of user behavior.
  • CAPTCHA processing occurs before regular WAF rule processing.

• Virtual Network TAP (Preview):

  • Mirrors VM traffic to a network packet collector or analytics tool.
  • Minimal overhead, no performance impact on the VM.
  • No agent required on the VM, no topology changes.
  • IPv4 only.
  • Source: VM NIC.
  • Target: VM NIC or Load Balancer.
  • Use cases: Security monitoring, compliance tracking.
  • Addresses the inability to perform promiscuous sniffing in Azure virtual networks due to software-defined networking.

Storage

• Azure NetApp Files (CMK Cross-Tenant in Preview):
  • Customer-managed keys (CMK) for encrypting NetApp volumes can reside in a different tenant.
  • Useful for SaaS providers where customers want to control their keys without requiring separate service instances in their tenants.

Databases

• MSQL Extension for VS Code (Schema Compare):
  • Compares schemas across multiple databases.
  • Identifies differences and applies updates.
  • Simplifies tracking and implementing schema changes.

Miscellaneous

• 54B Reasoning Model (GA):

  • Small language model (14 billion parameters) trained for complex reasoning tasks.
  • Can run on local devices.
  • Outperforms larger open-weight models like DeepSeek R1 and Llama 70B.
  • Achieved through curated fine-tuning data sets.
  • A plus version exists with even better reasoning performance due to a longer reasoning trace.

• Cost Management (Detailed Updates in Preview, GA by June):

  • Provides better information about reserved instances, Azure savings plans, and third-party marketplace purchases.
  • Shows billing subscription ID for reserved instances and savings plans.
  • Displays cost in local currency and US dollars.
  • Improves showback and chargeback scenarios.

• Microsoft Dev Box (UAE North): Now available in the UAE North region.

• API Center Updates:

  • Granular RBAC permissions on specific API versions.
  • Integration with Copilot Studio.
  • Supports MCP servers (standard way to talk to knowledge and tools for AI applications).
  • API Center can act as a private registry for MCP servers.
  • Semantic search using natural language to discover APIs.

• Ubuntu 20.04 LTS End of Service: End of service is end of May, migrate to a supported LTS version like 24.04.

Synthesis/Conclusion

This Azure update covers a wide range of improvements and new features across compute, networking, storage, databases, and developer tools. Key highlights include the general availability of Compute Fleet and Python 3.12 support in Azure Functions, significant enhancements to API Management with service update configuration and inbound private endpoints, and the introduction of Virtual Network TAP for network traffic monitoring. The update also emphasizes AI integration with Security Copilot for Azure Firewall and the use of Logic Apps as AI agent tools. The availability of the 54B reasoning model and updates to Cost Management further enhance the platform's capabilities and usability. These updates collectively aim to provide more control, security, and efficiency for Azure users.