Azure Update - IGNITE SPECIAL - 21st November 2025

Key Concepts

• Azure Kubernetes Service (AKS): Managed Kubernetes service.
• Azure Front Door: Global, scalable entry point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications.
• Ignite: Microsoft's annual technology conference.
• eBPF (extended Berkeley Packet Filter): A technology that allows running sandboxed programs in the Linux kernel without changing kernel source code or loading modules.
• CNI (Container Network Interface): A standard for configuring network interfaces for Linux containers.
• CIDR (Classless Inter-Domain Routing): A method of allocating IP addresses and routing Internet Protocol packets.
• Logic Apps: A cloud-based service that helps you create and run automated workflows that integrate apps, data, services, and devices.
• Agent Loop: A pattern within Logic Apps for AI-driven workflows.
• MCP (Model Context Protocol): A protocol for AI models to access external knowledge and tools.
• Virtual Machines (VMs): Emulated computer systems.
• SKUs (Stock Keeping Units): Identifiers for specific product configurations.
• App Service: A managed platform for building, deploying, and scaling web apps and mobile backends.
• Azure Functions: A serverless compute service that lets you run code on-demand without explicitly provisioning or managing infrastructure.
• Azure Red Hat OpenShift: A managed OpenShift service.
• Azure Boost: A hardware accelerator for Azure nodes.
• Confidential Computing: A technology that encrypts data while it's being processed.
• AKS Desktop: A UI for deploying applications to Kubernetes.
• AKS Pod Sandboxing: Isolating each pod in its own VM.
• AKS Managed Namespace: Automated management of Kubernetes namespaces.
• AKS Automatic: AKS clusters with best practices automatically applied.
• AKS Network Watcher: Integration of AKS network components with Azure network ecosystem.
• AKS Fleet Manager for Arc: Managing Kubernetes clusters at scale via Azure Arc.
• AKS Managed System Node Pools: Automatic provisioning, upgrading, and scaling of system node pools.
• Azure Container Registry (ACR): A managed Docker registry service.
• Attribute-Based Access Control (ABAC): Access control based on attributes.
• Psyllium: A network plugin for Kubernetes.
• Layer 7 Policies: Network policies that understand application-level protocols.
• AKS K2 Toolchain: Running AI models and inferencing on AKS.
• OpenTelemetry: An observability framework for logs, traces, and metrics.
• Azure Container Apps: A fully managed serverless container service.
• Docker Compose: A tool for defining and running multi-container Docker applications.
• Trusted Execution Environments (TEEs): Environments that encrypt data in use.
• Serverless GPUs: GPU acceleration on a pay-per-second basis.
• Azure App Gateway: A web traffic load balancer that enables application delivery.
• JSON Web Token (JWT): A compact, URL-safe means of representing claims to be transferred between two parties.
• Mutual TLS (mTLS): A secure authentication method where both the client and server authenticate each other.
• App Service Managed Instance: Running custom runtimes and third-party libraries in App Service.
• ARM64: A 64-bit ARM architecture.
• Trusted Launch: A security feature for VMs.
• Azure Sphere OS: An operating system for IoT devices.
• HTTP DoS Rule Set: Protection against HTTP denial-of-service attacks.
• Express Route Scalable Gateway: High-throughput gateway for Express Route.
• Azure Virtual Network Manager: Centralized network management.
• NAT Gateway v2: Zone-redundant NAT gateway for egress traffic.
• Azure DNS: Managed DNS service.
• Threat Intelligence Feed: Data on malicious domains.
• Blob Storage Archive Tier: Low-cost, offline storage for infrequently accessed data.
• Azure NetApp Files: High-performance file storage.
• SnapMirror: A replication technology for NetApp.
• Azure NetApp Files Cache Volumes: Caching data from on-premises NetApp filers in Azure.
• Azure Files SMB: File shares accessible via SMB protocol.
• Entra ID: Microsoft's cloud-based identity and access management service.
• Storage Smart Tiering: Automated data tiering for blob and data lake storage.
• Azure Managed Lustre: High-performance parallel file system.
• Container Storage Interface (CSI): A standard for exposing arbitrary block and file storage systems to containerized workloads on Kubernetes.
• Cosmos DB: Microsoft's globally distributed, multi-model database service.
• Change Feed: A persistent log of all changes to data in a Cosmos DB container.
• Azure Document DB: A managed offering compatible with MongoDB.
• Microsoft Fabric: A unified analytics platform.
• OneLake: A unified data lake for Microsoft Fabric.
• Fuzzy Search: A search that finds matches even with typos.
• Vector Search: Searching based on semantic meaning represented by vectors.
• Float16: A half-precision floating-point format.
• Cosmos DB Fleet Pools: Shared pools of request units for multiple Cosmos DB accounts.
• Cosmos DB Fleet Analytics: Analytics view across Cosmos DB fleet pools.
• Dynamic Data Masking: Server-side masking of sensitive data.
• PostgreSQL: An open-source relational database system.
• Oracle to PostgreSQL Migration: Capability to migrate from Oracle to PostgreSQL.
• PostgreSQL 2025 REST API: API for managing PostgreSQL instances.
• PostgreSQL Flexible Elastic Clusters: Sharded PostgreSQL databases using Citus extension.
• Microsoft Foundry: A platform for building and deploying AI solutions.
• PostgreSQL MCP Server: PostgreSQL integration with MCP.
• PostgreSQL VS Code Extension: Extension for managing PostgreSQL.
• Anon Extension: Extension for data masking in PostgreSQL.
• DuckDB Extension: Extension for vectorised columnar data processing in PostgreSQL.
• Parquet: A columnar storage file format.
• Azure Horizon DB: Microsoft's forked version of PostgreSQL.
• Azure SQL Database: Microsoft's managed relational database service.
• Change Event Streaming: Streaming changes from Azure SQL Database to Event Hub.
• Azure SQL MI (Managed Instance): Managed SQL Server instance in Azure.
• Disk ANN Vector Indexing: Efficient vector similarity search.
• Microsoft SQL VS Code Extension: Extension for managing SQL Server.
• Long-Term Retention (LTR): Storing backups for extended periods.
• Immutability: Preventing modification or deletion of data.
• Azure Database Migration Service: Service for migrating databases to Azure.
• Azure Arc: Extends Azure management to on-premises and multi-cloud environments.
• SQL Server 2025: New version of SQL Server.
• API Management: A service for publishing, securing, transforming, monitoring, and analyzing APIs.
• Agent ID: Unique identity for AI agents.
• Microsoft Foundry Control Plane: Controls, observability, and security for AI agents.
• AI Red Teaming: Adversarial testing of AI applications.
• Foundry Model Router: Dynamically routes prompts to the best model.
• Foundry Local: Running models locally.
• Foundry IQ: Multi-layer knowledge source integration for AI agents.
• Foundry Content Understanding: Using generative AI to process content.
• Foundry Agent Service: Environment for building and hosting agents.
• Long-Term Memory: Persistent memory for AI agents.
• Foundry Large Language Model Speech: Transcription and contextual understanding of speech.
• Bring Your Own Gateway: Using external API gateways with Foundry.
• Foundry AI Templates: Pre-built templates for AI use cases.
• Claude Models: AI models from Anthropic.
• Azure Databricks Connector: Connects Foundry to Azure Databricks Genie.
• Azure Managed Redis: Managed Redis cache service.
• Durable AI Agents: Integrating Azure Functions durable capability with AI agents.
• Work IQ: Semantic layer on top of Microsoft Graph for agents.
• Fabric IQ: Semantic modeling on top of Fabric data for agents.
• Azure Site Recovery: Disaster recovery service.
• Azure Monitor: Service for collecting, analyzing, and acting on telemetry from cloud and on-premises environments.
• Prometheus: An open-source monitoring and alerting system.
• Azure Backup: Backup service for Azure resources.
• Microsoft Marketplace: Global platform for discovering and purchasing software and services.
• Azure C-Pilot: AI assistant for Azure.
• Entra: Microsoft's identity and access management platform.
• Synced Passkeys: Passkeys synced across devices and ecosystems.
• Recover Your Account: Feature for account recovery using verified IDs.
• Entra Agents: AI agents for identity management tasks.
• Security Compute Units (SCUs): Units for security features.
• M365 E5 Custom E5: Microsoft 365 licensing tier.

Azure Updates - November 21st, 2023 (Ignite Special)

This update covers a significant number of new features and enhancements across various Azure services, with a strong focus on AI, Kubernetes, databases, and security, following the Ignite conference.

Azure Kubernetes Service (AKS)

• Azure CNI Powered Cilium Networking: Now offers eBPF host routing for advanced container network services. This moves routing logic into the kernel, reducing latency and CPU overhead by bypassing IP tables and net filters. This feature is for IPv4 only and Linux nodes.
• CNI Overlay CIDR Expansion: Allows for expansion of the pod CIDR range, but not shrinking, adding non-contiguous spaces, or using a new range. The new larger range must contain the existing range. This is for IPv4 and Linux nodes only.
• AKS Network Watcher (Preview): Integrates AKS network components with the broader Azure network ecosystem for a complete network visibility.
• AKS Desktop (Preview): A UI for deploying applications to Kubernetes without manual manifest creation, supporting cross-cloud Kubernetes environments but optimized for AKS Automatic clusters.
• AKS Pod Sandboxing (GA): Each pod runs in an isolated VM using Kata Containers, providing kernel-level isolation for enhanced security.
• AKS Managed Namespace (GA): Automates the lifecycle management of namespaces, including user assignment, network policies, and resource limits.
• AKS Automatic Pod Readiness SLA: Eligible pods are guaranteed to be ready within 5 minutes with a 99.9% SLA, backed by financial credits.
• AKS Fleet Manager for Arc (Preview): Enables managing Kubernetes clusters at scale through Azure Arc, supporting any CNCF-compatible Kubernetes cluster.
• AKS Automatic Managed System Node Pools: Automatically provisions, upgrades, and scales system node pools.
• Windows Server 2025 Support: Now supported on AKS, offering significant container improvements over previous versions.
• Advanced Container Network Services (Layer 7 Policies): Understands HTTP, HTTPS, gRPC, and more for granular policy application and specific error code returns.
• Cluster-wide Psyllium Network Policy (GA): Enhanced network policy management.
• Local Redirect Policy (GA): Optimizes communication between pods on the same node to reduce latency.
• Psyllium Ingestion Metrics and Filters (Preview): Allows filtering metrics for cost optimization.
• AKS K2 Toolchain MCP Server Support: Enables bringing additional tooling to language models running on the K2 toolchain.

App Service

• Python 3.10 Retiring: Scheduled for retirement in October 2026; users need to migrate to newer versions.
• Customizable Error Pages (GA): Allows users to create their own error pages instead of using default ones.
• ARM64 Images Trusted Launch (GA): Supports trusted launch for ARM64 images in the marketplace, enabling secure boot and attestation.
• App Service Managed Instance (Preview): Enables running custom runtimes, third-party libraries, and local Windows services with RDP access via Bastion.

Logic Apps

• Redesigned Designer: Moves workflow editing and run history closer together for improved iteration, improvement, and troubleshooting. Allows adding notes on the canvas for collaboration.
• Automated Testing (GA with VS Code Extension): Generates unit tests, helps edit custom tests, and executes them locally.
• Agent Loop Updates (GA for Standard, Preview for Consumption):
  • Leverages MCP servers for AI loops.
  • Scopes access at a document level.
  • Supports bringing own models from Microsoft Foundry.
  • Allows deploying agents into Microsoft Teams.
• New Connectors:
  • GA: Confluent CFKA, XML (with inline code capability for C#, PowerShell, JavaScript).
  • GA: RabbitMQ (for reliable messaging).
  • Public Preview: HL7, MLLP (healthcare connectors).
  • Private Preview: ActiveMQ JMS connector.

Virtual Machines

• Scheduled Actions (GA): Schedules power actions (start, stop, hibernate) with higher concurrent ARM operations and retries.
• New VM SKUs:
  • EBSv6: Up to 192 vCPUs, 1832 GB memory, 800,000 IOPS, 14 GB/s remote disk performance (focused on large database/warehouse workloads).
  • NCv6: Uses Nvidia RTX 6000 Ada GPUs for video streaming, graphics rendering, and AI development (compute, memory, general-purpose optimized).
• Azure Boost Confidential Device Support (Preview): Extends the trust boundary of confidential VMs to include the Azure Boost card for encrypted processing.

Azure Functions

• Node.js 24 Support: For Windows 64-bit and Linux.
• Java 25 Support: For Windows and Linux.
• MCP Extension: Turns Azure Functions into MCP servers, exposing them as tools for AI apps. Existing MCP servers can be hosted on Azure Functions.
• Durable Task Scheduler (GA for Dedicated, Public Preview for Consumption): For complex workflows with automatic progress checkpointing.
• OpenTelemetry Support: Emits logs, traces, and metrics in a standard format for consumption by any compliant backend, including Azure Monitor.

Azure Container Apps

• Docker Compose Support (Preview): Allows using Docker Compose to define and run multi-container applications.
• Flexible Workload Profiles: Offers serverless model with planned maintenance windows, dedicated networking, and larger replica sizes.
• Trusted Execution Environments (TEEs): Provides encryption in use for memory and processing.
• Dynamic Shell Sessions: Platform-managed shell sessions for isolated sandbox execution.
• Container Revision Labels: Assign labels (dev, staging, prod) to container revisions for traffic routing.
• Serverless GPUs (GA): Pay-per-second GPU usage for AI inferencing, model training, and GPU-accelerated workloads.
• Rule-Based Routing (GA): Routes traffic based on rules, such as URL paths.
• Premium Ingress: Scales ingress proxy instances for higher demand.

Azure App Gateway

• JSON Web Token (JWT) Validation (Preview): Validates JWT tokens at the App Gateway for authentication before reaching the backend.
• Mutual TLS Path Passthrough (GA): Allows backend applications to perform client certificate and header validation.
• TCP and TLS Connection Termination (GA): Can terminate both Layer 4 (TCP) and Layer 7 (TLS) connections.
• HTTP DoS Rule Set 1.0 (GA for v2 SKU): Protects against HTTP layer DoS attacks, adapting to normal traffic and integrating with Microsoft threat intelligence.
• Slow Start (GA for Containers): Configurable time window for new pods to smoothly scale up in load balancing.
• Integration with Istio Service Mesh (via Extension): For north-south traffic flow.

Networking

• Azure Flow Logs Filtering: Replaces NSG flow logs, allowing filtering by IP address, port, protocol, encryption state, and more for optimized traffic capture.
• Express Route Scalable Gateway (GA): Achieves up to 40 Gbps with automatic scaling and no downtime, useful for scenarios where fast path is not supported.
• Azure Virtual Network Manager Cross-Region IP Address Management: Allocates IP address pools to VNets in different regions and detects IP address overlap in mesh connectivity groups.
• NAT Gateway v2: Zone-redundant option, supports up to 100 Gbps throughput, 16 IPv6 and 16 IPv4 addresses, and flow logs.
• Azure DNS Threat Intelligence Feed (GA): Detects DNS queries for malicious domains using a threat intelligence feed.

Storage

• Blob Storage Archive Tier (Taiwan North Region): Low-cost, offline storage for infrequently accessed data.
• Azure NetApp Files Large Volume Breakthrough Mode (Preview): Up to 2 PB capacity with up to 50 GB/s throughput.
• Azure NetApp Files Large Volumes (Preview): Up to 7.2 PB with cool access for less frequent data.
• Quota Reports: Provides reports for individual user and group quotas.
• Azure NetApp Files Migration Assistant: Migrates from on-premises filers to Azure NetApp Files using SnapMirror technology.
• Azure NetApp Files Cache Volumes (Preview): Caches hot data from on-premises NetApp volumes in Azure NetApp Files for cloud workloads.
• Azure Files SMB Entra Only Mode: Pure Entra ID authentication for SMB shares, removing the need for Active Directory or Entra Domain Services.
• Azure NetApp Files Single File Restore (GA): Restores individual files without restoring the entire volume.
• Storage Smart Tiering (Preview): Fully managed and automated data tiering for Azure Blob Storage and Azure Data Lake Storage Gen2, optimizing costs by moving data between hot, cool, and cold tiers.
• Azure Managed Lustre Updates:
  • Automatic import from Azure Blob.
  • New 20 MB/s per TB performance tier (GA).
  • Supported by Azure MCP Server for natural language management.
  • Container Storage Interface (CSI) for AKS persistent volumes.

Databases

• Cosmos DB Online Container Copy (Preview): Copies container contents in real-time while the source is in use, leveraging the change feed.
• Azure Document DB (Preview): Managed offering compatible with MongoDB, offering high performance storage (up to 64 TB, 80,000 IOPS), automatic scaling, built-in vector and hybrid search, and a VS Code extension for index advice and migration.
• Microsoft Fabric Databases (GA): SQL Server and Cosmos DB NoSQL operational databases can be created directly in Fabric, with automatic mirroring to Fabric OneLake.
• Cosmos DB NoSQL Fuzzy Search (GA): Finds matches even with typos or minor character errors.
• Cosmos DB Vector Search Performance Improvements: Enhanced vector inserts and index builds for higher throughput and lower latency during large ingestion, with support for Float16 for reduced storage.
• Cosmos DB VS Code Extension (GA): Direct interaction with Cosmos DB data within VS Code.
• Cosmos DB Priority Executions (GA): Assigns low or high priority to requests for prioritized processing.
• Cosmos DB Fleet Pools: Shared pools of request units for multiple Cosmos DB accounts.
• Cosmos DB Fleet Analytics: Provides a single analytics view across Cosmos DB fleet pools.
• Cosmos DB Dynamic Data Masking (Preview): Server-side masking of sensitive data for non-privileged users.
• Oracle to PostgreSQL SQL Migration (via VS Code Extension): Converts Oracle schemas and app code to PostgreSQL equivalents.
• PostgreSQL 2025 REST API (GA): Manages PostgreSQL instances, now supporting PostgreSQL 17 and 18.
• PostgreSQL Flexible Elastic Clusters (GA): Leverages Citus extension for sharding, supporting in-place upgrades to version 18.
• PostgreSQL Integration with Microsoft Foundry: Native MCP server support for integrating with Foundry agents.
• PostgreSQL VS Code Extension with GitHub Copilot: Natural language assistance for PostgreSQL development.
• PostgreSQL Anon Extension: Data masking capabilities for PII.
• PostgreSQL DuckDB Extension: Vectorized columnar data processing and analytics engine.
• PostgreSQL Flexible v6 VMs: Support for v6 VMs (memory optimized, general purpose) and AMD confidential compute SKUs.
• Azure Horizon DB (Private Preview): Microsoft's forked version of PostgreSQL, offering enhanced features, zone redundancy by default, high scalability, and AI features like ANN vector indexing.
• Azure SQL Change Event Streaming (Preview): Streams near real-time changes from Azure SQL Database to Event Hub.
• Azure SQL MI General Purpose Next-Gen Tier: 3-5x performance, halved latency, up to 500 databases per instance, 32 TB storage, with IOPS and memory sliders.
• Azure SQL Disk ANN Vector Indexing: Efficient vector similarity searches for AI.
• Microsoft SQL VS Code Extension: Supports GitHub Copilot for T-SQL interactions.
• Long-Term Retention of Azure SQL Backups with Immutability: Prevents backup deletion or modification until the retention period expires.
• Azure Database Migration Service Integration with Azure Arc: Simplifies migration to Azure SQL.
• SQL Server 2025 (GA): Features will appear in Azure SQL instances.
• Azure SQL Updates (GA): Extra memory options in MI, improved locking, re-use support in queries, BIGINT support in date add.
• Azure SQL VS Code Extension (Preview): Edit data directly, import/export DACPACs.

AI

• API Management MCP Integration: Makes managed APIs MCP endpoints and acts as a proxy for external MCP servers with policy application and observability.
• Microsoft Foundry (formerly Azure AI Foundry):
  • Fine-tuning Updates: Updated interface, supports reinforcement fine-tuning for GPT-5, and fine-tuning for models like Mistral.
  • Developer Training Tier: Uses spot capacity for lower-cost fine-tuning.
  • Entra Agent ID in Registry (Preview): Unique identity for agents in Copilot Studio, Microsoft Foundry, and Microsoft Agent Framework, enabling granular permissions and auditing.
  • Foundry Control Plane (Preview): Controls, observability, and security for agents, including AI-powered evaluations and AI red teaming.
  • Foundry Model Router (GA): Dynamically routes prompts to the best model (GPT-4, GPT-5, DeepSeek, Llama, Grok, etc.) via a single chat completion API endpoint for cost and speed optimization.
  • Foundry Local Updates: Supports Android for on-device AI and the Whisper model for voice-to-text.
  • Foundry IQ (Preview): Multi-layer knowledge source integration built on Azure AI Search, enabling agents to query multiple knowledge sources and semantically rank responses. Supports minimal, low, or medium reasoning effort.
  • Foundry Content Understanding (GA): Uses generative AI to process documents, images, videos, and audio, with VNET integration, managed identities, and custom edge keys.
  • Foundry Agent Service Updates: Environment for building and hosting agents with enterprise security and scale, supporting various frameworks (Semantic Kernel, AutoGen, LangGraph, CrewAI).
    • Long-Term Memory (Preview): Persistent memory for agents across sessions and workflows, with topic grouping and user-level security.
    • Enterprise MCP Server Utilization: Secure passing of credentials with OAuth support.
  • Foundry Large Language Model Speech (Preview): Transcription with contextual understanding and multilingual support for captions, subtitles, and call center assistance.
  • Bring Your Own Gateway (Preview): Supports external API gateways like Kong and Mulesoft.
  • Foundry AI Templates (Preview): Ready-to-use templates for use cases like live voice agents and multimodal context processing.
  • Claude Models in Preview: Available for use in M365 Copilot, GitHub Copilot, and Copilot Studio, good for reasoning, code analysis, and skill support.
  • Azure Databricks Connector: Connects Foundry to Azure Databricks Genie for data and knowledge retrieval.
  • Azure Managed Redis as MCP Tool: Available in the Foundry MCP tools catalog for knowledge storage and agent memory.
  • Durable AI Agents (Preview): Integrates Azure Functions durable capability with AI agents for long-running tool invocations and multi-agent coordination.
  • Work IQ & Fabric IQ:
    • Work IQ: Leverages the Microsoft Graph semantic layer for agents to understand data related to projects, collaboration, and user preferences.
    • Fabric IQ: Adds semantic modeling on top of Fabric data, creating an ontology of business meaning and enabling AI interactions with Fabric data.

Miscellaneous

• Azure Site Recovery:
  • Failover back to Hyper-V with managed disks.
  • Supports major Linux OS upgrades (Azure to Azure).
  • Supports 5x churn (up to 500 MB/s per VM).
• Azure Monitor:
  • One-Click Onboarding (GA for AKS and VMs): Configures best practice defaults for monitoring.
  • Prometheus Logs for AKS: Full Kubernetes insight.
  • OpenTelemetry Based Metrics for VMs:
  • Automatic Recommended Alerts: For Azure Monitor workspaces.
  • OpenTelemetry SDK Stats (Preview): Helps understand telemetry success/failure counts.
  • OpenTelemetry Based Visualizations: For Azure VMs and Arc-enabled servers.
  • Query-Based Metric Alerts: Uses PromQL on Prometheus or custom metrics.
  • Log Analytics Dynamic Thresholds: Learns normal patterns (hourly, daily, weekly) and alerts on deviations.
• Azure Backup Threat Detection for VMs (GA): Uses Defender for Cloud to scan backup store points for malware and ransomware signatures.
• Microsoft Marketplace (GA Globally): Replaces Azure Marketplace and AppSource, includes resale offerings.
• API Management v2 (GA): Highest performing and most capable version.
• API Center Standard Included with APIM Standard/Premium: Integrates design-time catalog with runtime interaction layer.
• Azure C-Pilot New Agents: Numerous GPT-5 powered agents for deployment, migration, optimization, observability, resiliency, and troubleshooting.
• Azure Reliability and Event Agent: Automates workflows for incidents, proactive alerting, and scheduled tasks, with adaptive memory.
• Entra Updates:
  • Synced Passkeys (GA): Leverages iCloud Keychain and Google Password Manager for device-independent passkey storage.
  • Recover Your Account: Uses verified IDs from partners for account recovery.
  • Entra Agents: For finding and managing apps, identifying unused high-privileged apps, finding owners, disabling apps, identifying problematic Conditional Access policies, access reviews, and identity risk management.
  • Internet Access Secure Service (GSA Client): Discovers AI services, detects and stops jailbreaking, detects classified data exfiltration via Purview integration.
  • Security Compute Units (SCUs): Included with M365 E5 Custom E5 licenses.

Synthesis/Conclusion

The November 21st Azure update, heavily influenced by Ignite, showcases a massive influx of new features and enhancements across the Azure ecosystem. The overarching themes are the deep integration and advancement of AI capabilities, particularly within Microsoft Foundry and its agent framework, alongside significant improvements in Kubernetes management (AKS), database services (Cosmos DB, PostgreSQL, Azure SQL), and networking. Security and observability are consistently strengthened with new threat detection, access control, and monitoring features. The focus on simplifying complex tasks through automation, managed services, and AI-powered assistance is evident throughout these updates, aiming to empower developers and IT professionals with more robust, scalable, and secure solutions.