This blog post series highlights the key announcements and major updates related to Azure Infrastructure as a Service (IaaS) and Azure Local, as officially released by Microsoft in the past two weeks.
Azure
General
Microsoft Copilot in Azure is Now Generally Available
Microsoft Copilot in Azure has reached general availability, bringing AI-powered assistance to users across the Azure ecosystem. Designed to enhance productivity, Copilot in Azure leverages Large Language Models (LLMs), the Azure control plane, and real-time insights from the user’s environment to streamline tasks and uncover cloud benefits. With GA, users can now rely on Copilot in production scenarios, benefiting from improved performance, higher response accuracy, and full localization support across all Azure portal languages. Current capabilities are included at no additional cost, though future features may introduce pricing considerations. Microsoft has also implemented safeguards such as temporary throttling to manage excessive use of generative AI services.
Microsoft Azure Now Available from New Cloud Regions
Microsoft has announced the general availability of new Azure cloud regions, further expanding its global infrastructure. The Indonesia Central region is now live, marking Azure’s first presence in Indonesia. Equipped with Azure Availability Zones, this region offers scalable, resilient, and secure cloud services to support digital transformation and AI innovation across the country. In addition, a new Azure for U.S. Government Secret region is now generally available, providing increased capacity and flexibility for classified workloads. Designed to meet the strict requirements of the U.S. Department of Defense and other federal agencies, the new region offers geographically distributed data residency options, continuity of operations, and native connectivity to U.S. Government classified networks. Customers benefit from a consistent platform experience and can access foundational Azure services, including Azure ExpressRoute, to support mission-critical scenarios with private, high-bandwidth connectivity.
ExpressRoute Metro and Global Reach Available in Italy North
ExpressRoute Metro and Global Reach are now available in the Italy North region, expanding Azure’s private connectivity capabilities in the area. ExpressRoute Metro allows customers to connect to Microsoft’s global network from two different physical locations within a metro area for higher resiliency and performance. With Global Reach, users can connect their on-premises networks across different regions through the Microsoft backbone, improving global connectivity and optimizing traffic flow.
Compute
DCesv6 and ECesv6 Series Confidential VMs with Intel® TDX (private preview)
Azure has introduced the DCesv6 and ECesv6 series Confidential Virtual Machines in private preview, leveraging 5th Gen Intel® Xeon® processors with Intel® Trust Domain Extensions (TDX). These next-generation VMs are designed to support highly sensitive and confidential workloads in the cloud without requiring changes to application code. The new SKUs include the general-purpose DCesv6-series and the memory-optimized ECesv6-series. These VMs maintain data privacy by keeping it encrypted even during processing, and they offer in-guest attestation, enabling verification of VM integrity. This marks a significant advancement in Azure’s confidential computing offerings.
Networking
Azure Networking Capabilities for Microsoft Copilot in Azure
Azure networking capabilities for Microsoft Copilot in Azure are now generally available, enhancing the AI-powered assistant with deep, contextual insights into network design, operations, and security. Users can now query Copilot for information on Azure networking products, receive guidance on architecture planning, resilience strategies, and migration from on-premises environments. Copilot also supports detailed inventory and traffic path queries, providing topology maps and network connectivity graphs. For operational needs, it offers troubleshooting and diagnostic capabilities by analyzing network configurations, control plane data, and resource health. Additionally, Copilot now integrates with Security Copilot to enable attack investigation on malicious traffic intercepted by Azure Firewall’s IDPS feature—directly within the Azure portal.
Application Gateway as a Private Link Enabled Origin for Front Door Premium
Application Gateway resources can now be configured as Private Link enabled origins within Azure Front Door Premium profiles. This integration allows customers to deliver web content via public Front Door endpoints while keeping the origin infrastructure isolated from the public internet. The use of Private Link ensures that the communication between Front Door and the origin remains secure and private, enhancing the security posture of internet-facing applications. This feature is particularly valuable for scenarios requiring strict network isolation without compromising performance or global reach.
Azure Front Door: Enhanced Server Variable Support
Azure Front Door has expanded its server variable capabilities by enabling the capture of request header, response header, and request query string values. This builds on the previously released feature to capture URL path segments. With these new enhancements, server variables can now be used in the rules engine to enable more dynamic and flexible HTTP request manipulation and routing at the edge. Scenarios enabled by this feature include modifying a response header based on a request header value, renaming cloud provider-generated headers to branded ones, and redirecting based on query string values. These capabilities unlock new customization opportunities for developers aiming to fine-tune edge routing behavior.
Azure Front Door: Custom Cipher Suite Support
Custom cipher suite support for Azure Front Door is now generally available across both Standard and Premium tiers. Azure Front Door provides several predefined TLS policies based on Microsoft Security best practices to ensure strong encryption and protocol support. With this update, customers can also define custom TLS policies to meet specific business and compliance requirements. This includes setting the minimum supported TLS version and selecting allowed cipher suites, offering granular control over security settings and enabling organizations to tailor their Front Door configuration to their unique security posture.
Azure Bastion Developer Now Available in 36 Regions
Azure Bastion Developer, previously limited to six regions, is now generally available in 36 public regions worldwide. Designed for Dev/Test scenarios, this version of Azure Bastion provides secure-by-default RDP and SSH access to virtual machines without the need for a public IP address. It allows users to connect to one VM at a time through the virtual machine’s connect blade—all at no cost. While it lacks the advanced features and scalability options of the standard Bastion offering, Bastion Developer is ideal for users seeking a streamlined and secure connection method for development and testing environments.
Expanded Availability of ExpressRoute Metro, Peering Locations, and Global Reach
Azure continues to expand its networking footprint with broader availability of ExpressRoute Metro and Global Reach. ExpressRoute Metro is now accessible in four new locations—Atlanta (USA), Jakarta (Indonesia), Madrid (Spain), and Milan (Italy)—providing increased resiliency for organizations requiring high-performance, private connectivity to Azure. Additionally, two new ExpressRoute Peering locations, Brussels and Brussels2 in Belgium, have been introduced, further enhancing secure access across Europe. ExpressRoute Direct is now available in all these new regions. Furthermore, ExpressRoute Global Reach has expanded to include Belgium, Italy, and Spain, enabling private site-to-site connectivity through Microsoft’s global network infrastructure.
Route-Maps for Azure Virtual WAN
Azure Virtual WAN now includes support for route-maps, empowering users with enhanced control over routing behavior within Virtual WAN virtual hubs. This feature enables fine-grained management of route advertisements and route selection for various connection types, including site-to-site VPN, point-to-site VPN, ExpressRoute, and virtual network (VNet) links. Route-maps allow for advanced routing scenarios, such as filtering or modifying route advertisements, offering greater flexibility in managing complex network topologies and optimizing traffic flows.
Storage
ACLs for Local Users in Azure Blob Storage SFTP
Access Control Lists (ACLs) for Azure Blob Storage SFTP local users are now generally available. This capability provides administrators with an intuitive way to implement fine-grained access control over blobs and directories for users configured for SFTP access. With ACLs, organizations can enforce security and access policies more precisely, simplifying the management of user-level permissions while enhancing data protection within Azure Blob Storage environments.
Performance Plus for Azure Disk Storage
Azure Disk Storage has introduced the Performance Plus feature in general availability, bringing enhanced performance to Premium SSD, Standard SSD, and Standard HDD disks of 513 GB or larger. With Performance Plus, users benefit from increased IOPS and throughput at no additional cost. This feature is accessible via Azure CLI, PowerShell, and the Azure Portal, enabling customers to optimize their disk performance with minimal effort and without changing disk SKUs. Performance Plus helps meet demanding workload requirements by improving disk responsiveness and efficiency.
Azure NetApp Files: File Access Logs (preview)
Azure NetApp Files now supports file access logs in public preview, offering organizations enhanced visibility into file activity for improved security and operational monitoring. This new feature captures detailed information about file access, including user identity, operation type, and timestamps. It supports SMB, NFSv4.1, and dual-protocol volumes, allowing organizations to detect unauthorized access, ensure compliance, resolve operational incidents, and analyze usage patterns. By incorporating file access logs, enterprises can strengthen data protection, meet compliance requirements, and align with the Well-Architected Framework’s security best practices.
Conclusion
Over the past two weeks, Microsoft has introduced a slew of updates and announcements pertaining to Azure Infrastructure as a Service (IaaS) and Azure Local. These developments underscore the tech giant’s unwavering commitment to enhancing its cloud offerings and adapting to the ever-evolving needs of businesses and developers. Users of Azure can anticipate improved functionalities, streamlined services, and enriched features as a result of these changes. Stay tuned for more insights as I continue to monitor and report on Azure’s progression in the cloud sphere.