Azure Weekly

Issue #560 - 26th April 2026

Starting with AI, the highlights this week are: some interesting real-world applications: Modernizing Industrial Safety and Inspection with AI-Driven Drone Automation: a reference Azure architecture pairing deterministic computer vision with generative AI reasoning to scale industrial inspection scenarios such as bolt integrity. GPT Capability in Understanding Coordinates: How GPT-5.4 Transforms Spatial Precision: a bounding-box benchmark on CAD-style images shows GPT-5.4 hits ≥0.99 IoU first try, removing the prompt-engineering workarounds GPT-5.2 needed. Extracting BOMs from Electrical Drawings with AI: Azure OpenAI GPT-5.4 + Azure Document Intelligence: a five-stage pipeline combining Document Intelligence and GPT-5.4 reaches 94.21% accuracy extracting Bills of Materials from electrical single-line diagrams.

CodeAct in Agent Framework: Faster Agents with Fewer Model Turns: the alpha agent-framework-hyperlight package runs model-generated Python in a per-call Hyperlight micro-VM, cutting latency ~52% and tokens ~64% in benchmarks. Prompt Engineering for Spec-Driven Development with SpecKit: experiments across 10 prompt formulations show natural-language, authoritative prompts with model-readable outputs deliver substantially better SpecKit results.

Designing Outbound Connectivity for Private Subnets in Azure: a decision framework comparing NAT Gateway, Azure Firewall and Load Balancer outbound rules now that default outbound access has been retired. Entra Workload Identity on AKS: No More Secrets: a walkthrough for replacing Kubernetes client secrets with federated OIDC trust between AKS service accounts and Azure managed identities, including Bicep and Terraform examples. AKS App Routing's Next Chapter: Gateway API with Istio: the preview replacement for the NGINX-based add-on uses a lightweight Istio control plane and Kubernetes Gateway API, with migration steps via ingress2gateway.

The Unified SecOps Transition — Why It Is a Security Architecture Decision, Not Just a Portal Change: frames the March 2027 Sentinel portal retirement as a shift to a 2-tier data architecture, Sentinel Graph and MCP-based agents underpinning the agentic SOC. Azure landing zones & Sovereign landing zones: a new lab series covering Azure and Sovereign landing zones, the ALZ Accelerator, Azure Verified Modules and custom libraries.

Finally, Fabric Performance Benchmarking - Spark versus Python Notebooks: on Microsoft Fabric, DuckDB and Polars on Python notebooks consistently outperform PySpark while being 4–5× cheaper for medium-scale workloads. Medallion Architecture in Excel: reframes Excel's three-tab rule (Source / Logic / Interface) as a Bronze / Silver / Gold mini-pipeline, applying data engineering principles to spreadsheets.