Azure Weekly

Issue #563 - 17th May 2026

Welcome to Issue 563 of The Azure Weekly Newsletter. A mixed bag of announcements and interesting articles. The highlights this week are as follows: Platform Improvements for Python AI Apps on Azure App Service: details the build-pipeline changes that have cut Python deployment latency on Azure App Service for Linux by roughly 30%, including swapping gzip for Zstandard compression, adopting uv as the package installer with a pip fallback, removing an intermediate staging copy, adding a pre-built wheels cache and warming up the Kudu deployment worker. Introducing Azure Container Apps Express: launches a public preview of a simpler Azure Container Apps experience that runs your container on pre-provisioned capacity with no environment, networking or scaling to configure, aimed at developers shipping fast and agents that need to deploy on demand. the general availability of Azure Integrated Hardware Security Module: announces GA of Azure Integrated HSM on AMD v7 Trusted Launch VMs and adds Secure Key Release support, so customers can keep primary keys in Azure Key Vault or Managed HSM and release a cached copy to the local FIPS 140-3 Level 3 boundary, letting cryptographic operations run on-VM without a network round-trip on every call.

In Microsoft Fabric: Optimize your storage costs with OneLake storage tiers and lifecycle management Preview: introduces hot, cool and cold storage tiers for OneLake together with lifecycle management policies that automatically move infrequently-accessed Fabric data to cheaper tiers based on age, last-modified or last-accessed rules. Ingesting SharePoint Data into Microsoft Fabric: Your Options: compares the five paths for getting SharePoint data into Microsoft Fabric (Dataflow Gen2, Copy Jobs, Shortcuts, Pipelines and Notebooks) with practical guidance on cost, incremental loading and multi-environment support.

In AI: Giving the Copilot SDK Agent a hardware-level helmet using Kata microVM on AKS: walks through a sample that runs a GitHub Copilot SDK agent on AKS under the kata-vm-isolation runtime class so each pod sits in its own Hyper-V microVM with a dedicated guest kernel, stacking five defence layers around code the model decides on at runtime: microVM isolation, non-root with dropped capabilities and a read-only filesystem, a NetworkPolicy egress allowlist, secret injection and a deny-by-default permission gate. Privacy proxy in Agents with Microsoft Agent Framework Middleware: shows how to wire PII Shield into Microsoft Agent Framework as a paired ChatMiddleware and FunctionMiddleware, so every prompt is anonymised before reaching the LLM, every tool call gets real values restored from a shared per-conversation mapping store, and every tool output is re-anonymised on the way back, at a measured overhead of roughly 70 ms per turn.

Finally Barry Smart follows up his AI Strategy: Think Top-Down, Experiment Bottom-Up with The GenAI Reality Check: New Instrument, Same Orchestra: which distils seven engineering principles that separate enterprise GenAI projects that deliver real value from those that just generate noise, arguing that GenAI is exceptional in capability but not exempt from the disciplines that make any software project succeed.