Azure Weekly

Issue 566

7th June 2026

Not only is this issue a Microsoft BUILD 2026 special; a bumper edition featuring all the announcements, but it also sports a new look - something I've been working on for the last few years - not only to support the ever increasing volume of Azure content, but to also better support the multiple newsletters we publish: Power BI Weekly and soon Fabric Weekly.

It's a packed edition (with 366 posts), but here are the high-level "what's new" posts:

  • Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases by Arun Ulag - Introducing Rayfin, an open-source SDK and CLI that enables developers to define and deploy enterprise‑grade application backends directly into Fabric, accelerating the transition from prototype to production for agentic AI apps.
  • Azure Functions at Build 2026 Update by Thiago Almeida - Azure Functions at Build 2026 introduces a first‑class programming model for AI agents, allowing developers to define and deploy serverless agents with markdown instructions in a .agent.md file across any trigger type while leveraging managed MCP tool servers, sandboxed code execution, and extensive connector support.
  • What's new in Azure Container Apps at Build'26 by Vyom Nagrani - Azure Container Apps at Build'26 introduces Azure Container Apps Sandboxes, a public preview that offers fast, secure, ephemeral compute environments with built-in suspend and resume capabilities for running untrusted code safely and efficiently.
  • What's new in Azure Kubernetes Service at Microsoft Build 2026 by Cory Skimming - Azure Kubernetes Service at Microsoft Build 2026 introduces managed system node pools for automatic lifecycle management, standardized Azure Container Linux to reduce patching overhead, bare metal AKS for direct hardware access, fleet manager for unified multi‑cluster operations, and Anyscale on Azure for integrated Ray orchestration of distributed AI
  • Announcing new security, maintenance and analytics features for PostgreSQL at Microsoft Build 2026 by Guy Bowerman - The announcement at Microsoft Build 2026 introduces a suite of new security, maintenance, and analytics features for Azure Database for PostgreSQL flexible server, including the V6 SKU with NVMe storage, pg_duckdb and pg_ivm extensions for advanced analytics, Defender security assessments, temporal_tables for change tracking
  • What's new in Azure API Management at Microsoft Build 2026 by Beena More - Azure API Management at Build 2026 introduces AI gateway enhancements, an Azure API Center that centralizes discovery and governance of APIs, agents, MCP tools, and AI assets, plus support for JSON‑RPC Agent‑to‑Agent APIs with content safety controls to manage emerging agentic workloads.
  • What’s new in Observability at Build 2026 by Priyanka Nanda - Azure Build 2026 introduces AI‑focused agent observability in Azure Monitor, integrating OpenTelemetry for portable signals, new Agent Observability features with fleet views and automated evaluations, and an expanded Copilot Observability agent that enhances natural language investigation across AKS, Application Insights, and Foundry AI
  • Azure Monitor Copilot Observability Agent: What’s new at Build by Efrat Nauerman - The updated Azure Monitor Copilot Observability Agent at Build 2026 introduces expanded investigation scenarios, integration with Microsoft Foundry AI Agents for cross‑scenario signal correlation, and enhanced capabilities in Application Insights, AKS clusters, Activity Logs, and future support for multiple Application Insights resources and Azure Service Health events
  • What’s new in Microsoft Sentinel: May 2026 by Sowmy Srinivasan - May's update introduces unified role‑based access controls with row‑level scoping for granular permissions across Sentinel and Defender, expands connector catalog to over 400 integrations via Codeless Connector Framework, and previews Agent 365 for AI agent telemetry in the data lake.

Finally, it's worth highlighting Mark Russinovich's always fascinating Inside Azure Innovation session.

🤖 AI

🔎 Analytics

🖥️ Compute

🚢 Containers

🗄️ Databases

🛠️ Developer tools

🔩 DevOps

  • Generally Available: Ingest OTLP signals into Azure Monitor with the OpenTelemetry Collector Azure Monitor now officially supports ingesting OTLP signals via the OpenTelemetry Collector, allowing seamless telemetry data transmission from any OpenTelemetry‑instrumented application or platform with minimal configuration.
  • Generally Available: Azure Monitor Service Level Indicators (SLI) Azure Monitor's new SLI and SLO features let teams directly gauge customer application experiences, complementing traditional infrastructure metrics such as CPU usage.
  • Generally Available: Simple log alerts in Azure Monitor Simple log alerts in Azure Monitor now offers an intuitive interface that reduces setup time by 40% while maintaining high accuracy for critical log-based notifications.
  • Faster az login: introducing --skip-subscription-discovery and targeted --subscription The new Azure CLI flags --skip-subscription-discovery and --subscription let users bypass the time-consuming process of enumerating all subscriptions across many tenants, making az login near-instant for large-scale environments with dozens of tenants or hundreds of subscriptions per tenant.
  • Securing CI/CD in an agentic world: Claude Code Github action case Researchers discovered that Anthropic’s Claude Code GitHub Action could leak CI/CD secrets when processing untrusted content, due to the Read tool lacking proper sandboxing, and Anthropic later patched this in version 2.1.128 by restricting access to sensitive system files.
  • Azure Repos Permissions Azure Repos Permissions guide explains the four-level security hierarchy—from organization to individual repository—detailing inheritance models and best practices like using explicit deny rules to prevent accidental permission overrides.
  • Azure Repos vs GitHub Azure Repos is designed for enterprise centralized development teams with integrated security and CI/CD pipelines, while GitHub excels in open‑source collaboration, community tools, and flexible branching models.
  • GitHub Copilot Multi-Repo Instructions: Sharing Skills, Agents, and Conventions Across Repos GitHub Copilot multi-repo instructions enable teams to define and share coding conventions, pitfalls, and best practices across multiple repositories, ensuring that the AI assistant generates code aligned with team standards and automates tasks like PR creation in Azure DevOps.
  • DevOps for Microsoft Hosted Agents: From Terraform Apply to Production-Grade Agent Delivery Foundry now supports deploying Hosted Agents directly from source code via a `.zip` package with `code_configuration`, reducing latency for Python or .NET projects while requiring only Project Manager and User roles, complementing the existing container deployment path.
  • How Microsoft is migrating repositories to GitHub Migrating to GitHub at Microsoft scale has reduced engineering overhead, enabling over 1,600 repositories and 3,100 developers to transition in six months while preserving critical Azure Boards and Pipelines workflows, unlocking advanced AI capabilities like Copilot Coding Agent.
  • GitHub Action for Deploying Hosted Agents This GitHub Action streamlines deploying Hosted Agents in Foundry by using a repeatable workflow with minimal configuration, leveraging existing tooling like Azure CLI and Bash to integrate smoothly into CI/CD processes.
  • New Capabilities to Observe Agents in Azure Monitor Azure Monitor now treats agents as first-class observables, offering faster telemetry ingestion, larger event support, a fleet view of monitored agents, deeper debugging insights, and enhanced AI-powered troubleshooting capabilities to improve agent quality evaluation and security compliance.
  • Azure DevOps and GitHub: Journeying into the AI Era Azure DevOps and GitHub are deepening their integration with new agentic AI features across planning, coding, review, and security, allowing seamless hybrid usage while enhancing enterprise governance through an agent control plane.
  • GitHub Copilot app: The agent-native desktop experience The GitHub Copilot app provides a unified desktop experience that centralizes multiple agent-native development workflows, allowing developers to monitor, manage, and interact with parallel sessions across repositories from a single My Work view.
  • Building and Operating a Microsoft Foundry Hosted Agent with GitOps and GitHub Tasks Building a GitOps workflow for a Microsoft Foundry Hosted Agent enables automated, auditable deployments of prompts, tools, and infrastructure changes using GitHub Actions, ensuring consistent environments from development to production.
  • Why Choose Pulumi Over Terraform? Pulumi offers stronger programming model tools like first‑class language SDKs, built‑in refactoring workflows with aliases and secrets management, and clearer provider resource definitions, making infrastructure code more like application code while still requiring engineering discipline for drift and provider bugs.
  • Building a GitHub Copilot Agent Usage Dashboard The article details building an enterprise-grade GitHub Copilot usage dashboard using OpenTelemetry, Azure Monitor, and Grafana to track agent adoption and workflow popularity with granular insights.
  • One prompt, four (sub)agents, and ninety seconds to get a working app Google Antigravity 2.0’s built-in subagents enable rapid creation of an agent team that can simultaneously build a Go backend API, frontend API, and unit tests in just ninety seconds using a single prompt.
  • The NEW Bicep Like and Distinct Functions ✨ Azure Bicep's new like() function enables pattern matching for strings, useful for conditional deployments based on naming conventions, while distinct() removes duplicate values from arrays, simplifying configurations and preventing resource redundancy.
  • J. Tower: A.I. Workflows - Episode 404 Jonathan "J." Tower, a 12-time Microsoft MVP and .NET Foundation Board member, shares insights on AI workflows and software leadership in this episode of J. Tower: A.I. Workflows.

🧬 Hybrid + multicloud

  • Azure Arc: Why you need both WindowsOsUpdateExtension and WindowsPatchExtension Both WindowsOsUpdateExtension and WindowsPatchExtension may appear on Azure Arc‑enabled servers to handle assessment and patching separately, unlike native VMs that use a single handler, ensuring smoother integration with hybrid environments.
  • Cert-manager on AKS, the Managed Way cert-manager can be deployed on Azure Kubernetes Service (AKS) clusters using its public preview as an Azure Arc Kubernetes extension, offering managed certificate automation without requiring Arc-enabled infrastructure.
  • Sign Into On-Prem Windows Server with Entra ID Using Azure Arc Azure Arc enables on‑premises Windows Server 2025 to authenticate with Entra ID, moving away from Active Directory while using Azure RBAC for centralized security control.
  • Build, deploy, and govern sovereign AI with Foundry Local on Azure Local Foundry Local on Azure Local enables customers to build, deploy, and govern sovereign AI applications entirely within their own environment, preserving data residency while leveraging familiar Azure tools for model management and policy enforcement.
  • Unlock On-Prem Productivity with Agentic Retrieval in Foundry Local Foundry Local’s Agentic Retrieval in Build 2026 enables on-prem productivity by combining reasoning, agency, and natural user experiences with Azure Arc‑powered edge AI, offering flexible deployment modes, BYOM support, and compliance‑ready solutions for regulated environments.
  • Scale On-Prem AI with Foundry Local on Azure Local: Multi-Node Inference and vLLM Support Foundry Local on Azure Local now supports multi-node scheduling, vLLM runtime for high-throughput serving, and an expanded catalog of models optimized formats, enabling scalable, production‑grade on‑premises AI inference in disconnected environments while maintaining Kubernetes‑native, OpenAI‑compatible patterns.
  • Introducing GitHub Enterprise Local (Preview): DevOps for Sovereign and Private Cloud Environments GitHub Enterprise Local lets government, defense, finance, and critical infrastructure firms run GitHub’s full enterprise developer platform on their own sovereign cloud infrastructure with zero internet dependency, preserving data control while maintaining a familiar GitHub experience.

🎭 Identity

🔌 Integration

💡 Internet of Things

🎓 Learning and Certifications

  • Recent and upcoming Microsoft exam changes – Sunday 7 June 2026 The article details the retirement of the AI-900 Microsoft Azure AI Fundamentals exam on June 30, 2026, along with upcoming changes to other exams.
  • Build AI skills at Microsoft AI Skills Fest Microsoft AI Skills Fest offers a free digital event where partners can develop in-demand AI skills, earn certification through the Frontier Transformation Engineer badge, and learn to build innovative solutions across platforms like 365 Copilot and Fabric.
  • AI-103 vs AI-200 – Which Azure AI Certification Is Right for You? AI‑200 focuses on building cloud‑native infrastructure for AI back‑ends—containers, serverless functions, event pipelines, and observability—making it ideal for developers who already handle Azure services but need expertise in scaling AI solutions, while AI‑103 is geared toward creating AI applications and agents using
  • From campus to career: 3 practical steps for students Leverage free resources like the Microsoft AI Skills Fest, GitHub Education pack, and Student Ambassadors program to develop in-demand AI skills, showcase projects with proof‑of‑work on platforms like GitHub, and build leadership experience that sets you apart in a competitive job market.
  • 345 - Reflections from Microsoft Build 2026 This episode highlights standout announcements from Microsoft Build 2026, including Windows 11’s Intelligent Terminal and Run dialog enhancements, GitHub Enterprise Local, Azure Logic Apps Automation, and the debut of Project Solara alongside new AI models and execution containers.
  • Microsoft AZ-204 certification is Being Replaced by Microsoft AI-200 Certification The new AI-200 certification focuses on containerised compute, AI‑enabled data services, event‑driven pipelines with Azure OpenAI and managed identity security, replacing AZ-204 as Azure developers must now build production‑ready AI solutions.
  • Azure Developer Associate Renewal – Study Guide – 2026 The Azure Developer Associate renewal guide for 2026 highlights essential study resources and the upcoming July 31 deadline, emphasizing key vault storage, App Config keys, Application Insights monitoring, Container Apps secrets management, and Azure Functions triggers.
  • DevOps Engineer Expert Renewal – Study Guide – 2026 The guide compiles essential Azure DevOps resources, including GitHub permissions and ADO agents, to help candidates efficiently prepare for the 2026 renewal certification.

⚖️ Management and Governance

  • Public Preview: Azure Infrastructure Resiliency Manager Azure Infrastructure Resiliency Manager streamlines resiliency planning by integrating Availability Zones, Azure Advisor recommendations, and Chaos Engineering into a single goal-oriented dashboard.
  • Public Preview: Azure Policy Coverage for Model Router in Foundry Models Azure Policy's new coverage for Model Router in Foundry Models enables organizations to centrally govern and enforce routing standards, ensuring model selections comply with security, regulatory, and operational policies.
  • From cloud adoption to value realisation From cloud adoption to value realisation focuses on measuring tangible benefits like reduced recovery time and retired legacy hosting contracts after deploying Azure services.
  • Azure Monitor Health Model (Preview): What's New! Azure Monitor's new Health Model (Preview) consolidates telemetry, architecture, and business data into a single actionable health state, reducing alert noise and enabling proactive operations with flexible discovery options like Application Insights, Azure Resource Graph, and Service Groups.
  • AI Insights for Database Monitoring: A DBA’s Perspective This article offers a DBA’s firsthand account of how AI can uncover critical database issues like repeated backup failures and log reuse states, providing actionable insights for proactive monitoring.
  • Is 94% of your syslog just noise? Now you can filter it out before ingestion. Multi-stage transformations in Azure Monitor let you filter and aggregate syslog data on the agent side, cutting unnecessary volume by up to 94% before it’s ingested, while also reducing costs and improving query performance.
  • When Telemetry Volume Gets Real: Azure Monitor pipeline’s Performance Story! Azure Monitor pipeline can sustain over 200,000 Syslog messages per second on an 8‑core node, processing about 17 billion events or 20 TB daily while using only ~2.8 GB of memory, demonstrating impressive linear scalability and efficient resource utilization
  • Azure Policy Best Practices Azure Policy Best Practices emphasizes defining policies at the Root Management Group level for scalability, using targeted exemptions for temporary needs, bundling related rules in Initiative Definitions to simplify governance, and implementing a phased rollout with Audit → Modify → Deny effects to balance visibility and enforcement.
  • Why Microsoft 365 knowledge hubs fail without governance and content quality A well‑governed Microsoft 365 knowledge hub delivers value only when its information is accurate, trusted, and adheres to clear ownership standards; otherwise, even sophisticated tools like Copilot will surface low‑quality or outdated content.
  • Is Your Monitoring Actually Working? What's New in Monitoring Coverage Monitoring Coverage in Azure Monitor now includes data flow status and at‑scale alert enablement, helping teams quickly identify missing monitoring configurations and ensure real‑time alert delivery across virtual machines and AKS clusters.
  • What’s new in Observability at Build 2026 Azure Build 2026 introduces AI‑focused agent observability in Azure Monitor, integrating OpenTelemetry for portable signals, new Agent Observability features with fleet views and automated evaluations, and an expanded Copilot Observability agent that enhances natural language investigation across AKS, Application Insights, and Foundry AI
  • Azure Monitor Copilot Observability Agent: What’s new at Build The updated Azure Monitor Copilot Observability Agent at Build 2026 introduces expanded investigation scenarios, integration with Microsoft Foundry AI Agents for cross‑scenario signal correlation, and enhanced capabilities in Application Insights, AKS clusters, Activity Logs, and future support for multiple Application Insights resources and Azure Service Health events
  • Any source. Any destination. Ready for AI-era. Azure Observability at Build 2026 introduces an AI-native OpenTelemetry standard, bursty traffic scaling to billions of events per day, unified governance for AI and platform telemetry via DCRs, multi‑stage noise control, and comprehensive Monitoring Coverage to ensure complete signal reliability across data journeys.
  • Infrastructure as Code for AI: Building and Deploying Microsoft Hosted Agents with Terraform Terraform automates provisioning of Azure infrastructure for Microsoft Hosted Agents, ensuring repeatability, governance, and scalability while leaving runtime management to the Managed Agent Service.
  • Azure Governance Best Practices Azure Governance Best Practices outlines a four-pillared framework—resource organization, security & access control, compliance & guardrails, and cost management—to establish scalable, enterprise‑wide cloud governance across multiple subscriptions and resource groups.
  • WSUS Is Deprecated. That's Not Really the Story. While WSUS deprecation sparks questions about legacy management, many customers are also exploring modern alternatives like Azure Update Manager and transitioning to Linux environments.

🚌 Migration

🌐 Networking

🔐 Security

📦 Storage

💻 Virtual Desktop Infrastructure

Get Azure Weekly in your inbox every Sunday

Sign up to receive the email every week and keep on top of all the announcements.

Don't forget to confirm your subscription. We have a double opt-in sign up process to prevent spam.

We will never provide your details to any third parties. We don't spam.

Azure Weekly Logo