Generated on: July 08, 2026 Target period: Within the last 24 hours Processing mode: Details Mode Number of updates: 6 items
Published: July 07, 2026 17:42:50 UTC Link: Public Preview: Exceptions in WAF for Azure Application Gateway and Azure Front Door
Update ID: 567218 Data source: Azure Updates API
Categories: In preview, Networking, Security, Application Gateway, Azure Front Door, Web Application Firewall, Features, Services
Summary:
What was updated
Azure Web Application Firewall (WAF) for Azure Application Gateway and Azure Front Door now supports exceptions in public preview.
Key changes or new features
The new exceptions feature allows administrators to define specific conditions under which WAF rules are bypassed. This goes beyond existing exclusions, enabling more granular control to reduce false positives. Exceptions can be set based on request attributes such as headers, cookies, query strings, or request bodies. This helps ensure legitimate traffic is not blocked while maintaining security.
Target audience affected
Developers and IT professionals managing web applications protected by Azure Application Gateway or Azure Front Door WAF.
Important notes
Exceptions are currently available in public preview and may change before general availability. Using exceptions can improve application compatibility and reduce operational overhead caused by false positives. However, careful configuration is required to avoid inadvertently exposing applications to threats. Review documentation and test thoroughly before deploying exceptions in production environments.
For more information, see the official Azure Update: Public Preview: Exceptions in WAF for Azure Application Gateway and Azure Front Door.
Details:
Azure Update Explanation: Public Preview – Exceptions in WAF for Azure Application Gateway and Azure Front Door
Background and Purpose of the Update
Azure Web Application Firewall (WAF) is a core security service designed to protect web applications hosted on Azure Application Gateway and Azure Front Door from common web vulnerabilities and attacks, such as SQL injection and cross-site scripting. However, WAF can sometimes generate false positives, blocking legitimate requests that are safe and expected for specific applications. Previously, exclusions could be configured to reduce such false positives by omitting specific request attributes from inspection. This update introduces the public preview of “Exceptions” in WAF, providing a more granular and flexible way to handle such scenarios.
Specific Features and Detailed Changes
With the introduction of Exceptions in WAF for both Azure Application Gateway and Azure Front Door, administrators can now define specific exceptions to WAF rules. This capability enables more precise control over which requests are inspected or blocked, beyond the existing exclusions mechanism. Exceptions can be configured to bypass or modify the behavior of WAF for certain requests, reducing the risk of blocking legitimate traffic due to overly broad rule matches.
Technical Mechanisms and Implementation Methods
Exceptions are implemented as configurable settings within the WAF policy associated with an Application Gateway or Front Door instance. Administrators can define exception rules that target specific request patterns, headers, or other attributes. When a request matches an exception, the WAF can be instructed to skip inspection for that request or alter the enforcement of certain rules. This mechanism allows for fine-tuned handling of edge cases without compromising the overall security posture.
Use Cases and Application Scenarios
Important Considerations and Limitations
Integration with Related Azure Services
Exceptions are integrated into the WAF policies for both Azure Application Gateway and Azure Front Door, ensuring consistent management across these services. This update aligns with Azure’s broader security and compliance tooling, supporting integration with Azure Policy, monitoring, and logging for audit and incident response purposes.
Summary Sentence
The public preview of Exceptions in Azure Web Application Firewall for Application Gateway and Front Door introduces a more granular way to reduce false positives by allowing administrators to define specific exceptions to WAF rules, enhancing security management and application compatibility.
Published: July 07, 2026 17:40:32 UTC Link: Public Preview: Azure Chaos Studio Workspaces and Scenarios
Update ID: 567184 Data source: Azure Updates API
Categories: In preview, Analytics, Management and governance, Azure Chaos Studio, Features, Services, Feature
Summary:
What was updated
Azure Chaos Studio has introduced Workspaces and Scenarios in public preview.
Key changes or new features
Workspaces allow users to define the scope of chaos experiments at the application level (subscription, resource group, or service group), making it easier to organize and manage chaos testing. Scenarios enable faster, application-centric validation of workload resilience by grouping related experiments and faults. This update streamlines chaos engineering workflows, improves experiment management, and enhances visibility into how applications respond to real-world outages.
Target audience affected
Developers, DevOps engineers, and IT professionals responsible for application reliability, resilience testing, and incident response in Azure environments.
Important notes if any
Workspaces and Scenarios are currently in public preview, so features may change before general availability. Users should review documentation for guidance on setup and best practices. This update is particularly beneficial for teams seeking to scale chaos engineering across multiple applications or environments, and for those aiming to align chaos testing with organizational boundaries and operational processes.
Source: Azure Update
Details:
Azure Update Summary: Public Preview: Azure Chaos Studio Workspaces and Scenarios
Background and Purpose of the Update
Azure Chaos Studio is Microsoft’s managed chaos engineering platform designed to help organizations proactively test the resilience of their cloud workloads. The introduction of Workspaces and Scenarios addresses the need for a more streamlined, application-centric approach to chaos testing. This update aims to simplify and accelerate the process of validating how applications respond to real-world outages, enabling IT professionals to focus chaos experiments directly on relevant application scopes.
Specific Features and Detailed Changes
The update introduces two key features:
Workspaces: Workspaces allow users to define the scope of chaos experiments at the application level. A Workspace can be targeted at a subscription, resource group, or service group, making it easier to organize and manage chaos testing for specific applications or environments. This reduces the complexity of configuring individual resources and provides a centralized view of chaos experiments.
Scenarios: Scenarios are predefined or custom sets of chaos actions that simulate real outage conditions. By associating Scenarios with Workspaces, users can quickly execute relevant chaos experiments tailored to their application’s architecture and dependencies.
Technical Mechanisms and Implementation Methods
Workspaces are implemented as logical containers within Chaos Studio, enabling users to group resources and define boundaries for chaos experiments. When a Workspace is pointed at a subscription, resource group, or service group, Chaos Studio automatically identifies the resources within that scope, streamlining experiment setup.
Scenarios are built using Chaos Studio’s experiment definition framework, which allows users to specify failure actions (such as shutting down VMs, introducing network latency, or simulating service unavailability) and target resources within the Workspace. The execution of Scenarios leverages Azure’s native orchestration and monitoring capabilities, ensuring that experiments are safely conducted and results are captured for analysis.
Use Cases and Application Scenarios
Important Considerations and Limitations
Integration with Related Azure Services
Workspaces and Scenarios enhance integration with Azure Resource Manager by allowing resource grouping at various levels. Chaos Studio can also leverage Azure Monitor for tracking experiment results and alerting on failures. Integration with Azure DevOps enables automated chaos testing within deployment pipelines, supporting modern DevOps practices.
Summary Sentence
Azure Chaos Studio’s new Workspaces and Scenarios features, now in public preview, provide IT professionals with a faster, application-centric method to validate workload resilience by targeting chaos experiments at specific subscription, resource group, or service group scopes.
Published: July 07, 2026 17:37:55 UTC Link: Public Preview: Export historical data from Log Analytics workspace with Export jobs
Update ID: 566591 Data source: Azure Updates API
Categories: In preview, DevOps, Management and governance, Azure Monitor, Features, Services
Summary:
What was updated:
Azure Log Analytics now offers a Public Preview feature called Export jobs, allowing users to export historical data from a Log Analytics workspace.
Key changes or new features:
Target audience affected:
Important notes:
Details:
Azure Update Summary: Public Preview – Export Historical Data from Log Analytics Workspace with Export Jobs
Background and Purpose of the Update:
This update introduces the Log Analytics Export job feature, now available in public preview. The purpose is to provide IT professionals with a streamlined method to export historical data from Log Analytics workspaces. Previously, extracting large volumes of historical data was complex and often required custom scripting or manual processes. This feature addresses the need for efficient, targeted data extraction, enabling organizations to move only relevant data to external systems for further analysis, compliance, or archival.
Specific Features and Detailed Changes:
The Export job allows users to define a specific query and time range, ensuring that only the necessary subset of data is exported rather than the entire workspace contents. Data is exported directly from Log Analytics to an Azure Storage account, facilitating secure and scalable storage. The feature supports granular control over the export process, enabling users to tailor exports to their operational or regulatory requirements.
Technical Mechanisms and Implementation Methods:
Export jobs are configured within the Log Analytics workspace. Users specify:
The export process is managed as a job, which can be monitored for progress and completion. Data is transferred securely and efficiently, leveraging Azure’s native integration between Log Analytics and Storage accounts. Exported data is typically formatted for compatibility with downstream processing or ingestion systems.
Use Cases and Application Scenarios:
Important Considerations and Limitations:
Integration with Related Azure Services:
Summary Sentence:
The Log Analytics Export job feature in public preview enables targeted export of historical data from Log Analytics workspaces to Azure Storage accounts, offering IT professionals granular control over data extraction for compliance, migration, and archival scenarios, while integrating seamlessly with Azure’s storage and analytics services.
Published: July 07, 2026 17:35:19 UTC Link: Generally Available: Network Security Perimeter support for Azure Event Hubs
Update ID: 567203 Data source: Azure Updates API
Categories: Launched, Analytics, Event Hubs, Features, Security, Services
Summary:
What was updated
Azure Event Hubs now supports Network Security Perimeter (NSP) and is generally available.
Key changes or new features
With NSP, organizations can establish a logical network isolation boundary for their Azure Event Hubs resources. NSP enables perimeter-based access rules, allowing for granular control over public network access to Event Hubs. This enhances security by restricting access to Event Hubs from outside the defined perimeter and supports compliance requirements for network isolation.
Target audience affected
This update is relevant for developers and IT professionals managing Azure Event Hubs, especially those responsible for cloud security, network architecture, and compliance in enterprise environments.
Important notes if any
To leverage NSP, Event Hubs resources must be configured within the defined perimeter. Existing Event Hubs deployments may require configuration updates to align with NSP policies. This feature is critical for organizations seeking advanced network isolation and tighter control over public access to their PaaS messaging infrastructure. For implementation details and prerequisites, refer to Azure documentation.
Details:
Comprehensive Technical Explanation: Azure Event Hubs Network Security Perimeter (NSP) Support
Background and Purpose of the Update: Azure Event Hubs is a fully managed, real-time data ingestion service for large-scale event streaming. Security and network isolation are critical for organizations handling sensitive data. Traditionally, controlling access to PaaS resources like Event Hubs relied on IP-based restrictions or private endpoints, which could be complex and limited in scope. The introduction of Network Security Perimeter (NSP) support addresses the need for a more robust, logical network isolation boundary, allowing organizations to enforce perimeter-based access controls and minimize exposure to public networks.
Specific Features and Detailed Changes: With this update, Azure Event Hubs now supports NSP, enabling:
This change allows Event Hubs to participate in NSP configurations, aligning its security model with other Azure PaaS services that support NSP.
Technical Mechanisms and Implementation Methods: NSP works by establishing a logical boundary around Azure PaaS resources. Administrators can configure perimeter rules that specify which traffic is allowed or denied based on network origin, including:
Event Hubs resources are integrated with NSP via Azure Resource Manager (ARM) and Azure Policy. Administrators use ARM templates or the Azure Portal to assign Event Hubs to a perimeter and configure access rules. NSP leverages Azure’s underlying network infrastructure to enforce these rules at the platform level, ensuring that only compliant traffic reaches Event Hubs.
Use Cases and Application Scenarios:
Important Considerations and Limitations:
Integration with Related Azure Services:
Summary Sentence: Azure Event Hubs now supports Network Security Perimeter, allowing organizations to define logical network isolation boundaries and enforce perimeter-based access rules for enhanced security and compliance.
Published: July 07, 2026 17:33:53 UTC Link: Generally Available: Confidential Computing support for Azure Event Hubs Dedicated
Update ID: 567212 Data source: Azure Updates API
Categories: Launched, Analytics, Event Hubs, Compliance, Security, Services
Summary:
What was updated
Azure Event Hubs Dedicated now supports Confidential Computing, which is generally available.
Key changes or new features
This update enables organizations to protect streaming data while it is being processed in memory by leveraging hardware-based trusted execution environments (TEEs). Confidential Computing ensures that sensitive data remains encrypted and secure during processing, reducing exposure to potential threats from unauthorized access or compromised infrastructure.
Target audience affected
Developers and IT professionals who use Azure Event Hubs Dedicated for ingesting, processing, and analyzing sensitive or regulated streaming data. Organizations with strict compliance, privacy, or security requirements will benefit most from this feature.
Important notes
Confidential Computing support is only available for Azure Event Hubs Dedicated (not Standard or Basic tiers). To use this feature, customers may need to review their application architecture and ensure compatibility with TEEs. This enhancement helps meet regulatory and compliance requirements for data protection in industries such as finance, healthcare, and government. For more details, refer to the official Azure Update announcement: https://azure.microsoft.com/updates?id=567212
Details:
Azure Update Report: Confidential Computing Support for Azure Event Hubs Dedicated (General Availability)
Background and Purpose of the Update:
Azure Event Hubs Dedicated is a managed, scalable event ingestion service designed for high-throughput streaming workloads. With the increasing need for data privacy and security, especially for sensitive or regulated data, Microsoft has introduced Confidential Computing support for Azure Event Hubs Dedicated. The primary purpose of this update is to enhance data protection by securing streaming data during in-memory processing, addressing concerns about potential exposure to unauthorized access or tampering.
Specific Features and Detailed Changes:
The update introduces Confidential Computing capabilities to Azure Event Hubs Dedicated. This means that streaming data ingested by Event Hubs can now be processed within hardware-based Trusted Execution Environments (TEEs). These TEEs provide a secure enclave that isolates data and code from the rest of the system, ensuring that even privileged users or malicious software cannot access the data while it is being processed in memory. The feature is generally available, indicating full production support and integration into the Event Hubs Dedicated offering.
Technical Mechanisms and Implementation Methods:
Confidential Computing is implemented using hardware-based TEEs, such as Intel SGX or similar technologies. When enabled, Event Hubs Dedicated processes streaming data within these secure enclaves. The TEEs cryptographically isolate the memory space, protecting data from external access, including from the Azure infrastructure itself. This mechanism ensures that data remains encrypted and inaccessible during processing, only being decrypted within the secure enclave for computation. The integration is seamless for customers, requiring configuration to enable Confidential Computing for their Event Hubs Dedicated instances.
Use Cases and Application Scenarios:
Important Considerations and Limitations:
Integration with Related Azure Services:
Confidential Computing support in Event Hubs Dedicated can be integrated with other Azure services that support Confidential Computing, such as Azure Key Vault, Azure Confidential VMs, and Azure Confidential Containers. This allows organizations to build end-to-end secure data pipelines, ensuring data protection from ingestion to processing and storage. Event Hubs can also be used in conjunction with Azure Stream Analytics, Data Lake, and other analytics services, further extending secure processing capabilities across the Azure ecosystem.
Summary:
Azure Event Hubs Dedicated now offers Confidential Computing support, enabling organizations to protect streaming data during in-memory processing using hardware-based TEEs, thereby enhancing data privacy and security for sensitive workloads.
Published: July 07, 2026 17:31:55 UTC Link: Generally Available: Azure Red Hat OpenShift in Chile Central
Update ID: 566732 Data source: Azure Updates API
Categories: Launched, Containers, Azure Red Hat OpenShift, Features, Open Source, Regions & Datacenters
Summary:
What was updated
Azure Red Hat OpenShift (ARO) is now generally available in the Azure Chile Central region.
Key changes or new features
ARO’s availability in Chile Central enables customers to deploy fully managed OpenShift clusters in Microsoft’s newest Azure region in South America. This expansion supports local data residency, improved latency, and compliance with regional regulations. Developers and IT teams can leverage ARO’s integrated Kubernetes platform for containerized workloads, with built-in security, scalability, and DevOps tools.
Target audience affected
Developers, IT professionals, and organizations in Chile and South America seeking managed OpenShift solutions on Azure. Enterprises requiring local hosting for compliance or performance reasons will benefit most.
Important notes if any
This update aligns with Microsoft’s commitment to regional expansion and supports customers with requirements for data sovereignty and local compliance. Existing ARO features, such as automated upgrades, integrated monitoring, and enterprise support, are available in Chile Central. Customers should review regional pricing and service availability before deploying.
Details:
Azure Update Report: Azure Red Hat OpenShift Now Generally Available in Azure Chile Central
Background and Purpose of the Update
Azure Red Hat OpenShift (ARO) is now generally available in the Azure Chile Central region. This update aligns with Microsoft’s strategy to expand regional coverage and provide enterprise-grade Kubernetes solutions closer to customers in South America. The launch of Microsoft’s first Azure region in Chile enables organizations to deploy OpenShift workloads locally, addressing latency, compliance, and data residency requirements.
Specific Features and Detailed Changes
With this update, ARO is fully supported in Azure Chile Central, offering customers the ability to provision, manage, and scale OpenShift clusters natively within the Azure portal. Key features include:
This regional expansion allows customers to leverage all standard ARO capabilities, now with the added benefit of deploying resources in Chile Central.
Technical Mechanisms and Implementation Methods
Azure Red Hat OpenShift is a jointly engineered, managed Kubernetes platform. It runs on Azure infrastructure, utilizing Azure’s compute, networking, and storage services. Customers can deploy ARO clusters via the Azure portal, CLI, or ARM templates. The service abstracts cluster management tasks such as node provisioning, upgrades, and security patching, enabling IT teams to focus on application development and deployment. Integration with Azure networking allows for secure connectivity and private endpoints, while Azure Monitor and Log Analytics provide operational visibility.
Use Cases and Application Scenarios
Typical use cases include:
Organizations in Chile and neighboring countries can now deploy production-grade OpenShift clusters with reduced latency and improved compliance.
Important Considerations and Limitations
Integration with Related Azure Services
ARO in Chile Central integrates seamlessly with core Azure services, including:
This integration enables organizations to build robust, secure, and scalable containerized applications leveraging Azure’s ecosystem.
Summary Sentence
Azure Red Hat OpenShift is now generally available in Azure Chile Central, enabling organizations to deploy fully managed OpenShift clusters locally with integrated Azure services, supporting regional compliance, performance, and scalability requirements.
This report was automatically generated - 2026-07-08 03:04:12 UTC