DailyAzureUpdatesGenerator

July 08, 2026 - Azure Updates Summary Report (Details Mode)

Generated on: July 08, 2026 Target period: Within the last 24 hours Processing mode: Details Mode Number of updates: 6 items

Update List

1. Public Preview: Exceptions in WAF for Azure Application Gateway and Azure Front Door

Published: July 07, 2026 17:42:50 UTC Link: Public Preview: Exceptions in WAF for Azure Application Gateway and Azure Front Door

Update ID: 567218 Data source: Azure Updates API

Categories: In preview, Networking, Security, Application Gateway, Azure Front Door, Web Application Firewall, Features, Services

Summary:

For more information, see the official Azure Update: Public Preview: Exceptions in WAF for Azure Application Gateway and Azure Front Door.

Details:

Azure Update Explanation: Public Preview – Exceptions in WAF for Azure Application Gateway and Azure Front Door

Background and Purpose of the Update
Azure Web Application Firewall (WAF) is a core security service designed to protect web applications hosted on Azure Application Gateway and Azure Front Door from common web vulnerabilities and attacks, such as SQL injection and cross-site scripting. However, WAF can sometimes generate false positives, blocking legitimate requests that are safe and expected for specific applications. Previously, exclusions could be configured to reduce such false positives by omitting specific request attributes from inspection. This update introduces the public preview of “Exceptions” in WAF, providing a more granular and flexible way to handle such scenarios.

Specific Features and Detailed Changes
With the introduction of Exceptions in WAF for both Azure Application Gateway and Azure Front Door, administrators can now define specific exceptions to WAF rules. This capability enables more precise control over which requests are inspected or blocked, beyond the existing exclusions mechanism. Exceptions can be configured to bypass or modify the behavior of WAF for certain requests, reducing the risk of blocking legitimate traffic due to overly broad rule matches.

Technical Mechanisms and Implementation Methods
Exceptions are implemented as configurable settings within the WAF policy associated with an Application Gateway or Front Door instance. Administrators can define exception rules that target specific request patterns, headers, or other attributes. When a request matches an exception, the WAF can be instructed to skip inspection for that request or alter the enforcement of certain rules. This mechanism allows for fine-tuned handling of edge cases without compromising the overall security posture.

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services
Exceptions are integrated into the WAF policies for both Azure Application Gateway and Azure Front Door, ensuring consistent management across these services. This update aligns with Azure’s broader security and compliance tooling, supporting integration with Azure Policy, monitoring, and logging for audit and incident response purposes.

Summary Sentence
The public preview of Exceptions in Azure Web Application Firewall for Application Gateway and Front Door introduces a more granular way to reduce false positives by allowing administrators to define specific exceptions to WAF rules, enhancing security management and application compatibility.


2. Public Preview: Azure Chaos Studio Workspaces and Scenarios

Published: July 07, 2026 17:40:32 UTC Link: Public Preview: Azure Chaos Studio Workspaces and Scenarios

Update ID: 567184 Data source: Azure Updates API

Categories: In preview, Analytics, Management and governance, Azure Chaos Studio, Features, Services, Feature

Summary:

Source: Azure Update

Details:

Azure Update Summary: Public Preview: Azure Chaos Studio Workspaces and Scenarios

Background and Purpose of the Update
Azure Chaos Studio is Microsoft’s managed chaos engineering platform designed to help organizations proactively test the resilience of their cloud workloads. The introduction of Workspaces and Scenarios addresses the need for a more streamlined, application-centric approach to chaos testing. This update aims to simplify and accelerate the process of validating how applications respond to real-world outages, enabling IT professionals to focus chaos experiments directly on relevant application scopes.

Specific Features and Detailed Changes
The update introduces two key features:

Technical Mechanisms and Implementation Methods
Workspaces are implemented as logical containers within Chaos Studio, enabling users to group resources and define boundaries for chaos experiments. When a Workspace is pointed at a subscription, resource group, or service group, Chaos Studio automatically identifies the resources within that scope, streamlining experiment setup.

Scenarios are built using Chaos Studio’s experiment definition framework, which allows users to specify failure actions (such as shutting down VMs, introducing network latency, or simulating service unavailability) and target resources within the Workspace. The execution of Scenarios leverages Azure’s native orchestration and monitoring capabilities, ensuring that experiments are safely conducted and results are captured for analysis.

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services
Workspaces and Scenarios enhance integration with Azure Resource Manager by allowing resource grouping at various levels. Chaos Studio can also leverage Azure Monitor for tracking experiment results and alerting on failures. Integration with Azure DevOps enables automated chaos testing within deployment pipelines, supporting modern DevOps practices.

Summary Sentence
Azure Chaos Studio’s new Workspaces and Scenarios features, now in public preview, provide IT professionals with a faster, application-centric method to validate workload resilience by targeting chaos experiments at specific subscription, resource group, or service group scopes.


3. Public Preview: Export historical data from Log Analytics workspace with Export jobs

Published: July 07, 2026 17:37:55 UTC Link: Public Preview: Export historical data from Log Analytics workspace with Export jobs

Update ID: 566591 Data source: Azure Updates API

Categories: In preview, DevOps, Management and governance, Azure Monitor, Features, Services

Summary:

What was updated:
Azure Log Analytics now offers a Public Preview feature called Export jobs, allowing users to export historical data from a Log Analytics workspace.

Key changes or new features:

Target audience affected:

Important notes:

Azure Update Link

Details:

Azure Update Summary: Public Preview – Export Historical Data from Log Analytics Workspace with Export Jobs

Background and Purpose of the Update:
This update introduces the Log Analytics Export job feature, now available in public preview. The purpose is to provide IT professionals with a streamlined method to export historical data from Log Analytics workspaces. Previously, extracting large volumes of historical data was complex and often required custom scripting or manual processes. This feature addresses the need for efficient, targeted data extraction, enabling organizations to move only relevant data to external systems for further analysis, compliance, or archival.

Specific Features and Detailed Changes:
The Export job allows users to define a specific query and time range, ensuring that only the necessary subset of data is exported rather than the entire workspace contents. Data is exported directly from Log Analytics to an Azure Storage account, facilitating secure and scalable storage. The feature supports granular control over the export process, enabling users to tailor exports to their operational or regulatory requirements.

Technical Mechanisms and Implementation Methods:
Export jobs are configured within the Log Analytics workspace. Users specify:

The export process is managed as a job, which can be monitored for progress and completion. Data is transferred securely and efficiently, leveraging Azure’s native integration between Log Analytics and Storage accounts. Exported data is typically formatted for compatibility with downstream processing or ingestion systems.

Use Cases and Application Scenarios:

Important Considerations and Limitations:

Integration with Related Azure Services:

Summary Sentence:
The Log Analytics Export job feature in public preview enables targeted export of historical data from Log Analytics workspaces to Azure Storage accounts, offering IT professionals granular control over data extraction for compliance, migration, and archival scenarios, while integrating seamlessly with Azure’s storage and analytics services.


4. Generally Available: Network Security Perimeter support for Azure Event Hubs

Published: July 07, 2026 17:35:19 UTC Link: Generally Available: Network Security Perimeter support for Azure Event Hubs

Update ID: 567203 Data source: Azure Updates API

Categories: Launched, Analytics, Event Hubs, Features, Security, Services

Summary:

Details:

Comprehensive Technical Explanation: Azure Event Hubs Network Security Perimeter (NSP) Support

Background and Purpose of the Update: Azure Event Hubs is a fully managed, real-time data ingestion service for large-scale event streaming. Security and network isolation are critical for organizations handling sensitive data. Traditionally, controlling access to PaaS resources like Event Hubs relied on IP-based restrictions or private endpoints, which could be complex and limited in scope. The introduction of Network Security Perimeter (NSP) support addresses the need for a more robust, logical network isolation boundary, allowing organizations to enforce perimeter-based access controls and minimize exposure to public networks.

Specific Features and Detailed Changes: With this update, Azure Event Hubs now supports NSP, enabling:

This change allows Event Hubs to participate in NSP configurations, aligning its security model with other Azure PaaS services that support NSP.

Technical Mechanisms and Implementation Methods: NSP works by establishing a logical boundary around Azure PaaS resources. Administrators can configure perimeter rules that specify which traffic is allowed or denied based on network origin, including:

Event Hubs resources are integrated with NSP via Azure Resource Manager (ARM) and Azure Policy. Administrators use ARM templates or the Azure Portal to assign Event Hubs to a perimeter and configure access rules. NSP leverages Azure’s underlying network infrastructure to enforce these rules at the platform level, ensuring that only compliant traffic reaches Event Hubs.

Use Cases and Application Scenarios:

Important Considerations and Limitations:

Integration with Related Azure Services:

Summary Sentence: Azure Event Hubs now supports Network Security Perimeter, allowing organizations to define logical network isolation boundaries and enforce perimeter-based access rules for enhanced security and compliance.


5. Generally Available: Confidential Computing support for Azure Event Hubs Dedicated

Published: July 07, 2026 17:33:53 UTC Link: Generally Available: Confidential Computing support for Azure Event Hubs Dedicated

Update ID: 567212 Data source: Azure Updates API

Categories: Launched, Analytics, Event Hubs, Compliance, Security, Services

Summary:

Details:

Azure Update Report: Confidential Computing Support for Azure Event Hubs Dedicated (General Availability)

Background and Purpose of the Update:
Azure Event Hubs Dedicated is a managed, scalable event ingestion service designed for high-throughput streaming workloads. With the increasing need for data privacy and security, especially for sensitive or regulated data, Microsoft has introduced Confidential Computing support for Azure Event Hubs Dedicated. The primary purpose of this update is to enhance data protection by securing streaming data during in-memory processing, addressing concerns about potential exposure to unauthorized access or tampering.

Specific Features and Detailed Changes:
The update introduces Confidential Computing capabilities to Azure Event Hubs Dedicated. This means that streaming data ingested by Event Hubs can now be processed within hardware-based Trusted Execution Environments (TEEs). These TEEs provide a secure enclave that isolates data and code from the rest of the system, ensuring that even privileged users or malicious software cannot access the data while it is being processed in memory. The feature is generally available, indicating full production support and integration into the Event Hubs Dedicated offering.

Technical Mechanisms and Implementation Methods:
Confidential Computing is implemented using hardware-based TEEs, such as Intel SGX or similar technologies. When enabled, Event Hubs Dedicated processes streaming data within these secure enclaves. The TEEs cryptographically isolate the memory space, protecting data from external access, including from the Azure infrastructure itself. This mechanism ensures that data remains encrypted and inaccessible during processing, only being decrypted within the secure enclave for computation. The integration is seamless for customers, requiring configuration to enable Confidential Computing for their Event Hubs Dedicated instances.

Use Cases and Application Scenarios:

Important Considerations and Limitations:

Integration with Related Azure Services:
Confidential Computing support in Event Hubs Dedicated can be integrated with other Azure services that support Confidential Computing, such as Azure Key Vault, Azure Confidential VMs, and Azure Confidential Containers. This allows organizations to build end-to-end secure data pipelines, ensuring data protection from ingestion to processing and storage. Event Hubs can also be used in conjunction with Azure Stream Analytics, Data Lake, and other analytics services, further extending secure processing capabilities across the Azure ecosystem.

Summary:
Azure Event Hubs Dedicated now offers Confidential Computing support, enabling organizations to protect streaming data during in-memory processing using hardware-based TEEs, thereby enhancing data privacy and security for sensitive workloads.


6. Generally Available: Azure Red Hat OpenShift in Chile Central

Published: July 07, 2026 17:31:55 UTC Link: Generally Available: Azure Red Hat OpenShift in Chile Central

Update ID: 566732 Data source: Azure Updates API

Categories: Launched, Containers, Azure Red Hat OpenShift, Features, Open Source, Regions & Datacenters

Summary:

Details:

Azure Update Report: Azure Red Hat OpenShift Now Generally Available in Azure Chile Central

Background and Purpose of the Update
Azure Red Hat OpenShift (ARO) is now generally available in the Azure Chile Central region. This update aligns with Microsoft’s strategy to expand regional coverage and provide enterprise-grade Kubernetes solutions closer to customers in South America. The launch of Microsoft’s first Azure region in Chile enables organizations to deploy OpenShift workloads locally, addressing latency, compliance, and data residency requirements.

Specific Features and Detailed Changes
With this update, ARO is fully supported in Azure Chile Central, offering customers the ability to provision, manage, and scale OpenShift clusters natively within the Azure portal. Key features include:

This regional expansion allows customers to leverage all standard ARO capabilities, now with the added benefit of deploying resources in Chile Central.

Technical Mechanisms and Implementation Methods
Azure Red Hat OpenShift is a jointly engineered, managed Kubernetes platform. It runs on Azure infrastructure, utilizing Azure’s compute, networking, and storage services. Customers can deploy ARO clusters via the Azure portal, CLI, or ARM templates. The service abstracts cluster management tasks such as node provisioning, upgrades, and security patching, enabling IT teams to focus on application development and deployment. Integration with Azure networking allows for secure connectivity and private endpoints, while Azure Monitor and Log Analytics provide operational visibility.

Use Cases and Application Scenarios
Typical use cases include:

Organizations in Chile and neighboring countries can now deploy production-grade OpenShift clusters with reduced latency and improved compliance.

Important Considerations and Limitations

Integration with Related Azure Services
ARO in Chile Central integrates seamlessly with core Azure services, including:

This integration enables organizations to build robust, secure, and scalable containerized applications leveraging Azure’s ecosystem.

Summary Sentence
Azure Red Hat OpenShift is now generally available in Azure Chile Central, enabling organizations to deploy fully managed OpenShift clusters locally with integrated Azure services, supporting regional compliance, performance, and scalability requirements.


This report was automatically generated - 2026-07-08 03:04:12 UTC