DailyAzureUpdatesGenerator

September 02, 2026 - Azure Updates Summary Report (Details Mode)

Generated on: September 02, 2026 Target period: Within the last 24 hours Processing mode: Details Mode Number of updates: 9 items

Update List

1. Generally Available: Microsoft Defender for Cloud support for Azure Container Apps (Serverless Containers Posture)

Published: September 01, 2026 22:34:43 UTC Link: Generally Available: Microsoft Defender for Cloud support for Azure Container Apps (Serverless Containers Posture)

Update ID: 570282 Data source: Azure Updates API

Categories: Launched, Containers, Azure Container Apps, Feature

Summary:

Details:

Azure Update Technical Report

Title: Generally Available: Microsoft Defender for Cloud support for Azure Container Apps (Serverless Containers Posture)
Link: Microsoft Azure Update


Background and Purpose of the Update
Microsoft Defender for Cloud is a comprehensive security management solution for Azure resources, providing posture management, threat protection, and compliance monitoring. Azure Container Apps is a serverless container platform that enables developers to deploy microservices and containerized applications without managing infrastructure. Previously, Defender for Cloud’s serverless containers posture management did not natively support Azure Container Apps environments, limiting visibility and security controls for organizations using this service. The purpose of this update is to extend Defender for Cloud’s posture management capabilities to Azure Container Apps, allowing security teams to monitor and manage security across a broader container estate from a unified workflow.

Specific Features and Detailed Changes
With this update, Azure Container Apps environments can now be onboarded into Microsoft Defender for Cloud’s Serverless Containers Posture experience. Key features include:

Technical Mechanisms and Implementation Methods
The integration leverages Defender for Cloud’s existing posture management framework, which includes continuous assessment of resource configurations, compliance checks, and security recommendations. Azure Container Apps environments are now recognized as supported resource types within this framework. Security teams can onboard Container Apps environments via the Defender for Cloud portal, enabling automated posture assessments and recommendations. The technical implementation relies on Azure-native APIs and resource management capabilities, ensuring that posture management is consistent with other container services supported by Defender for Cloud.

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services


Summary Sentence:
Microsoft Defender for Cloud now generally supports Azure Container Apps within its Serverless Containers Posture experience, enabling security teams to centrally manage and assess the security posture of serverless container workloads alongside other container resources from a unified workflow.


2. Generally Available: Windows Server 2025 on AKS

Published: September 01, 2026 22:31:50 UTC Link: Generally Available: Windows Server 2025 on AKS

Update ID: 570090 Data source: Azure Updates API

Categories: Launched, Compute, Containers, Azure Kubernetes Service (AKS), Features

Summary:

Details:

Azure Update Report: Generally Available – Windows Server 2025 on AKS

Background and Purpose of the Update
Organizations leveraging Azure Kubernetes Service (AKS) for Windows-based workloads are facing increasing urgency to modernize their infrastructure as support for older Windows Server versions nears retirement. This update addresses the need for continuity and modernization by making Windows Server 2025 support generally available (GA) on AKS. The purpose is to enable customers to transition their Windows container workloads to a supported, up-to-date platform, ensuring ongoing security, compliance, and performance.

Specific Features and Detailed Changes
With this update, AKS now supports Windows Server 2025 node pools in production environments. This allows customers to create and manage AKS clusters with Windows Server 2025 as the underlying OS for their Windows container workloads. Key features include:

Technical Mechanisms and Implementation Methods
AKS utilizes Azure’s managed Kubernetes platform to orchestrate containerized applications. With Windows Server 2025 GA support, AKS provisions VM-based node pools running Windows Server 2025 images. Customers can specify Windows Server 2025 as the OS version when creating or updating node pools via Azure CLI, ARM templates, or the Azure portal. The AKS control plane manages scheduling, scaling, and health monitoring for Windows Server 2025 nodes, ensuring consistent operation with Kubernetes standards.

Use Cases and Application Scenarios
This update is particularly relevant for organizations running legacy or modern Windows applications in containers, such as:

Important Considerations and Limitations
Technical professionals should note the following:

Integration with Related Azure Services
Windows Server 2025 node pools on AKS integrate seamlessly with other Azure services, including:

Summary Sentence
Windows Server 2025 is now generally available for Azure Kubernetes Service, enabling organizations to modernize and secure their Windows container workloads with full support for production deployments.


3. Generally Available: Artifact Streaming on AKS

Published: September 01, 2026 22:30:59 UTC Link: Generally Available: Artifact Streaming on AKS

Update ID: 570095 Data source: Azure Updates API

Categories: Launched, Compute, Containers, Azure Kubernetes Service (AKS), Feature

Summary:

Data source: Azure Update

Details:

Azure Update Report: Artifact Streaming on AKS (Generally Available)

Background and Purpose of the Update
Azure Kubernetes Service (AKS) is widely used for orchestrating containerized workloads, and Azure Container Registry (ACR) serves as a secure repository for container images. Traditionally, when deploying containers to AKS, the full image must be pulled from ACR before the workload can start. This process can introduce latency, especially with large images or during rapid scaling events. The purpose of this update is to address these bottlenecks by introducing Artifact Streaming, enabling faster and more efficient workload startup and scaling.

Specific Features and Detailed Changes
Artifact Streaming is now generally available for AKS when using ACR. This feature allows container images to be streamed directly to AKS nodes, enabling workloads to start before the entire image is downloaded. The primary change is the ability to begin container execution as soon as the essential layers are available, rather than waiting for the complete image pull. This accelerates deployment times and improves the responsiveness of scaling operations.

Technical Mechanisms and Implementation Methods
Artifact Streaming leverages a layer-by-layer streaming mechanism. When a container is scheduled on AKS, the node begins pulling image layers from ACR. As soon as the initial layers required for container startup are available, the container runtime (such as containerd) initiates the container, while remaining layers continue to download in the background. This is achieved by integrating ACR’s streaming capabilities with AKS’s container runtime, optimizing the image pull process and reducing startup latency.

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services
Artifact Streaming is tightly integrated with Azure Container Registry and Azure Kubernetes Service. It enhances the workflow between these services by optimizing image delivery. This update does not require changes to existing AKS or ACR configurations, but users should ensure their AKS clusters are updated to the latest supported versions to leverage streaming. It complements other Azure DevOps and CI/CD tools by reducing deployment times and improving scalability.

Summary Sentence
Artifact Streaming on AKS is now generally available, enabling faster container startup and improved scalability by allowing workloads to begin execution before full image downloads from Azure Container Registry are complete.


4. Generally Available: Confidential VMs for Azure Linux

Published: September 01, 2026 22:30:18 UTC Link: Generally Available: Confidential VMs for Azure Linux

Update ID: 570100 Data source: Azure Updates API

Categories: Launched, Compute, Containers, Azure Kubernetes Service (AKS), Feature

Summary:

Data source: Using API data
Link: Azure Update

Details:

Azure Update Report: Confidential VMs for Azure Linux Now Generally Available

Background and Purpose of the Update
This update announces the general availability of Confidential Virtual Machines (CVMs) for Azure Linux within Azure Kubernetes Service (AKS). The primary purpose is to provide enhanced security and confidentiality for tenants running highly sensitive container workloads. By enabling CVMs in AKS node pools, organizations can migrate sensitive workloads to AKS with increased assurance of data protection.

Specific Features and Detailed Changes

Technical Mechanisms and Implementation Methods

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services

Summary Sentence
Confidential Virtual Machines for Azure Linux in AKS are now generally available, enabling secure node pools for highly sensitive container workloads and providing robust confidentiality protections for organizations migrating critical applications to Azure Kubernetes Service.


5. Generally Available: Purchase order mapping available in Microsoft Marketplace

Published: September 01, 2026 18:40:59 UTC Link: Generally Available: Purchase order mapping available in Microsoft Marketplace

Update ID: 569700 Data source: Azure Updates API

Categories: Launched, Feature

Summary:

Details:

Azure Update Technical Report

Title: Generally Available: Purchase order mapping available in Microsoft Marketplace
Link: Azure Update


Background and Purpose of the Update
This update introduces purchase order mapping functionality for Microsoft Marketplace transactions, now generally available. The primary purpose is to streamline the alignment of Marketplace purchases with organizational accounting requirements. By enabling purchase order mapping, IT and finance teams can more efficiently allocate Microsoft invoices—including those generated from Marketplace purchases—facilitating improved reconciliation of cloud and AI expenditures.

Specific Features and Detailed Changes
The key feature of this update is the ability to map purchase orders (POs) directly to Marketplace purchases. This enhancement allows users to associate specific purchase orders with their Microsoft invoices, which include Marketplace transactions. The mapping process ensures that each Marketplace purchase is linked to the relevant PO, providing granular visibility and traceability for financial reporting and auditing purposes. The update supplements existing invoice management capabilities, offering additional metadata for each transaction.

Technical Mechanisms and Implementation Methods
Purchase order mapping is implemented within the Microsoft Marketplace purchasing workflow. When making a purchase, users can input or select a purchase order number to associate with the transaction. This PO information is then captured and reflected in the resulting Microsoft invoice. The mapping data is stored and accessible through the invoice management interface, allowing for automated or manual reconciliation processes. Integration with backend accounting systems is facilitated by the inclusion of PO metadata in invoice exports, supporting downstream processing and reporting.

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services
Purchase order mapping is tightly integrated with Microsoft Marketplace and Azure billing services. It enhances invoice management capabilities, supporting Azure Cost Management and Billing workflows. The mapped PO data can be leveraged in reporting tools and exported for integration with financial systems, complementing existing Azure spend tracking and management features.


Summary Sentence:
Purchase order mapping for Microsoft Marketplace purchases is now generally available, enabling organizations to align cloud and AI spend with their accounting needs by associating purchase orders with invoices for improved reconciliation and financial reporting.


6. Generally Available: Azure Firewall auto-learn SNAT routes

Published: September 01, 2026 17:10:38 UTC Link: Generally Available: Azure Firewall auto-learn SNAT routes

Update ID: 570474 Data source: Azure Updates API

Categories: Launched, Networking, Security, Azure Firewall, Features

Summary:

Details:

Azure Update Report: Azure Firewall Auto-Learn SNAT Routes (General Availability)

Background and Purpose of the Update:
Azure Firewall traditionally uses Source Network Address Translation (SNAT) to manage outbound connectivity, translating private IP addresses to public IPs. However, managing SNAT ranges—especially to preserve original source IPs for certain destinations—has required manual configuration. The purpose of this update is to automate the learning and application of SNAT routes, reducing administrative overhead and improving accuracy in SNAT management.

Specific Features and Detailed Changes:
With this update, Azure Firewall now periodically and automatically learns both registered and private destination prefixes. These learned prefixes are then applied as No-SNAT ranges. This means that traffic destined for these prefixes will bypass SNAT, preserving the original source IP address. The feature eliminates the need for manual configuration of No-SNAT ranges, ensuring that the firewall dynamically adapts to changes in destination prefixes.

Technical Mechanisms and Implementation Methods:
The auto-learn mechanism operates by scanning and identifying registered and private destination prefixes within the network environment. Azure Firewall updates its internal configuration to include these prefixes as No-SNAT ranges. The process is periodic, ensuring that any changes in network topology or new prefixes are automatically incorporated. The implementation leverages Azure’s native route discovery and management capabilities, integrating seamlessly with the firewall’s SNAT logic. When outbound traffic matches a learned prefix, the firewall applies No-SNAT, allowing the original source IP to be retained.

Use Cases and Application Scenarios:
This feature is particularly beneficial in scenarios where the original source IP must be preserved for compliance, auditing, or application requirements. For example:

Important Considerations and Limitations:
IT professionals should note that the auto-learn feature is limited to registered and private destination prefixes. Public IP destinations will continue to use SNAT as usual. The periodic learning process may introduce a slight delay in updating No-SNAT ranges when new prefixes are added. Administrators should monitor and verify that critical prefixes are correctly identified and included in No-SNAT ranges. Additionally, reliance on auto-learn does not eliminate the need for occasional manual review, especially in complex network environments.

Integration with Related Azure Services:
Azure Firewall’s auto-learn SNAT routes feature integrates with Azure’s networking stack, including Virtual Networks, Private Endpoints, and Route Tables. It enhances interoperability with services that require source IP preservation, such as Azure Private Link, Azure Bastion, and custom internal applications. The feature works transparently with other Azure Firewall capabilities, such as threat intelligence and logging, ensuring consistent operation across the security perimeter.

Summary Sentence:
Azure Firewall’s auto-learn SNAT routes feature, now generally available, automates the identification and application of No-SNAT ranges for registered and private destination prefixes, streamlining SNAT management and preserving original source IPs for improved operational efficiency and compliance.


7. Generally Available: Azure Copilot Observability Agent supports Basic and Auxiliary table plans

Published: September 01, 2026 16:31:14 UTC Link: Generally Available: Azure Copilot Observability Agent supports Basic and Auxiliary table plans

Update ID: 570250 Data source: Azure Updates API

Categories: Launched, DevOps, Management and governance, Azure Monitor, Azure Copilot, Feature

Summary:

Details:

Azure Update Technical Report

Title: Generally Available: Azure Copilot Observability Agent supports Basic and Auxiliary table plans

Background and Purpose of the Update:
Azure Monitor is a comprehensive platform for collecting, analyzing, and acting on telemetry from cloud and on-premises environments. The Azure Copilot Observability Agent is an AI-powered operational companion designed to enhance Azure Monitor’s capabilities, particularly in terms of interactive analysis and deep investigations. This update addresses the need for broader data coverage by enabling support for Log Analytics data stored in Basic and Auxiliary table plans, which are commonly used for high-volume telemetry and cost-effective data retention.

Specific Features and Detailed Changes:
With this update, the Azure Copilot Observability Agent now supports Log Analytics data in both Basic and Auxiliary table plans. Previously, Copilot’s observability features may have been limited to standard tables, but now teams can leverage Copilot’s AI-driven insights and operational assistance across a wider range of data storage options. This includes the ability to analyze and investigate telemetry data that is stored in Basic tables (optimized for cost and high-volume ingestion) and Auxiliary tables (used for storing supplementary data such as diagnostic logs or custom telemetry).

Technical Mechanisms and Implementation Methods:
The Copilot Observability Agent integrates directly with Azure Monitor’s Log Analytics workspace. It utilizes AI models to interpret and analyze telemetry data, providing interactive analysis and deep investigation capabilities. With this update, the agent’s data ingestion and processing pipeline has been extended to recognize and work with Basic and Auxiliary table schemas. This ensures that queries, anomaly detection, and operational recommendations can now be applied to data stored in these table plans, without requiring migration to standard tables.

Use Cases and Application Scenarios:

Important Considerations and Limitations:

Integration with Related Azure Services:
The Copilot Observability Agent is tightly integrated with Azure Monitor and Log Analytics. It enhances the operational value of telemetry data stored in Basic and Auxiliary tables by providing AI-driven analysis. This update allows seamless use of Copilot’s features alongside other Azure Monitor tools, such as alerting, dashboards, and workbooks, ensuring a unified observability experience across diverse data storage plans.

Summary Sentence:
Azure Copilot Observability Agent is now generally available with support for Log Analytics data in Basic and Auxiliary table plans, enabling AI-powered interactive analysis and deep investigations for high-volume and cost-optimized telemetry within Azure Monitor.


8. Generally Available: Azure Monitor Auxiliary Logs Plan in Azure Government and China regions

Published: September 01, 2026 16:29:24 UTC Link: Generally Available: Azure Monitor Auxiliary Logs Plan in Azure Government and China regions

Update ID: 569899 Data source: Azure Updates API

Categories: Launched, DevOps, Management and governance, Azure Monitor, Features

Summary:

Data source: Using API data
Link: https://azure.microsoft.com/updates?id=569899

Details:

Azure Update Report: Generally Available – Azure Monitor Auxiliary Logs Plan in Azure Government and China Regions

Background and Purpose of the Update
Azure Monitor Logs is a core component of Azure’s observability stack, enabling organizations to collect, analyze, and act on telemetry data from their cloud resources. High-volume, verbose logs—often required for compliance and auditing—can lead to substantial ingestion and retention costs. The Auxiliary table plan was introduced as a cost-effective solution for managing such logs. This update announces the general availability (GA) of the Auxiliary Logs plan in sovereign cloud environments: Azure Government (Fairfax) and China regions, extending this cost optimization capability to customers with strict compliance and data residency requirements.

Specific Features and Detailed Changes

Technical Mechanisms and Implementation Methods

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services

Summary Sentence
The Azure Monitor Auxiliary Logs plan is now generally available in Azure Government (Fairfax) and China regions, providing a cost-effective solution for ingesting and retaining high-volume, verbose logs required for compliance and auditing in sovereign cloud environments.


9. Generally Available: Azure Monitor Auxiliary Logs Plan support for Azure tables and plan switching

Published: September 01, 2026 16:25:33 UTC Link: Generally Available: Azure Monitor Auxiliary Logs Plan support for Azure tables and plan switching

Update ID: 569904 Data source: Azure Updates API

Categories: Launched, DevOps, Management and governance, Azure Monitor, Features

Summary:

More details

Details:

Azure Update Technical Report

Title: Generally Available: Azure Monitor Auxiliary Logs Plan support for Azure tables and plan switching
Link: Azure Update


Background and Purpose of the Update
Azure Monitor Logs is a core component in Azure for collecting, analyzing, and retaining log data from various resources. Many organizations generate high-volume, verbose logs—such as audit and compliance logs—that are infrequently queried but must be retained for regulatory purposes. The Auxiliary table plan was introduced to address the need for cost-effective log ingestion and retention for such scenarios. This update responds to customer demand for expanded support and flexibility in managing these logs.

Specific Features and Detailed Changes
This update introduces two generally available capabilities:

  1. Azure Tables Support: The Auxiliary table plan now supports Azure tables, enabling customers to ingest and retain logs within Azure Monitor using the cost-effective Auxiliary plan. This is particularly useful for logs that are stored in Azure tables and require long-term retention but are rarely accessed.

  2. Plan Switching: Customers can now switch between log ingestion plans for their tables in Azure Monitor. This means that organizations can move their log tables between standard and auxiliary plans as their requirements change, providing greater flexibility in cost management and log retention strategies.

Technical Mechanisms and Implementation Methods

Use Cases and Application Scenarios

Important Considerations and Limitations

Integration with Related Azure Services


Summary Sentence:
Azure Monitor now generally supports the Auxiliary Logs Plan for Azure tables and enables plan switching, providing IT professionals with cost-effective log retention options and flexible management for high-volume, compliance-focused logs.


This report was automatically generated - 2026-09-02 03:06:02 UTC