Updates Archives

Azure Automation updated DNS records

Target availability: Q2 2020

To support new features in Azure Automation, like Azure Private Links, the automation URLs have been updated. Instead of region-specific URLs, there are now account-specific URLs.

• Automation
• Security
• Services

Web Application Firewall for Azure Front Door service logging enhancements

Azure Web Application Firewall for Azure Front Door now has a match details field in the logs to provide insights on why a request triggered a Web Application Firewall rule.

• Web Application Firewall
• Azure Front Door (classic)
• Security
• Services
• Management
• Features

Private AKS clusters are now generally available in Azure Government

Azure Government customers can now use private AKS clusters for additional security.

• Azure Kubernetes Service (AKS)
• Security
• Regions & Datacenters

Data encryption for Azure Database for PostgreSQL—single server

The preview of data encryption for Azure Database for PostgreSQL—single server is now available. Data encryption with customer-managed keys for Azure Database for PostgreSQL—single server enables you to bring your own key (BYOK) for data protection at rest.

• Azure Database for PostgreSQL
• Security
• Open Source
• Features

Data encryption with customer-managed keys for Azure Database for MySQL

We’re excited to announce the preview of data encryption for Azure Database for MySQL. Data encryption with customer-managed keys for Azure Database for MySQL enables you to bring your own key (BYOK) for data protection at rest.

• Azure Database for MySQL
• Security
• Features

Azure SQL Database Hyperscale—Transparent data encryption with customer-managed keys now in preview

For the Hyperscale service tier in Azure SQL Database, TDE with bring your own key (BYOK) support is now available in preview. TDE with BYOK gives customers full and granular control over usage and management of the database encryption key (also known as TDE protector) and enables central management of keys in Azure Key Vault.

• Azure SQL Database
• Security
• Features

Minimal TLS version setting is now available for Azure Database for MariaDB

Enforce a minimal TLS version at the server level that applies to Azure Database for MariaDB using the new TLS version setting.

• Azure Database for MariaDB
• Security
• Open Source
• Features
• Compliance

Minimal TLS version setting is now available for Azure Database for PostgreSQL

Enforce a minimal TLS version at the server level that applies to Azure Database for PostgreSQL using the new TLS version setting.

• Azure Database for PostgreSQL
• Security
• Open Source
• Features
• Compliance

Minimal TLS version setting is now available for Azure Database for MySQL

Enforce a minimal transport layer security (TLS) version at the server level that applies to Azure Database for MySQL using the new TLS version setting.

• Azure Database for MySQL
• Security
• Open Source
• Features
• Compliance

Azure IoT Edge Moby engine security update for CVE-2020-13401

A security vulnerability has been identified in Moby engine components in Azure IoT Edge. (Windows versions aren’t affected.) Get details and follow instructions to fix the issue in Moby engine version 3.0.12 or later.

• Azure IoT Edge
• Security
• Compliance

CNI security vulnerability in older AKS clusters and mitigation steps

Find out if you are impacted by an identified CNI vulnerability in older AKS clusters and take mitigation steps to address it.

• Security