Azure updates

Public preview: Azure Bastion now support shareable links

Shareable links allows users to connect to target resources via Azure Bastion without access to the Azure portal.

• Security
• Features

General availability: Azure Sphere TKS updated; OS version 22.11 expected December 1

Participate in retail evaluation now to ensure compatibility. The Azure Sphere team has also updated the trusted keystore of Azure Sphere devices, resulting in an additional reboot for production devices.

• Security
• Operating System

General availability: TLS 1.3 with Application Gateway

Start using the new policies with TLS 1.3 for your Azure Application Gateway to improve security and performance.

• Application Gateway
• Security
• Services
• Features

General availability: Per Rule Actions on regional Web Application Firewall

Azure's regional Web Application Firewall on Application Gateway now supports customizing actions per rule. This new functionality allows you greater control over how the Web Application Firewall handles incoming traffic.

• Web Application Firewall
• Application Gateway
• Security
• Features

General availability: Bot Manager Rule Set 1.0 on regional Web Application Firewall

This rule set provides you enhanced protection against bots and provides granular control over bots detected by WAF by categorizing bot traffic as good, bad, or unknown bots.

• Web Application Firewall
• Application Gateway
• Security
• Features

Azure Resource Manager — Migrating to TLS 1.2 with Deprecation of Outdated Security Protocols

Target retirement date: September 01, 2023

Azure Resource Manager will be deprecating support for TLS 1.1 and older in Fall 2023. To maintain an uninterrupted connection with Azure Resource Manager, update your operating systems and work environments to support TLS 1.2.

• Azure Resource Manager
• SDK and Tools
• Security
• Retirements

Public preview: Microsoft Azure Managed HSM TLS Offload Library

Azure Managed HSM now supports SSL/TLS Offload for F5 and Nginx.

• Security

Public preview: Rotate SSH keys on existing AKS nodepools

You can now update SSH keys on existing AKS nodepools post deployment.

• Azure Kubernetes Service (AKS)
• Security
• Features

General availability: Default Rule Set 2.1 for Azure Web Application Firewall

Increase your security posture and reduce false positives with Default Rule Set 2.1, now generally available on Azure's global Web Application Firewall running on Azure Front Door.

• Azure Front Door
• Web Application Firewall
• Security
• Features

General availability: Microsoft Azure Payment HSM Service

Secure your digital payment system in the cloud with Azure Payment HSM.

• Security
• Services

Generally available: Azure Storage — Attribute-based access control for standard storage accounts

ABAC for Azure Storage Blobs, ADLS Gen2, and queues is now generally available and can be used for access control by defining conditions on role-assignments based on resource and request attributes.

• Security
• Features

Public preview: Enhanced soft delete for Azure Backup

Enhanced soft delete helps you recover your backup data after it has been deleted, giving you protection against data loss scenarios like ransomwares, malicious actors, and accidental deletes.

• Azure Backup
• Security
• Microsoft Ignite
• Management
• Features

Public preview: Multi-user authorization for Backup vaults

Multi-user authorization provides enhanced protection for your backup data against unauthorized critical operations.

• Azure Backup
• Security
• Microsoft Ignite
• Management
• Features

Public preview: Immutable vaults for Azure Backup

Immutable vaults helps you protect your backups against threats like ransomware attacks and malicious actors by ensuring that your backup data cannot be deleted before its intended expiry time.

• Azure Backup
• Security
• Microsoft Ignite
• Management
• Features

General availability: Static IP configurations of private endpoints

Azure private endpoint support of statically defined IP addresses is now generally available allowing you to provide static IP addresses when configuring your private endpoints.

• Azure Private Link
• Virtual Network
• Security
• Microsoft Ignite
• Services
• Features

General availability: Custom network interface name configurations of private endpoints

Azure private endpoint (PE) support of custom network interface (NIC) names is now generally available. With this feature you can now deploy PE NICs without the GUID suffix.

• Azure Private Link
• Virtual Network
• Security
• Microsoft Ignite
• Services
• Features

Generally available: Control the minimum TLS version used with Azure Service Bus

Configure your Service Bus namespace to require that clients send and receive data with a minimal version of transport layer security (TLS).

• Service Bus
• Security
• Microsoft Ignite
• Compliance