Azure updates

Public preview: Image integrity support in Azure Kubernetes Service (AKS)

You can now ensure that only signed container images are deployed to your AKS clusters.

• Azure Kubernetes Service (AKS)
• Azure Container Registry
• Security
• Features

TLS 1.2 to become the minimum TLS version for Azure Storage

Target availability: Q4 2024

TLS 1.2 to become the minimum TLS version for Azure Storage

• Azure Blob Storage
• Azure Data Lake Storage
• Compliance
• Security

Public preview: Announcing the new Azure Bastion Developer SKU

The Bastion Developer SKU represents a novel, cost-effective, and streamlined version of the Bastion service.

• Azure Bastion
• Services
• Security
• Features

GA: Bring our own keys (BYOK) on Ephemeral OS Disk

You can now encrypt OS and Data disks of your AKS nodes in production with your own managed keys.

• Azure Kubernetes Service (AKS)
• Security
• Features

Windows Server 2012/R2 reaches end of support

Windows Server 2012/R2 reaches end of support today on October 10, 2023. Microsoft has several options for organizations to remain protected.

• Security

General Availability: Upgrade your existing Azure Gen2 VMs to Trusted Launch

Enable Trusted Launch foundational compute security on existing Azure Generation 2 VMs.

• Virtual Machines
• Services
• Compliance
• Security
• Features

Generally Available: Multi-user authorisation for Backup vaults

Multi-user authorization provides enhanced protection for your backup data against unauthorized critical operations.

• Security
• Management
• Features

Generally available: Enhanced soft delete for Azure Backup

Enhanced soft delete helps you recover your backup data even after it has been deleted, giving you protection against data loss scenarios like ransomwares, malicious actors, and accidental deletes.

• Security
• Management
• Features

General Availability: GitHub Advanced Security for Azure DevOps

Learn how to enable GitHub Advanced Security for Azure DevOps code scanning, secret scanning, and dependency scanning in Azure DevOps and connect to Microsoft Defender for Cloud.

• Azure DevOps
• GitHub Advanced Security for Azure DevOps
• Security

Authenticate Azure Monitor logs connector in Logic App with managed identity

When you enable managed identity authentication in Logic App, and grant it permissions in Log Analytics workspace, or Application Insights component, you can query data without needing...

• Azure Monitor
• Log Analytics
• Application Insights
• Compliance
• Security
• Features

General Availability: Malware Scanning in Defender for Storage

Target availability: Q3 2023

Malware Scanning in Defender for Storage enables organizations to detect and prevent malware distribution events with content scanning upon upload and near real-time malware detection powered by Microsoft Defender Antivirus technologies.

• Microsoft Defender for Cloud
• Microsoft Defender
• Microsoft Defender for Cloud
• Services
• Pricing & Offerings
• Security
• Features

General availability: Azure Backup support for Azure Files in China North2, China East 2, China North 3, and China East 3

Target availability: Q3 2023

Azure Backup now supports Azure Files in China North2, China East 2, China North 3, and China East 3

• Pricing & Offerings
• Security
• Features

General availability: Sensitive Data Protection for Application Gateway Web Application Firewall

Protect the sensitive data getting stored in your Web Application Firewall (WAF) using log scrubbing on Azure’s regional Web Application Firewall running on Application Gateway.

• Application Gateway
• Web Application Firewall
• Security
• Features

Azure Firewall: Poland Central Region is now in general availability

Azure Firewall is now generally available in the Poland Central region.

• Azure Firewall
• Services
• Regions & Datacenters
• Security
• Features

Azure Firewall: Explicit Proxy is now in public preview

This configuration allows traffic from the sending application to be directed to the private IP address of the firewall, facilitating direct egress from the firewall without the need for a UDR.

• Azure Firewall
• Services
• Security
• Features

Azure Firewall: Auto-Learn SNAT routes feature is now in public preview

Azure Firewall can now learn address ranges and automatically configure them to be excluded from SNAT, to reduce time and complexity spent manually defining SNAT private ranges.

• Azure Firewall
• Services
• Security
• Features