Azure updates

Azure Virtual Network Manager security admin rule generally available in 30 regions

Azure Virtual Network Manager's security admin rule configuration is now generally available in 30 regions, empowering users to enforce security rules across their virtual networks globally.

• Azure Virtual Network Manager
• Security
• Regions & Datacenters
• Services
• Features

Private Preview: Upgrade existing Azure Gen1 VMs to Gen2-Trusted launch

Target availability: Q1 2024

Support to upgrade existing Gen1 VMs to Trusted launch in preview.

• Virtual Machines
• Security
• Features
• Compliance

General Availability: Premium SSD v2 and Ultra disks support with Trusted launch

Trusted launch VMs now support Azure Premium SSD v2 and Ultra disks storage.

• Virtual Machines
• Managed Disks
• Ultra Disk Storage
• Security
• Services
• Features
• Compliance

General availability: Security Update for Application Gateway WAF CVE-2023-50164

Stay protected against CVE-2023-50164 with the help of Azure’s regional WAF running on Application Gateway.

• Application Gateway
• Web Application Firewall
• Security
• Services
• Features

Public preview: Intel TDX based confidential VMs now available in the Azure portal, Azure CLI and ARM templates

The DCesv5 and ECesv5-series confidential virtual machines (VMs) are now available in the Azure portal and via the CLI and ARM templates. These VMs enable organizations to bring confidential workloads to the cloud without code changes to applications.

• Virtual Machines
• Security
• Regions & Datacenters
• Pricing & Offerings

General availability: Encryption with customer-managed keys in Azure Health Data Services

The ability to encrypt health data in the cloud with customer-managed keys using Azure Health Data Services is generally available.

• Security
• Features

Migration of Azure Virtual Network injected Azure Data Explorer cluster to Private Endpoints

If you are using VNet injection to secure your Azure Data Explorer (ADX) cluster, you may face some challenges such as complexity, scalability, and public IP dependency. We recommend that you switch to Azure Private Endpoints, which allow you to connect to your cluster privately within your VNet. We have released a preview feature that lets you migrate your VNet injected ADX cluster to Private Endpoints easily and quickly.

• Azure Data Explorer
• Azure Private Link
• Security
• Features

General availability: Encryption with customer-managed keys in Azure Health Data Services

The ability to encrypt health data in the cloud with customer-managed keys using Azure Health Data Services is generally available.

• Azure Health Data Services
• Security
• Features

Preview: New Basic SKU functionality for Azure confidential ledger

The Azure confidential ledger Basic SKU gated preview will allow select customers using other Azure products to uplevel integrity protection by storing periodic data, blobs, and application signatures in Azure confidential ledger.

• Security
• Microsoft Ignite
• Services
• Management
• Features

Generally available: AMD confidential VM option for Azure Databricks

Users can now select AMD-based confidential VMs for their Azure Databricks cluster driver node and cluster worker nodes.

• Azure Databricks
• Virtual Machines
• Security
• Microsoft Ignite
• Features

Public Preview: Announcing the preview of Azure Managed Confidential Consortium Framework

Deploy and build decentralized governance applications with granular confidentiality amongst members.

• Azure confidential ledger
• SDK and Tools
• Security
• Microsoft Ignite
• Open Source
• Services

Preview: Azure confidential VMs with NVIDIA H100 Tensor Core GPUs

Azure confidential VMs with NVIDIA H100 Tensor Core GPUs is open for preview. Please use the sign-up at aka.ms/accgpusignup for your onboarding request.

• Security
• Microsoft Ignite
• Services

Public preview: Confidential containers on Azure Kubernetes Service (AKS)

AKS now lets you run individual pods in their own trusted execution environment (TEE)

• Azure Kubernetes Service (AKS)
• Security
• Microsoft Ignite
• Open Source
• Services
• Features

Public preview: Confidential temp disk encryption for confidential VMs

Confidential temp disk encryption is now available for all confidential VMs.

• Virtual Machines
• Security
• Microsoft Ignite
• Services
• Features

Public Preview: New Marketplace app for Storage customers and feature enhancements to portal for Azure confidential ledger

Storage customers will now be able to use a marketplace application to connect their immutable blobs with enhanced integrity protection from Azure confidential ledger. Signatures from blobs will be stored and validated, as needed. In addition, the Azure confidential ledger portal experience has been enhanced to allow exploring transactions and retrieving cryptographic proof.

• Security
• Microsoft Ignite
• Services
• Management
• Features

Preview: Disk Integrity Tool for confidential VMs in Azure

The disk integrity tool for confidential VMs is now in preview. This enables you to measure and attest that your OS disk is launched as expected.

• Virtual Machines
• SDK and Tools
• Security
• Microsoft Ignite
• Features