Azure Snippets w/c 10/02/2025

By Jon Lee

Rather belated happy new year, and welcome to the first post of 2025!

Summary of Azure snippets for the week commencing 10th February 2025, grouped by Azure service.

For all the updates on Azure platform resources and products - Azure updates from Microsoft

GA = Generally Available
Public/Private Preview = as stated
RET = Service retirement

Azure services with highlighted updates this week:

Azure Data Studio

Azure Kubernetes Services

  • AKS Communication Manager (Public Preview) : AKS Communication Manager simplifies notifications for all your AKS maintenance tasks by leveraging Azure Resource Notification and Azure Resource Graph frameworks. It provides timely alerts on event triggers and outcomes, allowing you to closely monitor your upgrades. In case of maintenance failures, it notifies you with the reasons for the failure, reducing operational hassles related to observability and follow-ups. It is a bit more ‘DIY’ than the annoucement suggests - you have to build a Logic App and then hook it in to the ARN maintenance alerts.
  • Parallel image pulls by default in AKS (GA) : By default, AKS versions earlier than 1.31 use serialized image pulls. Starting with AKS version 1.31 preview, AKS defaults to parallel image pulls, which are generally more performant.
  • IMDS restriction support (Public Preview) : Currently, all pods on AKS nodes can access the AKS worker node’s Azure Instance Metadata Service (IMDS) endpoint. AKS now offers a managed solution that restricts IMDS endpoint access for customer pods. Only AKS system pods and user pods with host network can access IMDS for retrieving information or authentication. Good enhancement to the security of your AKS clusters.
  • New AKS Monitoring Experience (Public Preview) : The new Monitoring experience, updating Insights, provides both basic (free) and detailed insights (with enabled Prometheus metrics and logging), offering a unified, single-pane-of-glass experience. The basic experience is available for all AKS users with no configuration required at all.

Azure SQL

  • Azure SQL DB Free offer (GA) : Try 10 Azure SQL Databases free of charge for the life of your subscription. With just a couple of clicks, you can power the application you want to build. This new offer provides 10 databases, each with 32 GB General Purpose, serverless Azure SQL database, and 100,000 vCore seconds of compute free every month. Available for any subscription type, free amount renews monthly.
  • Service Endpoint Policies for Managed Instances (GA) : Azure SQL Managed Instance now allows service endpoint policies for Azure Storage accounts, allowing you to deny your managed instances from accessing any storage account outside of a set of pre-approved ones. This security mechanism helps guard your data from unauthorized copying (data exfiltration) or configuration errors, like exporting production data to development accounts.

Azure Storage

Azure Virtual Network Manager

  • New Pricing for AVNM (GA) : Pricing has moved from a subscription-based model to VNet-based (charged by number of VNets where AVNM is deployed).

Compute

  • 6th Generation Intel-based VMs - Dv6/Ev6 (GA) : Higher performance than previous generations, Azure Boost built-in including a new Microsoft Azure Network Adapter, NVMe interface for disks to boost storage performance. Naturally, these are great for AI workloads :-) Available in UK South but not UK West as yet. Blog post.
  • Upgrade Gen 1 VMs to Gen 2-Trusted Launch (Public Preview) : Trusted Launch VMs provide foundational compute security to Azure Generation 2 VMs by enabling Secure Boot and vTPM capabilities. Trusted Launch capabilities protect OS against rootkits, boot kits and enables attestation by measuring the boot chain of VM. Make sure you check out the documentation if you’re thinking of doing this - it’s not recommended for Production workloads at the moment, and there are a lot of prerequisites and potential gotchas. Note also that you can create a new Gen 2 VM without Trusted Launch, but the upgrade only supports moving to Trusted Launch.

Infrastructure as Code