Azure Snippets w/c 26/05/2025

By Jon Lee

Summary of Azure snippets for the week commencing 26th May 2025, grouped by Azure service.

With Build taking place last week, a lot of announcements have dropped as usual, so this is a fairly big post. The Build 2025 Book of News has all the details of announcements from there. Plenty of AI focus as usual - I’ll cover some of the stuff that isn’t AI-related here :-)

For all the updates on Azure platform resources and products - Azure updates from Microsoft

GA = Generally Available
Public/Private Preview = as stated
RET = Service retirement

Azure services with highlighted updates this week:

API Center

API Management

Azure Backup

Azure Kubernetes Services

Azure Monitor

  • Granular RBAC in Azure Monitor Log Analytics (Public Preview) : On top of the existing capabilities of Azure Monitor Log Analytics Workspace and table level access, you can now maintain all your data in a single Log Analytics workspace and provide least-privilege access at any level, using Azure Attribute-Based Access Control (ABAC) as part of your Azure role assignment. This capability allows you to filter the data that each user can view or query, based on the conditions that you specify. This means that you can now control which users can access which tables and rows (Row Level RBAC), based on your business or security needs and defined criteria.

Azure Storage

Compute

Dev Box

Governance

  • Azure Quota Groups (GA) : This feature enables quota sharing across a group of subscriptions, reducing the number of individual quota transactions. Quota management is elevated from the subscription level to a Quota Group Azure Resource Manager (ARM) object, allowing customers to manage procured quota within a group through self-service — without Microsoft approval. For Enterprise Agreement or MCA customers, this brings quota management onto the same level as management groups, and allows a centrally managed quota to be shared across multiple subscriptions - unused quota can be assigned to subs that can use it without needing a support request ticket.

  • Azure SRE Agent (Public Preview) : Azure SRE agent is a new agentic AI service that can free developers from the constant stress of late-night alerts by monitoring production systems 24/7, responding to incidents in real time, and autonomously troubleshooting issues as they arise.

Infrastructure as Code

  • GitHub Copilot for Azure (GA) : With features to help you create deployments with Bicep and Terraform, efficient issue identification and resolution, and deep integration with Azure resources, GitHub Copilot for Azure empowers developers to build, manage, and troubleshoot applications effortlessly.

Planetary Computer

Virtual Networks

  • Private Subnet (GA) : Essentially, this removes the ‘implicit’ default outbound connectivity to the Internet that e.g. VMs have when created in a network without an ’explicit’ outbound connection mechanism, which is through default public IP addresses that aren’t very visible. With a private subnet, you’ll need to explicitly create an outbound connectivity method, such as a NAT Gateway or Public IP address. Important to note that this will be the default deployment mode for all new VNets/subnets after 30th September 2025. (NAT Gateways and Public IP addresses, of course, are not free :-)

  • VM Network Troubleshooter (Public Preview) : Customers can identify blocked ports faster with the Azure Portal’s latest enhancement. The VM Overview blade in the Azure Portal has a new troubleshooter tool allowing users to run network diagnostics and check for common ports (HTTP/S and RDP at the moment) being blocked. Anyone who’s had to troubleshoot VM connectivity will most likely appreciate anything that makes it easier!