Azure Snippets w/c 02/02/2026
By Jon Lee
Summary of Azure snippets for the week commencing 2nd February 2026, grouped by Azure service.
For all the updates on Azure platform resources and products - Azure updates from Microsoft
GA = Generally Available
Public/Private Preview = as stated
RET = Service retirement
Azure services with highlighted updates this week:
Azure Backup
- Vaulted Backups for Azure Disk (Private Preview) : Disk backup finally gets a Vaulted tier along with the current Operational tier. The private preview introduces this along with regional disaster recovery to allow disk backups to be restored to a paired region.
Azure Kubernetes Services
Deployment safeguards – pod security standard support in AKS (GA) : Azure Kubernetes Service (AKS) now supports Kubernetes Pod Security Standards within Deployment Safeguards, enabling centralized management of Baseline, Restricted, and Privileged standards at scale. This capability allows teams to ensure that deployment manifests comply with selected security standards, help technical practitioners strengthen workload security, reduce configuration drift, and simplify the rollout of cluster-wide security controls.
Retina 1.0 Is Now Available (GA) : Retina is an open-source, Kubernetes network observability platform. It enables you to continuously observe and measure network health, and investigate network issues on-demand with integrated Kubernetes-native workflows. (I’ve put this in the AKS section, but there are no Azure dependencies - Retina runs anywhere Kubernetes does and can be used across distributions.)
Azure Storage
- User delegation SAS for Azure Tables, Azure Files, and Azure Queues (Public Preview) : User delegation SAS for Azure Tables, Azure Files, and Azure Queues is now available in public preview. User delegation (UDK) SAS is already generally available for blobs, and this release extends that support to tables, files, and queues. User delegation SAS allows users to create a more secure SAS token than account or service SAS by tying the SAS token to the delegator.
Compute
- 7th generation Intel-based VMs – Dlsv7/Dsv7/Esv7 (Public Preview) : A year after the 6th generation General Purpose and Memory Optimised VMs went GA, the 7th generation is now in preview. Powered by the latest Intel® Xeon® 6 processors (Granite Rapids), the latest Azure Intel-based v7 VMs are designed to power ever increasing compute demands in today’s data center environment and deliver exceptional performance across a wide range of workloads, from traditional enterprise applications to cutting edge AI. Among other improvements, these VMs can scale up to 372 vCPUs with Esv7 VMs enabling up to 2.8TiB of memory. (7th generation AMD-based VMs are already GA - available in UK South but not UK West yet.)
Infrastructure as Code
- Release of Bicep Azure Verified Modules for Platform Landing Zone (GA) : Azure Verified Modules (AVM) represent Microsoft’s unified approach to Infrastructure as Code. Born from the need to eliminate fragmentation across Microsoft’s infrastructure-as-code (IaC) ecosystem, AVM provides consistent module standards, rigorous testing frameworks, and clear contribution guidelines. This release represents a significant milestone in the evolution of Azure Landing Zones. Bicep customers can now leverage the same modular, flexible, and battle-tested approach that our Terraform community has been using, all built on the foundation of Azure Verified Modules.
Virtual Networks
- Azure virtual network routing appliance (Public Preview) : The virtual network routing appliance is an Azure-managed network routing device that you deploy inside your virtual network. It acts as a high-bandwidth forwarding layer for routed traffic flows, so you don’t need to run your own virtual machines as the forwarding layer. It’s deployed into a dedicated subnet, where it acts as a managed forwarding router. Traffic can be routed using User Defined Routes (UDR) enabling spoke to spoke communication in traditional Hub & Spoke topologies. A fully Azure-native routing appliance, deployed as an ARM resource, could be an interesting option for hub-and-spoke topologies. UK South is one of the preview regions.