Azure Weekly CW33: Firewall Premium 22 Gbps & MAI-Thinking-1
Azure CW33 2026: the Firewall Premium deny-mode throughput numbers, Markdown for Agents in App Service, and MAI-Thinking-1 in Microsoft Foundry.
What shipped, what reached GA, what is being retired — and the data-residency caveats that decide whether a regulated workload can use it.
Azure ships something almost every day, and most of it does not matter to you. These round-ups go through the week's releases, previews and retirement notices and keep the ones that change a decision: what reached general availability, what is still preview and should not be deployed, and which deadline you now have on a calendar.
Written from Switzerland, so the data-residency question gets answered rather than skipped. A service being available in Azure is not the same as it being deployable in a regulated Swiss or EU workload, and the difference is usually buried in the fine print. Each post is anchored on John Savill's weekly Azure Update and verified against Microsoft's own release notes before anything is written down.
Azure CW33 2026: the Firewall Premium deny-mode throughput numbers, Markdown for Agents in App Service, and MAI-Thinking-1 in Microsoft Foundry.
Azure CW32 2026: Trusted Launch on by default for new Gen2 VMs, the cc_v5 confidential VM retirement on September 1st, and Firewall explicit proxy GA.
Azure CW31 2026: AI Gateway in API Management, Azure Enclave preview, Key Vault symmetric keys, and reservation exchanges ending February 2027.
Azure CW30 2026: standard service endpoint preview, IPv6 on VPN Gateway GA, DDoS custom policies, and a protected table for generative AI telemetry.
Azure CW29 2026: Entra passkeys become the default in September, SMS and voice retire February 2027, plus Front Door edge actions on Hyperlight.
Azure CW28 2026: Chaos Studio Workspaces preview, Site Recovery churn to 500 MB/s, Blob SFTP Entra ID GA, and Entra Backup GA.
Azure CW27 2026: Claude Sonnet 5 GA in Microsoft Foundry, and why its data residency still blocks regulated Swiss workloads.
Azure CW26 2026: file share-centric management GA, Confidential Live Migration for Intel TDX VMs, and the Azure Blueprints retirement.
Azure CW25 2026: Databricks Unity Catalog managed tables in OneLake, a VS Code Functions project gallery, and NAT Gateway v2 ICMP.
Azure CW24 2026: Azure Boost guest RDMA preview, NCv6 GPUs with RTX Pro 6000 Blackwell, GPv1 retirement, and Fable 5 in Foundry.
Build 2026 round-up: Cobalt 200 ARM VMs, confidential VM live migration, Container Apps microVM sandboxes, and Foundry IQ.
May 2026 AI round-up: Claude Opus 4.8 across Foundry and Copilot, GPT-5.5, Grok 4.3, and Foundry managed virtual networks GA.
Azure CW22 2026: VNet flow logs connector for Sentinel, Virtual Network Manager with Virtual WAN as hub, and Istio on AKS.
Azure CW20-21 2026: Container Apps Express, Azure Linux 4.0, Azure Files SMB managed identity, and ANF 64 TiB file support.
Azure CW19 2026: Functions consumption durable task scheduler, Elastic SAN on AVS Gen2, and bulk Azure Backup VM restore.
Azure CW18 2026: AKS pod traffic encryption with WireGuard, Front Door WAF HTTP DDoS rule set, and Microsoft Agent Framework 1.0.
Azure CW17 2026: AKS Ubuntu 22.04 retirement, ANF ransomware protection, Elastic SAN autoscaling, Claude Opus 4.7 and GPT-5.5 in Foundry.
Azure CW16 2026: Standard V2 NAT Gateway for AKS, Smart Tiering GA for blob and Data Lake, Azure Files granular encryption-in-transit.
Azure CW15 2026: AKS CNI overlay CIDR expansion GA, Functions MCP resource triggers GA, ARO H100/H200 GPU support, Foundry Local GA.
Azure CW14 2026: VM ephemeral OS disk full caching preview, App Configuration with Front Door, and Cosmos DB for PostgreSQL retirement.
Azure CW13 2026: AKS application network mesh, blue-green agent pool upgrades, SQL DB automatic index compaction, and Entra external MFA.
Azure CW12 2026: Foundry Agent Service GA with native voice, Entra ID for Blob SFTP, WAF DRS 2.2, and standard HDD retirement announced.
Azure CW11 2026: SRE Agent gains new capabilities, private AWS S3 to Blob migration, PostgreSQL Elastic Cluster IaC GA, Grafana dashboards.
Azure CW10 2026: Intel TDX confidential VMs GA, Azure Firewall draft-and-deploy, Databricks Lakebase, Arc Gateway down to 7 endpoints.
Azure CW9 2026: App Gateway WAF Insights preview, Entra-restricted blob SAS tokens, AI Search sensitivity labels, and GitHub Copilot CLI goes GA.
Azure CW8 2026: Premium SSD v2 instant snapshots, AKS MCP Server preview, node autoprovision encryption, and Azure Functions .NET 10 support.
Azure CW7 2026: Monitor Pipelines preview, AKS Kubernetes 1.34 GA, Azure Disk vaulted backups, and Entra source of authority goes GA.
Azure CW6 2026: VNet routing appliance preview, Container Storage 2.1 with Elastic SAN, App Gateway DRS 2.2, and Claude Opus 4.6 in Microsoft Foundry.
Azure CW5 2026: ExpressRoute scalable gateway goes GA with autoscaling, new Intel/AMD v7 VM SKUs, and automatic passkey rollout for all Entra tenants.
Azure CW4 2026: Zone-redundant NAT Gateway V2 goes GA, AKS gets pod security safeguards, and user-delegated SAS expands to more storage services.
Azure CW3 2026: AKS gets Ubuntu 24.04 GA, Cosmos DB adds private networking for Fabric mirroring, and GPT-5.2-Codex brings 400k token context.