This week in Azure

A quiet week, and that’s because Build kicks off next week. Most of the announcements are being held back. The few things that did ship are mostly networking. Virtual network flow logs gained a native Sentinel connector. Azure Virtual Network Manager picked up Virtual WAN integration. App Gateway for Containers can now talk natively to an ISTIO service mesh on AKS. On the AI side, Claude Opus 4.8 landed in Microsoft Foundry.

Short post this week. Save your energy for next week.

Virtual network flow logs: Microsoft Sentinel connector

Virtual network flow logs broke the dependency between flow logging and network security groups. You can capture metadata about traffic flows across a whole VNet rather than only where NSGs are attached. That gives you much more comprehensive coverage, but it also means you produce a lot more signal.

A new Sentinel connector turns that signal into something useful. Sentinel was already ingesting identity events, endpoint telemetry, cloud control-plane logs, and so on. Wiring network flow data into the same correlation engine means anomalies that span the network and another layer (a compromised identity exfiltrating data, for example) become much easier to spot.

If you have Sentinel and VNet flow logs deployed, turn it on. There’s no downside.

Azure Virtual Network Manager + Virtual WAN integration

AVNM is the centralised control plane for managing many VNets at once: connectivity topologies, traffic flow, IP addressing, routing, and security admin rules. Until now its hub-and-spoke topology required you to use a regular VNet as the hub. That changes this week. A Virtual WAN hub can now act as the hub in AVNM-managed topologies.

If you’re already running Virtual WAN for global connectivity (its built-in branch connectivity, hub-to-hub meshing, secured virtual hubs), you can now layer AVNM’s centralised policy and routing model on top instead of running them as two separate management surfaces. For organisations operating both today, that consolidation is worth doing.

App Gateway for Containers: ISTIO service mesh integration

Recall that App Gateway for Containers was a from-scratch rebuild of the App Gateway concept, specifically for Kubernetes. Designed around Kubernetes admins and container workloads rather than the IP-and-VM patterns the original was built for.

This week it gained native integration with ISTIO, the open-source service mesh that AKS supports as a managed add-on. A single gateway can now route to services both inside and outside the mesh. mTLS and certificate handling between the gateway and the mesh are managed for you. That removes a chunk of the manual plumbing you used to do at the mesh boundary, and you keep the App Gateway for Containers features (WAF, traffic management) at the edge.

If you’re running ISTIO on AKS today, wire it up.

Claude Opus 4.8 in Microsoft Foundry

Anthropic’s latest flagship, Claude Opus 4.8, is now available in Foundry. It’s tuned for:

  • Deep reasoning over long contexts (large documents, multiple sources, long codebases).
  • Long-running agentic workflows that can span days without going off the rails.
  • Complex multi-step coding across systems.

The usual caveat applies. Don’t reflex-reach for the biggest model. Opus is the right call for deep, multi-step, long-running work. But most prompts in a real application are small and routine, and a cheaper, faster model handles them better economically. Route accordingly (the Foundry Model Router from CW21 helps), and only spend Opus tokens where Opus tokens are earning their keep.

Final thoughts

Two things worth doing this week:

The Sentinel + VNet flow logs connector is an “enable it and move on” update if you already run Sentinel. The correlation gain is real.

AVNM + Virtual WAN is worth the prototyping time if you run both today. Simpler change control, consistent policy, less drift between the two systems.

Everything else this week is incremental. Save your reading time for next week. Build always brings a flood.


Sources

  1. John Savill, “Azure Update - 29th May 2026,” YouTube, https://www.youtube.com/watch?v=cP-1lzc6ywA