Guardrails That Hold: RAI Filters & a Governed MCP Gateway
Part 2 of the governed AI platform: a custom RAI content filter with harm thresholds, plus an MCP gateway that tiers tool access.
Building a Governed AI Platform on Microsoft Foundry
How I built an internal AI platform on Microsoft Foundry with governance first: data residency, secret-less identity, and central audit.
Azure Weekly CW32: Trusted Launch by Default & cc_v5 Sunset
Azure CW32 2026: Trusted Launch on by default for new Gen2 VMs, the cc_v5 confidential VM retirement on September 1st, and Firewall explicit proxy GA.
Azure Weekly CW31: APIM AI Gateway & Azure Enclave
Azure CW31 2026: AI Gateway in API Management, Azure Enclave preview, Key Vault symmetric keys, and reservation exchanges ending February 2027.
Azure Weekly CW30: Standard Service Endpoints & AI Telemetry
Azure CW30 2026: standard service endpoint preview, IPv6 on VPN Gateway GA, DDoS custom policies, and a protected table for generative AI telemetry.
Azure Weekly CW28: Chaos Studio Workspaces & SFTP Entra ID
Azure CW28 2026: Chaos Studio Workspaces preview, Site Recovery churn to 500 MB/s, Blob SFTP Entra ID GA, and Entra Backup GA.
Azure Weekly CW27: Claude Sonnet 5 GA in Foundry
Azure CW27 2026: Claude Sonnet 5 GA in Microsoft Foundry, and why its data residency still blocks regulated Swiss workloads.
Azure Weekly CW26: Azure Files Share Management GA
Azure CW26 2026: file share-centric management GA, Confidential Live Migration for Intel TDX VMs, and the Azure Blueprints retirement.
Azure Weekly CW22: VNet Flow Logs in Sentinel & AVNM
Azure CW22 2026: VNet flow logs connector for Sentinel, Virtual Network Manager with Virtual WAN as hub, and Istio on AKS.
Azure Weekly CW13: AKS App Network & Blue-Green Upgrades
Azure CW13 2026: AKS application network mesh, blue-green agent pool upgrades, SQL DB automatic index compaction, and Entra external MFA.
Azure Weekly CW12: Foundry Agent Service & Entra Blob SFTP
Azure CW12 2026: Foundry Agent Service GA with native voice, Entra ID for Blob SFTP, WAF DRS 2.2, and standard HDD retirement announced.
Azure Weekly CW10: Confidential VMs v6 & GPT-5.4
Azure CW10 2026: Intel TDX confidential VMs GA, Azure Firewall draft-and-deploy, Databricks Lakebase, Arc Gateway down to 7 endpoints.
Azure Weekly CW9: WAF Insights & Copilot CLI
Azure CW9 2026: App Gateway WAF Insights preview, Entra-restricted blob SAS tokens, AI Search sensitivity labels, and GitHub Copilot CLI goes GA.
Azure PIM: Just-in-Time Access with Terraform
Practical guide to Azure PIM: Entra ID and Azure roles, activation workflows, approval configs, access reviews, and Terraform automation examples.
Azure Governance: Policy to Compliance
Build an Azure governance framework with management groups, policy assignments, compliance monitoring, and automated remediation that scales.
Azure Weekly CW5: ExpressRoute Scalable Gateway & Passkeys
Azure CW5 2026: ExpressRoute scalable gateway goes GA with autoscaling, new Intel/AMD v7 VM SKUs, and automatic passkey rollout for all Entra tenants.
Post-Quantum Cryptography on Azure
Post-quantum cryptography in Azure: NIST FIPS 203/204/205 standards, harvest-now-decrypt-later threats, and what Azure customers should do today.
Audit Azure TLS Across Subscriptions
PowerShell script to audit TLS versions across Azure subscriptions, scanning 13 service types and generating CSV and HTML compliance reports.
Azure Cloud Foundation: The Boring Stuff That Matters
Practical guide to Azure cloud foundation: governance, connectivity, identity, security, and management done right from day one.