The A-Z Weekly Wrap: 23rd October 2026

Welcome to this week’s atozazure weekly wrap for the 23 October 2026. Below are all the key platform changes, additions and retirements for the past week.

Governance & Management

• Metrics Usage Insights for Azure Monitor Workspaces (Generally Available)
  Microsoft has launched detailed metrics usage insights directly within Azure Monitor Workspaces, enabling administrators to analyse telemetry ingestion volumes, identify unutilised metric namespaces, and dissect trend anomalies. This provides platform engineering teams with essential cost-observability levers to optimise ingestion budgets and curb metric over-allocation.

Networking & Security

• Azure DNS Integration with Traffic Manager Linked Records (Generally Available)
  Seamless DNS-based traffic steering is now supported through linked record sets in Azure DNS, eliminating the requirement to provision external CNAME pointers towards Traffic Manager profiles. This reduces resolution latency hops, simplifies zone record management, and reinforces resilient geo-routing architectures for high-availability workloads.
• External Key Management for Azure Key Vault Managed HSM (Generally Available)
  Enterprise workloads subject to stringent sovereignty frameworks can now store and control root key-encryption keys outside Azure boundaries via Azure Key Vault Managed HSM. This allows compliant multi-region architectures to maintain physical cryptographic isolation while leveraging native platform services for workload-level envelope encryption.
• Standard Service Endpoints for PaaS Integration (Generally Available)
  Expanding the Azure Private Link and perimeter architecture portfolio, Standard Service Endpoints offer improved scalability and streamlined network security boundary controls when connecting IaaS workloads to core Azure PaaS services. This mitigates classic subnet service endpoint scale constraints while upholding deterministic traffic segmentation.
• Hardware Audit Logging for Azure Cloud HSM (Generally Available)
  Hardware-level audit trails are now accessible for dedicated HSM tenant instances via Azure Cloud HSM, providing cryptographic verification and non-repudiation for administrative lifecycle events. This simplifies audit compliance pipelines and forensic readiness across sensitive banking and defence implementations.

Compute & Containers

• Automatic Zone Balance for Virtual Machine Scale Sets (Generally Available)
  Automated zonal rebalancing is now enabled across Azure Virtual Machine Scale Sets (VMSS), continuously monitoring VM topology and reallocating capacity across Availability Zones whenever drift or zonal node failures occur. This bolsters architectural reliability and SLA guarantees for mission-critical distributed workloads without manual operational intervention.
• Emergency Security Runtime Rollouts for Azure App Service (Generally Available)
  Critical runtime and CA certificate trust updates—addressing the upstream PHP, Node.js, and Python advisories alongside eMudhra trust mitigations—have been rolled out across Azure App Service. Linux apps on the Latest and Standard platform channels and Windows worker tiers have been patched to eliminate remote execution and intermediate certificate bypass risks.

Databases, Storage & Analytics

• Cross-Region Data Copy and Synchronisation via Azure Storage Mover (In Preview)
  Organisations can now configure automated, cross-region replication and delta synchronisation jobs for Azure Files across storage accounts and subscriptions using Azure Storage Mover. This unlocks orchestrated data protection topologies and cross-region disaster recovery synchronisation without bespoke transfer scripts.
• Private Network Gateway for Azure Databricks (In Preview)
  Serverless compute environments in Azure Databricks can now route outbound connectivity to private virtual networks and hybrid interconnects via a single managed private network gateway. This simplifies private egress architectures, eliminating complex NAT and transitive network peering setups for serverless analytics clusters.

That’s a wrap on this weeks Azure updates, if you found this helpful make sure to follow blog.atozazure.com for future updates, guides, and technical insights.