Generally Available: Azure File Sync in Belgium Central, Malaysia West, and Indonesia Central

Generally Available: Azure File Sync in Belgium Central, Malaysia West, and Indonesia Central

Azure File Sync enables seamless tiering of data from on-premises Windows Servers to Azure Files for hybrid use cases and simplified migration. It also enables you to leverage the performance, flexibility and compatibility of your on-premises File Server while leveraging the scale and cost effectiveness of Azure Files.

The expansion into Belgium Central, Malaysia West, and Indonesia Central brings the service closer to organizations in these regions, offering lower latency, better performance, and support for local data residency requirements.

Public Preview: Managed identity support for graphical session recording
Today, we are announcing Azure Bastion now supports managed identities for graphical session recording.

Azure Bastion graphical session recording now supports write access to storage accounts using managed identities. With this update, users have the option to configure managed identities during session recording setup and specify the storage account container for storing VM recordings. Once the managed identity is authenticated to WRITE recordings to the storage container, Azure Bastion will authenticate without requiring a SAS token.

• Stronger security posture: Removes shared, time‑bound SAS URLs in favor of identity‑based authorization tied to the Bastion resource.
• Reduced operational overhead: Eliminates token creation, rotation, and expiry management, making session recording easier to operate at scale.

Generally Available: Azure Storage Mover now available in Azure Government (US)
Azure Storage Mover is now available in Azure Government (US), enabling U.S. government customers and partners to securely migrate large‑scale file data to Azure Government cloud environments using a fully managed migration service.

What is Azure Storage Mover?

Azure Storage Mover is a fully managed service designed to simplify and accelerate large‑scale migrations of file data to Azure Storage. It provides centralized management, built‑in resiliency, and visibility across migrations, while allowing customers to run migration agents close to their data sources.

Supported scenarios in Azure Government:

With this release in Azure Government (US), customers can now use Azure Storage Mover to:

• Migrate large file shares from supported on‑premises and sources between Azure Government storage accounts
• Perform controlled, repeatable migrations with minimal downtime
• Track migration progress and results centrally using Azure portal experiences
• Meet U.S. government compliance and regulatory requirements by operating fully within Azure Government regions

Get started:
Azure Storage Mover is available directly in the Azure Government portal. Customers can deploy the service, configure migration projects, and run migration agents within their approved Azure Government subscriptions.

Generally Available: Granular Encryption-in-Transit Controls for SMB and NFS on Azure Files
Azure Files now supports independent configuration of encryption-in-transit settings for SMB and NFS protocols at the storage account level. Customers can now define protocol-specific security policies, enabling precise control over encryption requirements for each protocol without compromise. This is ideal for environments running mixed-protocol workloads that demand tailored security configurations. This capability is available today through the Azure portal, Azure CLI, Azure PowerShell, and REST API.

Public Preview: Monitor AKS applications with OpenTelemetry and Azure Monitor
Azure Monitor now supports monitoring applications that run on Azure Kubernetes Service (AKS) by using OpenTelemetry for instrumentation and data collection.

Leverage autoinstrumentation to deploy the Azure Monitor OpenTelemetry distro to workloads or use autoconfiguration to route OTLP signals from applications already instrumented with open-source, vendor neutral OpenTelemetry SDKs to Azure Monitor.

Use Application Insights to monitor, troubleshoot and triage application performance in combination with infrastructure signals from Azure Managed Prometheus and container logs.

Public Preview: StandardV2 NAT Gateway as an outbound type for AKS
AKS now supports managed and user-assigned StandardV2 NAT Gateway as an outbound type for your AKS managed or BYO VNets. This unlocks zone-redundant outbound connectivity, up to 100 Gbps outbound throughput, and IPv6 outbound support for AKS clusters.