Generally Available: Capacity Autoscaling

Generally Available: Capacity Autoscaling
Capacity Autoscaling support is now generally available on Elastic SAN. Customers can avoid the constraints of overprovisioning and manual capacity management by setting a policy to automatically expand SAN Capacity based on usage. Autoscaling provides the ability to specify scaling increments for cost control and predictability. This capability is especially helpful for customers navigating rapid growth scenarios and unplanned usage spikes.

Generally Available: Azure Monitor for Azure Arc-enabled Kubernetes with OpenShift and Azure Red Hat OpenShift
Azure Monitor provides a complete set of services for monitoring the health and performance of different layers of your Kubernetes infrastructure and the applications that depend on it.

Azure Monitor support for Azure Arc-enabled Kubernetes with OpenShift and Azure Red Hat OpenShift with Container Insights and Managed Prometheus is now in GA.

Public Preview: Azure Arc adds SQL Server on Azure Virtual Machines as a migration target
Azure Arc migration now supports SQL Server on Azure Virtual Machines as a migration target. You can migrate Arc-enabled SQL Server instances not only to Azure SQL Managed Instance but also to SQL Server running on Azure infrastructure—using the same unified workflow.

Public Preview: Logical replication slot sync Status metric for Azure PostgreSQL Flexible Server

You can now monitor the synchronization status of your logical replication slots in Azure Database for PostgreSQL – Flexible Server using the new logical_replication_slot_sync_status metric, now in public preview. This Azure Monitor metric shows whether each logical replication slot is synchronized, catching up, or in an unknown state—helping you validate replication health and slot readiness.

This feature is especially useful when using logical decoding or change data capture (CDC) tools like Debezium or Kafka. With per-slot visibility and the ability to set up alerts, you can ensure your logical replication setup remains consistent and responsive during planned maintenance, migrations, or system events.

Generally Available: Dynamic data masking with Azure Cosmos DB
Dynamic data masking (DDM) is a server-side, policy-based security feature in Azure Cosmos DB that helps your organization protect sensitive data from unauthorized access. DDM dynamically masks data for nonprivileged users, ensuring that sensitive information is redacted in real time before being presented to applications, while the original data remains unchanged in the database.

DDM helps your organization meet security, compliance, and regulatory requirements by limiting exposure of sensitive data such as Personally Identifiable Information (PII) and Protected Health Information (PHI).

Dynamic data masking (DDM) is a server-side, policy-based security feature in Azure Cosmos DB that helps your organization protect sensitive data from unauthorized access. DDM dynamically masks data for nonprivileged users, ensuring that sensitive information is redacted in real time before being presented to applications, while the original data remains unchanged in the database.

DDM helps your organization meet security, compliance, and regulatory requirements by limiting exposure of sensitive data such as Personally Identifiable Information (PII) and Protected Health Information (PHI).

Generally Available: Azure Database for PostgreSQL flexible server in Denmark East
BOLD
You can now deploy Azure Database for PostgreSQL flexible server in the Denmark East Azure region.

Generally Available: Enhanced Mirroring Azure Database for PostgreSQL in Microsoft Fabric

New capabilities make it easier to mirror real-world Azure Database for PostgreSQL workloads at scale in Microsoft Fabric and operate them with confidence.

You can mirror native PostgreSQL data types such as JSON, JSONB and other commonly used types, so richer application schemas flow directly into Fabric without workarounds. Mirroring setup is simpler because the replication user no longer needs to own database tables, allowing you to enable mirroring on existing databases without changing ownership or security models.

Operating mirroring is more transparent as well. Improved error messaging and dedicated PostgreSQL User-Defined Functions (UDFs) help you quickly determine whether tables can be mirrored, view mirroring status, and identify blocking conditions directly from PostgreSQL. In addition, mirroring now supports Azure Database for PostgreSQL flexible server with high availability (HA) enabled on PostgreSQL versions earlier than 17, letting you combine HA and analytics without waiting for an engine upgrade.

These improvements reduce friction and help you trust your PostgreSQL data as it powers analytics and AI experiences in Fabric.

Public Preview: Migrating from virtual network-integrated to Private Endpoint–capable network configuration
You can now migrate your Azure Database for PostgreSQL server from a virtual network‑integrated deployment to a network configuration that supports Private Endpoint connectivity.
If you originally deployed your server inside a virtual network but now want more flexibility in how you manage networking, Private Endpoints give you a simpler and more scalable model. With this migrBOLDation, you can continue to access your server privately over the Azure backbone network, reduce dependency on delegated subnets, and better align your database networking with evolving architecture or organizational standards.

You can directly initiate the migration through Azure CLI, API, or SDK. While the operation involves a period of downtime, it enables you to adopt Private Endpoint connectivity without needing to recreate your server or move data manually. After the migration, you can configure Private Endpoints or firewall rules based on your desired access model and update your infrastructure-as-code templates accordingly.

Disclaimer: This migration currently supports PostgreSQL servers that are not configured with high availability or read replicas. Additional post‑migration configuration, including updating Terraform templates and setting up Private Endpoints or firewall rules, is required.

Generally Available: Premium SSD v2 for Azure Database for PostgreSQL
We are excited to announce the general availability of Premium SSD v2 for Azure Database for PostgreSQL flexible server. With Premium SSD v2, you can achieve up to four times higher IOPS, significantly lower latency, and better price-performance for I/O-intensive PostgreSQL workloads. With independent scaling of storage and performance, you can now eliminate overprovisioning and unlock predictable, high-performance PostgreSQL at scale.
This release delivers particular value for online transaction processing (OLTP) workloads, SaaS platforms, and other high concurrency applications that require consistent performance and reliable scaling under load.

Generally Available: Azure Monitor pipeline
Azure Monitor pipeline is now generally available.

Azure Monitor pipeline provides a centralized control point for telemetry ingestion and transformation, designed specifically for secure, high‑throughput, enterprise‑scale scenarios. It's built on open-source technologies from the OpenTelemetry ecosystem and includes the components needed to receive telemetry from local clients, process that telemetry, and forward it to Azure Monitor.

With Azure Monitor pipeline control, you can:

Ensure logs land directly in Azure‑native schemas – automatic schematization into tables such as Syslog and CommonSecurityLog
Prevent data loss during intermittent connectivity across sites – local buffering in persistent storage with automated backfill
Reduce ingestion costs before data reaches the cloud – centralized filtering, aggregation, and transformation
Ingest telemetry at sustained high volumes in the range of hundreds and thousands of events per second – horizontally and vertically scalable pipeline architecture
Secure telemetry ingestion without managing certificates on each host individually – centralized TLS/mTLS with automated certificate provisioning and zero‑downtime rotation
Maintain visibility into ingestion infrastructure health – pipeline performance and health monitoring
Plan deployments confidently at large scale – infrastructure sizing guidance for expected telemetry volume

Generally Available: Azure NetApp Files advanced ransomware protection
Azure NetApp Files advanced ransomware protection (ANF ARP) is now in GA (General Availability). ANF ARP is designed to help organizations proactively detect, respond to, and recover from ransomware threats on cloud volumes. ANF ARP monitors Azure NetApp Files volumes for suspicious activity using file extension profiling, entropy, and IOPS patterns. When a threat is detected, the system creates a point-in-time snapshot, enabling rapid evaluation and recovery. Notifications are sent via Azure Activity log and attack reports are retained for 30 days. There is no specific additional charge for ANF ARP but see Considerations section when sizing your deployment to accommodate ANF ARP.

Azure NetApp Files advanced ransomware protection is available in all Azure NetApp Files regions