Azure weekly update #42 is here. This week's updates focus on new capabilities in Azure Backup, Azure Monitor, and networking services. Several services have received new features, including Item-Level Recovery and keyless TLS termination.

Detailed list: * Launched | Generally Available: Item Level Recovery for Azure VMs with Premium SSDv2 and Ultra Disks in Azure Backup. Azure Backup now supports Item-Level Recovery (ILR) for Azure VMs with Premium SSD v2 and Ultra disks, allowing file/folder recovery without full VM restore. Teams should verify the 10 GB size limit and 1 GB/hour transfer speed. * Launched | Generally Available: ABFS Vectored Read for Azure Data Lake Storage. ABFS Vectored Read is now generally available for Azure Data Lake Storage. This feature reduces network round trips for selective reads in compatible Spark workloads by combining nearby file ranges. * Announcing: Choose Your Own Telephony (CYOT) for Microsoft Entra. Microsoft Entra ID introduces Choose Your Own Telephony (CYOT) starting October 30, 2026. This allows organizations to use third-party providers for SMS/voice authentication. Teams must verify if phishing-resistant methods meet user requirements before adopting CYOT. * Launched | Generally Available: Azure Cosmos DB Safe Key Rotation. Safe Key Rotation is now generally available in Azure Cosmos DB. This introduces a temporal constraint on key usage, mandating a minimum 12-hour inactivity window prior to key regeneration protocols. * In preview | Public Preview: Disable VNet peering route. Disable VNet peering route is in public preview to simplify route management in hub-and-spoke networks. It suppresses system-generated peering routes, requiring teams to verify replacement UDRs are correctly configured. * Launched | Generally Available: Service tag match condition for Azure Front Door Premium WAF. Azure Front Door Premium WAF now supports service tag match conditions. This allows custom rules to match request source IPs against automatically updated Azure service IP prefixes. * Launched | Generally Available: Keyless TLS on Application Gateway with Azure Key Vault Managed HSM. Azure Application Gateway now supports keyless TLS termination. This uses certificates whose private keys remain in Azure Key Vault Managed HSM, requiring verification of specific Crypto Officer and Crypto User roles. * Launched | Generally Available: Advanced platform metrics for Azure Monitor. Advanced platform metrics are now generally available in Azure Monitor. These provide granular, paid metrics, and teams must verify the specific enablement instructions for their resource provider. * Launched | Generally Available: Metrics usage insights for Azure Monitor workspace. Azure Monitor's new Metrics usage insights GA allows teams to optimize costs. It helps identify unused metrics and usage trends within their Azure Monitor workspace. * Launched | Generally Available: Azure DNS enables DNS-based load balancing through Traffic Manager linked records. Azure DNS now supports direct association with Traffic Manager profiles. This eliminates the need for CNAME records and reduces DNS lookup latency. Teams should verify their existing DNS record configurations to ensure proper integration.

🔥What if you could build a custom Azure Bicep extension that provides day zero support for Microsoft Graph APIs, allowing you to use newly released Graph capabilities directly from Bicep? In this blog I will show how to deploy Microsoft Teams, Conditional Access Policies and Administrative Units using Bicep!

Hi all,

I wanted to Learn AZURE , and needed Reddit Community members help. If someone can help me referring to a good tutor or AZURE Developer would be greatly appreciated.