-
Secretless Email from an AKS Pod: Azure Workload Identity and Exchange RBAC
I dug into a neat pattern for sending mail from an AKS pod without ever putting a secret into the cluster. Instead of storing SMTP credentials or granting broad Mail.Send app permissions, the post walks through using Azure Workload Identity…
-
Using Jev with Microsoft Foundry for Deterministic Ticket Triage
I came across a neat walkthrough on using TypeSafe AI’s Jev with Microsoft Foundry — Jev is a purpose-built “System One” model that returns typed, probabilistic decisions (choice, score, yes/no) instead of free-form text. As the article puts it, Jev…
-
Blog Post from OpenTofu Blog : OpenTofu v1.13.0 Release Highlights
OpenTofu just released v1.13.0 — a shorter, security-aligned cycle that’s light on new user-facing features but adds a few neat improvements and experiments. The big practical win is official Windows on ARM64 builds, and there are new planning helpers: the…
-
Local Web UI for Azure Databricks Cost & Workload Assessment
I came across a useful tool for untangling Azure Databricks spend and workloads: the “Assessment & Optimization Workbench” — a local web app that “brings these details together.” It lets you pick workspaces and dates, run a read-only assessment that…
-
Migrating Elasticsearch to Azure Cosmos DB Search
I read the Azure Cosmos DB blog post “Azure Cosmos DB Migration Guide for Elasticsearch Users” and found it a practical primer for anyone running Elasticsearch alongside Cosmos DB. The post highlights that Cosmos DB’s full-text search can “improve price…
-
Three Paths to AI Agent Evaluation and Observability
I dug into Microsoft’s comparison of evaluation and observability for AI agents and came away with a clear message: you need both. Evaluation gives repeatable scores (task completion, tool-call accuracy, safety), while observability captures the end-to-end trace — prompts, model…
-
Azure SRE Agent Now Supports Azure DevOps Repos as Plugin Marketplace
I found this update neat and practical: Azure SRE Agent can now use Azure DevOps repositories as plugin marketplaces, so you no longer need to mirror runbooks and tooling to GitHub. Plugins — the packaged skills, agents, and connector settings…
-
Azure SQL Performance Monitoring: Unified Telemetry, No Agents (Public Preview)
Microsoft has opened the public preview for Performance Monitoring for Azure SQL, and I think it’s one of those “finally” moments for teams that manage lots of databases. It provides a managed, consistent telemetry pipeline across Azure SQL Database, SQL…
-
Preview: Multi-Database Links Extend Always On to Azure SQL Managed Instance
I just read that Microsoft has rolled out a preview for multi-database mode for Managed Instance link — a welcome change that lets you replicate an entire Always On availability group to an Azure SQL Managed Instance using a single…
-
Fabric Database Hub: A Unified, Actionable View Across Your Database Estate
I took a look at Microsoft’s announcement: Database Hub in Microsoft Fabric is now in public preview and aims to turn sprawling database estates into a single, actionable view. The hub aggregates inventory, health, performance, security, and optimization signals across…
-
Azure SQL Hyperscale Serverless Gets Auto-Pause and Auto-Resume (Public Preview)
I dug into Microsoft’s announcement that auto-pause and auto-resume are now in public preview for Azure SQL Database Hyperscale using the Serverless compute tier. In short: you can have Hyperscale databases automatically pause during long idle periods and resume when…
-
Azure Savings Plans and Reservations Now Scoped to Management Groups
I came across a nice little update from Azure: savings plan and reservation recommendations (including P3) are now available at the management group scope in both the Azure Portal and the REST API. For anyone managing many subscriptions, that means…
-
Secretless Email from AKS: Azure Workload Identity, Microsoft Graph, and Exchange RBAC
I found a neat pattern for sending email from an AKS pod without ever putting a secret into the cluster. Instead of an SMTP relay, shared mailbox password, or granting tenant-wide Mail.Send app permission, the post combines Azure Workload Identity…
-
TypeSafe Jev in Microsoft Foundry: A Deterministic Judgement Layer for Agents
I dug into a useful walkthrough showing how to use TypeSafe’s new Jev model as a judgement layer inside Microsoft Foundry agents. Jev isn’t a regular text-generating LLM—it returns typed, probabilistic decisions (yes/no probabilities, choices, or ordinal scores) instead of…
-
SQL Server on Azure Local Goes GA: Bridging On-Prem and Cloud
I just read that SQL Server on Azure Local is now generally available — a move that lets teams “modernize where their data resides while maintaining control over infrastructure, connectivity, and data placement.” In short, it brings managed SQL Server…
-
SQL Server on Azure Local GA: Low-Latency Edge with Azure-Managed Lifecycle
I just read that Microsoft has made SQL Server on Azure Local generally available. The pitch is simple and practical: you can “modernize where your data resides while maintaining control over infrastructure, connectivity, and data placement.” For anyone juggling latency-sensitive…

