Protecting Azure Storage with Microsoft Defender for Cloud

This week on Azure Friday, Scott Hanselman meets with Vamshi Kommineni and Eitan Bremler to explore and demo how Microsoft is helping organizations protect cloud storage data at the core of their applications—by embedding intelligent, built-in posture management, threat protection, and malware scanning directly into Azure Blob Storage through its deep integration with Microsoft Defender for Cloud. Chapters 00:00 - Introduction 00:37 - Azure Blob Storage overview 02:15 - Storage Security philosophy - Start Secure and Stay Secure 03:30 - Demo part 1 - Microsoft Defender for Cloud Storage Security - Start Secure 09:28 - Demo part 2 - Microsoft Defender for Cloud Storage Security - Stay Secure Recommended resources Introduction to Azure Blob Storage What is Microsoft Defender for Storage? What is Microsoft Defender for Cloud? Connect Scott Hanselman | Twitter/X: @SHanselman Eitan Bremler | Twitter/X: @EBremler | LinkedIn: Eitan Bremler Vamshi Kommineni | Twitter/X: @VamshiKommineni | LinkedIn: Vamshi Kommineni Azure Friday | Twitter/X: @AzureFriday Azure | Twitter/X: @Azure

In this video Minnie talks about the Metadata Security Protocol security feature on Azure Instance Metadata Service that helps mitigate security risks by only allowing authenticated applications to communicate with the Host endpoints. Chapters 00:00 - Introduction 01:46 - How Metadata Security Protocol works with Azure Instance Metadata 02:49 - Start of demo 02:54 - Register for feature in portal 03:11 - How to use the feature in portal 04:08 - Inside the virtual machine to check IMDS communication 04:37 - How to check which applications are communicating with different endpoints 05:26 - How to use the allowlist tool 10:02 - Where to download the allowlist tool 10:22 - Where to leave feedback Recommended resources Metadata Security Protocol on Azure Instance Metadata Service Connect Scott Hanselman | Twitter/X: @SHanselman Azure Friday | Twitter/X: @AzureFriday Azure | Twitter/X: @Azure

The video describes the new Logic Apps Hybrid deployment model that allows customers to run their integration workloads in their own Kubernetes environments. This is ideal for customers initiating their journey to the cloud and hosting multiple on-premises workloads, who need to meet industry regulations, who wants to reuse their own Kubernetes infrastructure, or to avoid the natural latency introduced in hybrid configurations. Chapters 00:00 - Introduction 02:50 - Creation of a Logic Apps with hybrid deployment model 06:25 - Creation of a workflow 08:15 - The power of the Workflow Designer 09:00 - Open telemetry in Logic Apps 10:05 - Zip deploy 10:45 - Rules engine 14:12 - Core concepts of Hybrid 14:52 - Wrap up Recommended resources Set up your own infrastructure for Standard logic apps using hybrid deployment Connect Scott Hanselman | Twitter/X: @SHanselman Harold Campos | Twitter/X: @hcampsosu | LinkedIn Harold Campos | YouTube Harold Campos Azure Friday | Twitter/X: @AzureFriday Azure | Twitter/X: @Azure

This week on Azure Friday, Scott Hanselman meets with Anusha Subramanian to demo Azure Databox and Azure Storage Mover, learning how to demystify storage migrations. See how these Azure tools can help you move petabytes of data easily and quickly to Azure Storage. Moving large amounts of data can be complex, but with the right tools and AI you can further simplify the process. Chapters 00:00 - Introduction 01:07 - Guided storage migration experience 04:26 - Next Gen Azure Data Box for offline migrations 06:39 - Azure Storage Mover for online migrations 07:26 - Demo of AWS S3 to Azure blob storage migrations using Storage Mover 09:53 - Copilot for storage migrations 11:44 - Learn more about storage migrations Recommended resources Check this comparison matrix on the functionality for different tools Documentation Azure Storage Migration Solutions Connect Scott Hanselman | Twitter/X: @SHanselman Azure Friday | Twitter/X: @AzureFriday Azure | Twitter/X: @Azure

This week on Azure Friday, Scott Hanselman meets with Jan Kalis to demo Azure Code Optimizations for .NET. See how Azure’s AI-driven capabilities help you find real-world performance issues in your apps, ground Copilot suggestions with production data, and even help auto-generate PRs with benchmarked code fixes with GitHub Copilot software agent. Watch the live demo and learn how to level up your .NET performance using insights for your running .NET applications on Azure! Chapters 00:00 - Introduction 00:32 - See how Code Optimizations helps improve app performance 03:00 - Demo – part 1 – Review your Code Optimizations on Azure portal 06:20 - Demo – part 2 – Optimize code with GH Copilot for Azure in VS Code 10:16 - Demo – part 3 – Move faster from insights to PR with GH Copilot software agent Recommended resources Check your Code Optimizations recommendations Documentation Feedback Connect Scott Hanselman | Twitter/X: @SHanselman Jan Kalis | LinkedIn: Jan Kalis Azure Friday | Twitter/X: @AzureFriday Azure | Twitter/X: @Azure

Daya Patil drops in on Scott Hanselman to chat about getting started with Azure Business continuity Center, a single pane of glass for all your Business Continuity and Disaster Recovery (BCDR) needs across solutions and platforms for various key pillars like manage, monitor, Govern and audit compliance along with ability to perform core actions from centralized place. Recommended resources Azure Business Continuity Center Business Continuity with ABCC Connect Scott Hanselman | Twitter/x: @SHanselman Azure App Service | Twitter/x: @AzAppService Azure Friday | Twitter/x: @AzureFriday Azure | Twitter/x: @Azure

In this session Tulika Chaudharie joins Scott Hanselman to discuss the Sidecar feature in Azure App Service and how it helps developers extend their applications with additional functionality. Learn how to run sidecar containers alongside your main app to add capabilities like logging, monitoring, caching, or background processing. Recommended resources Sidecar in Azure App Service Connect Scott Hanselman | Twitter/x: @SHanselman Azure App Service | Twitter/x: @AzAppService Azure Friday | Twitter/x: @AzureFriday Azure | Twitter/x: @Azure

Rakhi Thejraj joins Scott Hanselman to talk about Azure Cosmos DB! Azure Cosmos DB has been constantly bringing new features to boost performance and optimize costs. Azure Cosmos DB has optimized the autoscale feature to make it more cost-effective for customers with non-uniform workloads such as highly trafficked primary region and a passive secondary region just for disaster recovery. This breakthrough feature is called Dynamic Scaling. Binary Encoding feature on the other hand has optimized the storage and query costs Chapters 00:00 - Introduction 00:38 - Dynamic scaling 08:47 - Binary encoding Recommended resources Dynamic scaling Blog Dynamic scaling Public Documentation Dynamic scaling FAQ Binary Encoding Blog Connect Scott Hanselman | Twitter/x: @SHanselman Azure Friday | Twitter/x: @AzureFriday Azure | Twitter/x: @Azure

New Relic’s all-in-one observability platform makes it simple to optimize your performance by giving you a single source of truth to analyze your apps, infrastructure, and all of your Azure services. Glenn Thomas from New Relic joins Scott Hanselman to talk about Azure’s Native New Relic Service in Azure. Glenn demos how easy it is to get started with New Relic and manage Azure resources directly in the Azure portal. In addition, he provides an overview of how New Relic can help quickly identify and troubleshoot performance issues, including a look at Ask AI in New Relic Observability. Chapters 00:00 - Introduction 00:53 - Getting started from Azure Marketplace 02:27 - Exploring a new service 03:10 - Installing New Relic extension in a VM 04:05 - Accessing your New Relic service with SSO 04:47 - Troubleshooting scenario walkthrough with AI analysis 11:23 - Ask AI in New Relic 14:00 - Wrap-up Recommended resources New Relic's Azure Native Solution on the Azure Marketplace Azure Native New Relic Service Introduction New Relic AI New Relic Errors Inbox New Relic Distributed Tracing Azure Native New Relic Service: Full stack observability in minutes Create a Pay-as-You-Go account (Azure) Create a free account (Azure) Connect Scott Hanselman | Twitter/X: @SHanselman Azure Friday | Twitter/X: @AzureFriday New Relic | Twitter/X: @NewRelic Azure Support | Twitter/X: @AzureSupport

Nandini Bajaj joins Scott Hanselman to talk about the new alerting and reporting capabilities released by Azure BCDR (Business Continuity and Disaster Recovery) on the Business Continuity Center to monitor your estate protected with the Azure Site Recovery service. We announced built-in Site Recovery alerts on Azure Monitor so you can manage all your alerts on a single platform where you can configure notifications to various channels using webhook, ITSM etc. We also launched out-of-box reports for Azure Site Recovery which will give you a transparent view of the job details and replication health of protected items. With these reports you can now be ready for audit and executive updates by customizing them to your need. Configure your Log Analytics workspace and set up diagnostic settings to leverage the reports. Chapters 00:00 - Introduction 01:36 - Alerting 06:35 - Azure Monitor 08:47 - Reporting 14:40 - Wrap-up Recommended resources Built-in monitoring for Azure Site Recovery Configure Azure Site Recovery reports About Site Recovery Azure Site Recovery Create a Pay-as-You-Go account (Azure) Create a free account (Azure) Connect Scott Hanselman | Twitter/X: @SHanselman Azure Friday | Twitter/X: @AzureFriday Azure | Twitter/X: @Azure