Azure Update - 28th November 2025

Key insights

• Azure Functions Flex Custom Handler
  Allows serverless apps to use custom runtimes and handlers, giving developers more control over execution environments and language choices.
• Azure Bastion (RDP + Entra ID)
  Portal RDP now integrates with Entra ID for authentication, simplifying secure access to VMs without separate credentials or added gateways.
• Network Watcher managed identity
  Managed identity support extends to VNet flow logs, traffic analytics, and packet capture, reducing credential management and simplifying network monitoring.
• Azure SQL Database Regex in T-SQL
  Regular expression support lands in T-SQL, enabling more powerful pattern matching and text processing directly inside the database.
• Model Context Protocol (MCP)
  MCP support for Azure MCP Server (MySQL) and API platforms lets AI tools discover schemas and call APIs safely, streamlining AI-driven data and service access.
• Claude Opus 4.5 in Microsoft Foundry & regional updates
  Foundry adds Claude Opus 4.5 for advanced AI workflows; Azure ML retires low-priority VMs and services expand regionally (Azure File Sync in New Zealand North, Load Testing in Italy North) to improve performance and data residency.

Overview of the Update

In a concise YouTube update, John Savill's [MVP] walked viewers through key Azure changes announced on November 28, 2025, covering serverless, networking, databases, API management and AI services. He organized the video into short chapters, which made it easy to scan specific topics such as Azure Functions Flex and Azure Bastion. The report highlights practical improvements that target Developer productivity and operational security, while also noting regional expansions and deprecations. Overall, the update emphasizes steady platform evolution rather than a single blockbuster release.

Monitoring and Identity-Driven Operations

The update described enhancements to Azure Functions Flex custom handlers, which give developers greater freedom to use alternative runtimes and frameworks for serverless workloads. While this flexibility enables tailored solutions and faster prototyping, it can also increase operational complexity, because teams must now manage custom runtime compatibility and observability. In networking, the integration of Entra ID into Azure Bastion for RDP sessions strengthens access control and reduces the need for separate credential flows. However, organizations will need to balance tighter identity controls against scenarios that require cross-tenant or legacy access, and prepare to update policies and role assignments accordingly.

Monitoring and Identity-Driven Operations

The addition of managed identity support in Network Watcher extends secure telemetry collection to VNET flow logs and packet capture, simplifying credential management for monitoring agents. This change reduces password sprawl and automates permission assignment, yet it requires careful governance of managed identities to avoid privilege creep and unintended access. Recommended Alerts for Azure Monitor Workspace moving into preview aims to reduce alert noise and guide operators to meaningful thresholds, which improves response times. Still, tuning these alerts involves tradeoffs between sensitivity and alert fatigue, and teams must invest time to align rules with real-world operations.

Database, Storage, and API Management

The announcement that Azure SQL Database now supports regular expressions in T-SQL promises richer text-processing capabilities directly in the database, enabling developers to reduce round trips and simplify ETL logic. Despite those gains, regular expressions can be costly in CPU and can complicate query plans, so architects should measure performance impact and consider indexes or external processing where appropriate. Azure File Sync arriving in New Zealand North improves data residency and latency for Oceania customers, and the extension of Azure MCP Server support for MySQL opens doors for AI-driven data access. Nonetheless, integrating Model Context Protocol features into databases raises governance concerns about model access to schema and data, so teams must balance automation benefits with security controls and auditing.

AI, Machine Learning, and Integration

The video noted that Claude Opus 4.5 is now available in Microsoft Foundry, giving developers access to advanced model capabilities within a managed environment, and Azure Managed Redis integration supports AI application caching needs. At the same time, the retirement of low-priority VMs in Azure Machine Learning highlights the tradeoff between cost savings and Compute predictability, as low-priority instances offered cheaper capacity at the expense of preemption risk. Model Context Protocol support in Azure API Management and API Center promises standardized discovery and governance for MCP servers, yet operational teams must reconcile rate limiting, authentication, and privacy rules when exposing model-backed endpoints. Consequently, organizations will need to invest in lifecycle controls for models, monitoring, and cost management to get the full benefit while limiting risk.

Regional Growth, Performance, and Operational Impact

Regional expansions such as Azure Load Testing in Italy North and Azure File Sync in New Zealand North reflect Microsoft's continued focus on reducing latency and meeting data residency requirements. These additions help developers test and host services closer to end users, but they also add complexity to deployment pipelines and compliance matrices that teams must manage across regions. The update package as a whole favors integrated cloud experiences that blend identity, monitoring, data and AI, and therefore requires cross-discipline coordination between developers, security, and operations. In practice, organizations that adopt these features will gain better performance and security, provided they allocate time to update policies, test workloads, and monitor cost and performance tradeoffs.

What Teams Should Watch Next

For technical leaders, the practical takeaway is to prioritize identity and governance when enabling these new features, because many improvements center on managed identities and model integration. Teams should pilot Azure Functions Flex and MCP integrations in isolated environments to assess operational impact, and they should benchmark any Azure SQL Database regex use to avoid unexpected CPU costs. Finally, monitoring and alerting updates deserve attention to avoid alert fatigue while improving reliability, and regional choices should align with compliance and latency goals. With careful planning, the November 28 update offers meaningful improvements while reminding teams to balance agility, cost, and security.

Keywords

Azure November 28 2025 update, Azure updates November 2025, Azure new features 2025, Azure service changes 28 Nov 2025, Azure security updates November 2025, Azure pricing and roadmap 2025, Azure AI and ML updates Nov 2025, Azure Kubernetes Service update November 2025