Posts tagged with "Azure Container Apps"

Found 6 posts

Security & Compliance
August 30, 2026

A classifier is not a sandbox: isolating coding agents

A published attack chain achieved remote code execution against Claude Code in auto mode, with the safety classifier approving the steps that led to compromise and then blocking the cleanup command. What the break teaches teams running AI coding agents, and how to build real isolation on Azure with Hyper-V sandboxes, default-deny egress and short-lived credentials.

AI Agents
Agent Security
Claude Code
Prompt Injection
Sandboxing
Azure Container Apps
Dynamic Sessions
NIS2
EU AI Act
Managed Identity
By Falak Mahmood
AI & Cloud Infrastructure
August 24, 2026

MCP's new roadmap: five priorities after the stateless spec

The MCP core maintainers published a new roadmap on 22 August 2026, four weeks after the 2026-07-28 spec made the protocol core stateless: five priorities covering agentic messaging, HTTP-native transport unification, agent identity with DPoP and Workload Identity Federation, improved primitives, and SDK developer experience. Here is how Azure-first EU teams should sort that list into adopt now, prepare, and watch.

MCP
Model Context Protocol
MCP Roadmap
AI Agents
Azure API Management
Entra Workload ID
DPoP
Workload Identity Federation
Azure Container Apps
By Falak Mahmood
AI & Cloud Infrastructure
July 30, 2026

The MCP 2026-07-28 spec is final: your Azure migration plan

The Model Context Protocol specification version 2026-07-28 shipped on 28 July with a stateless core, Multi Round-Trip Requests, required routing headers, cacheable list results and a hardened authorization model that deprecates Dynamic Client Registration in favour of Client ID Metadata Documents. All four Tier 1 SDKs shipped support on release day, so Azure teams running MCP servers on Container Apps, AKS or behind API Management can start migrating immediately.

MCP
Model Context Protocol
MCP 2026-07-28
Azure API Management
Azure Container Apps
AKS
Entra ID
OAuth
MRTR
AI Agents
Stateless Architecture
By Falak Mahmood
AI & Cloud Infrastructure
May 25, 2026

MCP goes stateless: Azure MCP server migration checklist

MCP's 2026-07-28 release candidate removes the initialize handshake and the Mcp-Session-Id header, so every request is self-contained and Azure-hosted MCP servers can run behind plain load balancers without sticky sessions or Redis session stores. Tasks and MCP Apps land as formal extensions, six SEPs harden authorization around OAuth 2.0 and OpenID Connect, and Roots, Sampling and Logging enter a 12-month deprecation window.

MCP
Model Context Protocol
Azure Container Apps
AKS
Azure API Management
Entra ID
AI Agents
OAuth
Stateless Architecture
By Falak Mahmood
Azure & Cloud
March 26, 2026

Container Apps vs AKS for AI Workloads: Decision Matrix

A decision matrix for running AI workloads on Azure Container Apps versus AKS — GPU support, scale-to-zero economics, networking, blast radius, operational overhead, and when graduating from Container Apps to AKS actually pays off.

Azure Container Apps
AKS
AI Workloads
Kubernetes
Cloud
By Falak Mahmood
AI & Cloud Infrastructure
November 28, 2025

Running Open-Source AI Models at Scale: Azure Container Apps, AKS, and On-Premise Deployments - Microsoft Ignite 2025

Microsoft Ignite BRK117: Deploy open-source AI models (Llama 3.3, Mistral) with Azure Container Apps serverless GPUs, AKS with Kaido workflows, and on-premise infrastructure. Cost reduction 60-85%, data sovereignty, and hybrid architectures with Azure Arc.

Microsoft Ignite 2025
Azure Container Apps
Azure Kubernetes Service
Open-Source AI
Llama 3.3
Mistral AI
Serverless GPU
Kaido
vLLM
On-Premise AI
Azure Arc
Hybrid Cloud
GPU Orchestration
Cost Optimization
Data Sovereignty
Model Deployment
Fine-Tuning
RAG Pipelines
Self-Hosted Models
By Falak Mahmood