YouTube : https://youtu.be/3ZhrRy_30aY SELECTED UPDATES FOR Microsoft Azure - New Azure VMware Solution [ preview ] - Custom role creation in the Azure portal [ GA ] - Microsoft Threat Protection will automatically turn on for eligible license holders - Azure Site Recovery—Zone-to-zone disaster recovery [ GA ] - Azure File shares snapshot management by Azure Backup [ GA ] - Cross-region restore for Azure Virtual Machines using Azure Backup [ preview ]

1. EP 29 : 09 May 2020
Product updates for Microsoft Azure
Thanyapon Sananakin (Toon)
MVP : Microsoft Azure
Kumton Suttiraksiri (Bird)
MVP : Office Servers & Services

2. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
AGENDA
• New Azure VMware Solution [ preview ]
• Custom role creation in the Azure portal [ GA ]
• Microsoft Threat Protection will automatically turn on for eligible license
holders
• Azure Site Recovery—Zone-to-zone disaster recovery [ GA ]
• Azure File shares snapshot management by Azure Backup [ GA ]
• Cross-region restore for Azure Virtual Machines using Azure Backup [
preview ]
2

3. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
New Azure VMware Solution [ preview ]
• Empowers customers to seamlessly extend or migrate their existing on-premises VMware
applications to Azure without the cost, effort or risk of re-architecting applications or retooling
operations
3
https://azure.microsoft.com/en-us/updates/new-azure-vmware-solution-is-now-in-preview/
• AVS is a VMware validated solution with on-going validation and testing of enhancements and
upgrades.
• The private cloud infrastructure and software are managed and maintained by Microsoft
https://docs.microsoft.com/en-us/azure/azure-vmware/introduction

4. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
New Azure VMware Solution [ preview ]
4
https://docs.microsoft.com/en-us/azure/azure-vmware/introduction

5. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Custom role creation in the Azure portal [ GA ]
• Previously, creating or editing custom roles was
only possible through the command-line or
Azure Resource Manager API. Now, ease your
role-based access control (RBAC) workflow using
the new experience.
5
https://azure.microsoft.com/en-
us/updates/azure-custom-roles-portal/

6. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Custom role creation in the Azure portal [ GA ]
6
• Role Based Access
Control (RBAC) -- Recap
https://docs.microsoft.com/en-us/azure/role-based-
access-control/overview

7. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Microsoft Threat Protection will
automatically turn on for eligible license holders
• June 1, 2020,
• Microsoft Threat Protection features will automatically turn on for customers with corresponding
licenses for one of the following Microsoft 365 security products:
• Microsoft Threat Protection
• Microsoft Defender Advanced Threat Protection
• Office 365 Advanced Threat Protection
• Microsoft Cloud App Security
• Azure Advanced Threat Protection
7
https://azure.microsoft.com/en-us/updates/mtp-auto-enabled/

8. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Microsoft Threat Protection will
automatically turn on for eligible license holders
• This also applies to customers with one of the following licenses
• Microsoft 365 E5
• Microsoft 365 E5 Security
• Windows 10 Enterprise E5
• Enterprise Mobility + Security (EMS) E5
• Office 365 E5
• Microsoft Defender Advanced Threat Protection
• Azure Advanced Threat Protection
• Microsoft Cloud App Security
• Office 365 Advanced Threat Protection (Plan 2)
8
https://azure.microsoft.com/en-us/updates/mtp-auto-enabled/

9. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Microsoft Threat Protection will
automatically turn on for eligible license holders
• Introduction to Microsoft Threat Protection Service
9
Microsoft Threat Protection is a unified pre- and post-breach enterprise defense suite that
natively coordinates detection, prevention, investigation, and response across endpoints,
identities, email, and applications to provide integrated protection against sophisticated attacks.
https://docs.microsoft.com/en-us/microsoft-365/security/mtp/microsoft-threat-protection?view=o365-worldwide

10. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Microsoft Threat Protection will
automatically turn on for eligible license holders
• Introduction to Microsoft Threat Protection Service
10
Microsoft Threat Protection suite protects:
• Endpoints with Microsoft Defender ATP - Microsoft Defender ATP is a unified endpoint
platform for preventative protection, post-breach detection, automated investigation, and
response.
• Email and collaboration with Office 365 ATP - Office 365 ATP safeguards your organization
against malicious threats posed by email messages, links (URLs) and collaboration tools.
https://docs.microsoft.com/en-us/microsoft-365/security/mtp/microsoft-threat-protection?view=o365-worldwide

11. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Microsoft Threat Protection will
automatically turn on for eligible license holders
• Introduction to Microsoft Threat Protection Service
11
Microsoft Threat Protection suite protects:
• Identities with Azure ATP and Azure AD Identity Protection - Azure ATP uses Active Directory
signals to identify, detect, and investigate advanced threats, compromised identities, and
malicious insider actions directed at your organization.
• Applications with Microsoft Cloud App security - Microsoft Cloud App security is a
comprehensive cross-SaaS solution bringing deep visibility, strong data controls, and
enhanced threat protection to your cloud apps.
https://docs.microsoft.com/en-us/microsoft-365/security/mtp/microsoft-threat-protection?view=o365-worldwide

12. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Azure Site Recovery—Zone-to-zone disaster
recovery [ GA ]
12
• Azure Site Recovery brings disaster recovery (DR) protection for virtual machines (VM) in Azure
Availability Zones, with zone-to-zone DR.
• Now if a single Azure availability zone is compromised, fail over your VMs to a different zone
within the same region and access them from the secondary availability zone.
• Zone-to-zone DR is now available in Southeast Asia and UK South.
https://azure.microsoft.com/en-us/updates/zone-to-zone-
disaster-recovery-now-available-through-azure-site-recovery/

13. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Azure Site Recovery—Zone-to-zone disaster
recovery [ GA ]
13
• Using Availability Zones for Disaster Recovery
• Many customers who had a metro Disaster Recovery strategy while hosting applications on
premise sometimes look to mimic this strategy once they migrate applications over to Azure.
• Many other customers have complicated networking infrastructure and do not wish to
recreate it in a secondary region due to the associated cost and complexity.
• In some regions that do not have a paired region within the same legal jurisdiction (for
example, Southeast Asia)
• Zone to Zone Disaster Recovery implies replication of data across shorter distances when
compared with Azure to Azure Disaster Recovery and therefore, you may see lower latency
and consequently lower RPO.
https://docs.microsoft.com/en-us/azure/site-recovery/azure-
to-azure-how-to-enable-zone-to-zone-disaster-recovery

14. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Azure Site Recovery—Zone-to-zone disaster
recovery [ GA ]
14
https://docs.microsoft.com/en-us/azure/site-recovery/azure-
to-azure-how-to-enable-zone-to-zone-disaster-recovery

15. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Azure Site Recovery—Zone-to-zone disaster
recovery [ GA ]
15
https://docs.microsoft.com/en-us/azure/site-recovery/azure-
to-azure-how-to-enable-zone-to-zone-disaster-recovery

16. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Azure File shares snapshot management by
Azure Backup [ GA ]
• For users of Azure Files, share snapshots have offered a read-only version of file shares from
a previous point in time. Although customers can simply use these share snapshots to go
back in time, managing snapshots using scripts or automation is a labour-intensive process.
Microsoft Azure Backup offers a simple and reliable way to backup and protect Azure Files
using share snapshots.
• Today, we are announcing the general availability of snapshot management for Azure Files by
Azure Backup. Apart from being available natively in the cloud, Azure Backup offers
significant benefits while protecting file shares using Recovery Services vault.
16
https://azure.microsoft.com/en-us/updates/azure-file-shares-snapshot-management-by-azure-backup-is-now-
generally-available/

17. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Azure File shares snapshot management by
Azure Backup [ GA ]
17
https://azure.microsoft.com/en-us/updates/azure-file-shares-snapshot-management-by-azure-backup-is-now-
generally-available/

18. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Azure File shares snapshot management by
Azure Backup [ GA ]
• Also supported in Southeast Asia Region
• Check limitation
18
https://docs.microsoft.com/en-us/azure/backup/azure-file-share-support-matrix

19. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Cross-region restore for Azure
Virtual Machines using Azure Backup [ preview ]
• With the introduction of cross-region restore, you can now initiate restores in a secondary
region at will to mitigate real downtime issues in a primary region for your environment. This
makes the secondary region restores completely customer controlled. Azure Backup uses the
backed-up data replicated to the secondary region for such restores.
• Azure Backup uses Recovery Services Vault to hold backup data, offering both local and geo
redundancy. To ensure high availability of backed-up data, Azure Backup defaults storage
settings to geo redundancy. As a result of this, backed-up data in a primary region is geo
replicated to an Azure-paired secondary region. So when Azure has an outage in a primary
region, the data replicated in a secondary region is available to restore in a secondary
region only. Use the new cross-region restore feature to mitigate issues in the primary region.
19
https://azure.microsoft.com/en-us/updates/crossregion-
restore-for-azure-virtual-machines-using-azure-backup/

20. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Cross-region restore for Azure
Virtual Machines using Azure Backup [ preview ]
20
https://docs.microsoft.com/en-us/azure/best-practices-
availability-paired-regions#azure-regional-pairs

21. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Cross-region restore for Azure
Virtual Machines using Azure Backup [ preview ]
• Take advantage of the secondary region data using this feature for these
scenarios:
• Full outage
• Partial outage
• No outage
21
https://docs.microsoft.com/en-us/azure/best-practices-
availability-paired-regions#azure-regional-pairs

22. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Cross-region restore for Azure
Virtual Machines using Azure Backup [ preview ]
22
https://docs.microsoft.com/en-us/azure/backup/backup-
create-rs-vault#set-cross-region-restore

23. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Cross-region restore for Azure
Virtual Machines using Azure Backup [ preview ]
23
https://docs.microsoft.com/en-us/azure/backup/backup-azure-
arm-restore-vms#view-backup-items-in-secondary-region

24. EP 29 – 09 May 2020 : Product updates for Microsoft Azure
Cross-region restore for Azure
Virtual Machines using Azure Backup [ preview ]
24
https://docs.microsoft.com/en-us/azure/backup/backup-azure-
arm-restore-vms#view-backup-items-in-secondary-region