Kategorie: Microsoft Azure

Azure PowerShell 3.0.0–Highlights and breaking changes

Azure PowerShell is a set of PowerShell cmdlets which assist you in managing your assets in Azure using Azure Resource Manager (ARM) and Azure Service Management (RDFE).  Azure PowerShell 3.0.0 adds various improvements and fixes across multiple Azure resources; however, in accordance with semantic versioning, the introduction of a new major revision indicates breaking changes in a small subset of our cmdlets.  You can install the cmdlets via your favorite installation path indicated in the Azure PowerShell 3.0.0 release notes.

Resource improvements

ApiManagement

Enable support of Importing and Exporting SOAP based APIs (Wsdl Format)

Import-AzureRmApiManagementApi
Export-AzureRmApiManagementApi

Deprecated cmdlet Set-AzureRmApiManagementVirtualNetworks. In place, place used cmdlet Update-AzureRmApiManagementDeployment
Enabled support for ARM based VNETs for configuration Vpn via cmdlet Update-AzureRmApiManagementDeployment
Introduced support for VpnType (None, External, Internal) to differentiate ApiManagement workloads for Internet and Intranet
Fixed PowerShell issues

#2622
#2606

Batch

Added new cmdlet for reactivating tasks

Enable-AzureBatchTask

Added new parameter for application packages on job manager tasks and cloud tasks

New-AzureBatchTask -ApplicationPackageReferences

Added new parameters for job auto termination

New-AzureBatchJob -OnAllTasksComplete -OnTaskFailure
New-AzureBatchJob -ExitConditions

ExpressRoute

Added new parameter service key in return object when provider list all cross connection

Get-AzureCrossConnectionCommand

MachineLearning

Get-AzureRmMlWebService supports paginated response
Remind user Get-AzureRmMlWebService "Name" parameter needs to work with "ResourceGroupName" parameter

Network

Added new cmdlet to get application gateway backend health

Get-AzureRmApplicationGatewayBackendHealth

Added support for creating UltraPerformance sku

New-AzureRmVirtualNetworkGateway -GatewaySku
New-AzureVirtualNetworkGateway -GatewaySku

RemoteApp

Added cmdlets to enable User Disk and Gold Image Migration feature

Export-AzureRemoteAppUserDisk
Export-AzureRemoteAppTemplateImage

SiteRecovery

New cmdlets have been added to support one to one mapping with service objects.

Get-AzureRmSiteRecoveryFabric
Get-AzureRmSiteRecoveryProtectableItem
Get-AzureRmSiteRecoveryProtectionContainerMapping
Get-AzureRmSiteRecoveryRecoveryPoin
Get-AzureRmSiteRecoveryReplicationProtectedItem
Get-AzureRmSiteRecoveryServicesProvider
New-AzureRmSiteRecoveryFabri
New-AzureRmSiteRecoveryProtectionContainerMapping
New-AzureRmSiteRecoveryReplicationProtectedItem
Remove-AzureRmSiteRecoveryFabric
Remove-AzureRmSiteRecoveryProtectionContainerMapping
Remove-AzureRmSiteRecoveryReplicationProtectedItem
Remove-AzureRmSiteRecoveryServicesProvider
Set-AzureRmSiteRecoveryReplicationProtectedItem
Start-AzureRmSiteRecoveryApplyRecoveryPoint
Update-AzureRmSiteRecoveryServicesProvider

Following cmdlets have been modified for to support one to one mapping with service objects.

Edit-AzureRmSiteRecoveryRecoveryPlan
Get-AzureRmSiteRecoveryNetwork
Get-AzureRmSiteRecoveryNetworkMapping
Get-AzureRmSiteRecoveryProtectionContainer
Get-AzureRmSiteRecoveryStorageClassification
Get-AzureRmSiteRecoveryStorageClassificationMapping
Start-AzureRmSiteRecoveryCommitFailoverJob
Start-AzureRmSiteRecoveryPlannedFailoverJob
Start-AzureRmSiteRecoveryTestFailoverJob
Start-AzureRmSiteRecoveryUnplannedFailoverJob
Update-AzureRmSiteRecoveryProtectionDirection
Update-AzureRmSiteRecoveryRecoveryPlan

HUB support added to Set-AzureRmSiteRecoveryReplicationProtectedItem.
Deprecation warning introduced for cmlets/parameter-sets which does not comply to SiteRecovery service object model.

Breaking changes

Data Lake Store

The following cmdlets were affected this release (PR 2965):

Get-AzureRmDataLakeStoreItemAcl (Get-AdlStoreItemAcl)

This cmdlet was removed and replaced with Get-AzureRmDataLakeStoreItemAclEntry (Get-AdlStoreItemAclEntry).
The old cmdlet returned a complex object representing the access control list (ACL). The new cmdlet returns a simple list of entries in the chosen path's ACL.

# Old
Get-AdlStoreItemAcl -Account myadlsaccount -Path /foo

# New
Get-AdlStoreItemAclEntry -Account myadlsaccount -Path /foo

Get-AzureRmDataLakeStoreItemAclEntry (Get-AdlStoreItemAclEntry)

This cmdlet replaces the old cmdlet Get-AzureRmDataLakeStoreItemAcl (Get-AdlStoreItemAcl).
This new cmdlet returns a simple list of entries in the chosen path&039;s ACL, with type DataLakeStoreItemAce[].
The output of this cmdlet can be passed in to the -Acl parameter of the following cmdlets:

Remove-AzureRmDataLakeStoreItemAcl
Set-AzureRmDataLakeStoreItemAcl
Set-AzureRmDataLakeStoreItemAclEntry

# Old
Get-AdlStoreItemAcl -Account myadlsaccount -Path /foo

# New
Get-AdlStoreItemAclEntry -Account myadlsaccount -Path /foo

Remove-AzureRmDataLakeStoreItemAcl (Remove-AdlStoreItemAcl), Set-AzureRmDataLakeStoreItemAcl (Set-AdlStoreItemAcl), Set-AzureRmDataLakeStoreItemAclEntry (Set-AdlStoreItemAclEntry)

These cmdlets now accept DataLakeStoreItemAce[] for the -Acl parameter.
DataLakeStoreItemAce[] is returned by Get-AzureRmDataLakeStoreItemAclEntry (Get-AdlStoreItemAclEntry).

# Old
$acl = Get-AdlStoreItemAcl -Account myadlsaccount -Path /foo
Set-AdlStoreItemAcl -Account myadlsaccount -Path /foo -Acl $acl

# New
$aclEntries = Get-AdlStoreItemAclEntry -Account myadlsaccount -Path /foo
Set-AdlStoreItemAcl -Account myadlsaccount -Path /foo -Acl $aclEntries

ApiManagement

The following cmdlets were affected this release (PR 2971):

New-AzureRmApiManagementVirtualNetwork

The required parameters to reference a virtual network changed from requiring SubnetName and VnetId to SubnetResourceId in format/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ClassicNetwork/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}

# Old
$virtualNetwork = New-AzureRmApiManagementVirtualNetwork -Location <String> -SubnetName <String> -VnetId <Guid>

# New
$virtualNetwork = New-AzureRmApiManagementVirtualNetwork -Location <String> -SubnetResourceId <String>

Deprecating Cmdlet Set-AzureRmApiManagementVirtualNetworks

The Cmdlet is getting deprecated as there was more than one way to Set Virtual Network associated to ApiManagement deployment.

# Old
$networksList = @()
$networksList += New-AzureRmApiManagementVirtualNetwork -Location $vnetLocation -VnetId $vnetId -SubnetName $subnetName
Set-AzureRmApiManagementVirtualNetworks -ResourceGroupName "ContosoGroup" -Name "ContosoApi" -VirtualNetworks $networksList

# New
$masterRegionVirtualNetwork = New-AzureRmApiManagementVirtualNetwork -Location <String> -SubnetResourceId <String>
Update-AzureRmApiManagementDeployment -ResourceGroupName "ContosoGroup" -Name "ContosoApi" -VirtualNetwork $masterRegionVirtualNetwork

Network

The following cmdlets were affected this release (PR 2982):

New-AzureRmVirtualNetworkGateway

Description of what has changed :- Bool parameter:-ActiveActive is removed and SwitchParameter:-EnableActiveActiveFeature is added for enabling Active-Active feature on newly creating virtual network gateway.

# Old
# Sample of how the cmdlet was previously called
New-AzureRmVirtualNetworkGateway -ResourceGroupName $rgname -name $rname -Location $location -IpConfigurations $vnetIpConfig1,$vnetIpConfig2 -GatewayType Vpn -VpnType RouteBased -EnableBgp $false -GatewaySku HighPerformance -ActiveActive $true

# New
# Sample of how the cmdlet should now be called
New-AzureRmVirtualNetworkGateway -ResourceGroupName $rgname -name $rname -Location $location -IpConfigurations $vnetIpConfig1,$vnetIpConfig2 -GatewayType Vpn -VpnType RouteBased -EnableBgp $false -GatewaySku HighPerformance -EnableActiveActiveFeature

Set-AzureRmVirtualNetworkGateway

Description of what has changed :- Bool parameter:-ActiveActive is removed and 2 SwitchParameters:-EnableActiveActiveFeature / DisableActiveActiveFeature are added for enabling and disabling Active-Active feature on virtual network gateway.

# Old
# Sample of how the cmdlet was previously called
Set-AzureRmVirtualNetworkGateway -VirtualNetworkGateway $gw -ActiveActive $true
Set-AzureRmVirtualNetworkGateway -VirtualNetworkGateway $gw -ActiveActive $false

# New
# Sample of how the cmdlet should now be called
Set-AzureRmVirtualNetworkGateway -VirtualNetworkGateway $gw -EnableActiveActiveFeature
Set-AzureRmVirtualNetworkGateway -VirtualNetworkGateway $gw -DisableActiveActiveFeature
Quelle: Azure

Azure Backup hosts Ask Me Anything session

The Azure Backup team will host a special Ask Me Anything session on /r/Azure, Thursday, October 20, 2016 from 09:00 am to 1:00 pm PDT.

What&#039;s an AMA session?

We&039;ll have folks from across the Azure Backup Engineering team available to answer any questions you have. You can ask us anything about our products, services or even our team!

Why are you doing an AMA?

We like reaching out and learning from our customers and the community. We want to know how you use Azure and Azure Backup and how your experience has been. Your questions provide insights into how we can make the service better.We did this last year and we are excited about the questions and feedback we have received and we are doing it again.

Who will be there?

You, of course! We&039;ll also have PMs and Developers from the Azure Backup team participating throughout the day.
Have any questions about the following topics? Bring them to the AMA.

•    Backup of Azure IaaS VMs (both Classic and Resource Manager VMs)
•    Azure Backup Server
•    System Center Data Protection Manager (We announced VMware VM backup support couple of months ago)
•    Microsoft Azure Recovery Services Agent

Why should I ask questions here instead of StackOverflow, MSDN or Twitter? Can I really ask anything?

An AMA is a great place to ask us anything. StackOverflow and MSDN have restrictions on which questions can be asked while Twitter only allows 140 characters. With an AMA, you’ll get answers directly from the team and have a conversation with the people who build these products and services.

Here are some question ideas:
•    What is Azure Backup? What is the cloud-first approach to backup?
•    How should I choose between Azure Backup Server and System Center Data Protection Manager for my application backup?
•    What are the pros/cons of using VM backup versus File/Folder backup?
•    How does the “Protected Instances” billing model work?
•    Why should I pick cloud over tape for long term retention?
•    What can be protected in Recovery Services vault?

Go ahead, ask us anything about our public products or the team. Please note, we cannot comment on unreleased features and future plans.

Join us! We&039;re looking forward to having a conversation with you!
Quelle: Azure

Azure compliance white paper-o-rama

Following national and regional regulations of the countries your business operates in is not an easy task, yet it is an absolute necessity as businesses across all industries see their customer bases expand geographically. Whether you’re a business or an organization operating within the boundaries of a single country or across the globe, you can confidently move to the cloud and still maintain alignment with regional and international requirements. To help our customers understand how to deploy in Azure while successfully interpreting US and international governance requirements, we produced a series of documents that can be leveraged during your cloud adoption journey.

The following white papers include guidance for US law enforcement, US education, UK G-cloud, and Cloud services in Germany, Malaysia, New Zealand, Singapore, and Australia. These papers shed light on the nuances we want our customers to be aware of when interacting with government or regional authorities as it relates to adopting Azure cloud services.
 
Here&#039;s a short summary of our most recently produced white papers:

 The CJIS Implementation Guidelines for Azure Government, Office 365 Government, Dynamics CRM Online Government white paper is designed to provide insight into the Criminal Justice Information Services (CJIS) security controls applicable to Microsoft Cloud services, and provide guidance to law enforcement agencies on where to access detailed information to assist in CJIS audits. This document provides guidelines and resources to assist CJIS Systems Agencies (CSA) and law enforcement agencies (LEA) in implementing and utilizing Microsoft Government Cloud features, which meet the applicable CJIS certification standards and are consistent with FBI CJIS Security Policy.
The FERPA Implementation Guide for Microsoft Azure white paper helps educational organizations that are considering a move to Azure and are looking for guidance in designing and operating solutions that incorporate security controls to help them meet their compliance challenges. This paper provides insight into how Microsoft meets its compliance obligations on the platform and presents best practices and security principles that are aligned to the Family Educational Rights and Privacy Act (FERPA), International Organization for Standardization (ISO) 27001, Microsoft’s Security Development Lifecycle (SDL), and operational security for online security.  
The Microsoft Cloud Germany for commercial customers in the European Union (EU) and European Free Trade Association (EFTA) white paper provides guidance on how to store and manage customer data in compliance with applicable German laws and regulations as well as key international standards. By leveraging the Microsoft developed data trustee model that provides and enables European customers to move to the cloud, EU and EFTA customers can achieve compliance while utilizing Azure cloud services.
The Microsoft Azure Compliance in the context of Malaysia Security and Privacy Requirements white paper addresses Malaysian regional compliance matters in the context of Malaysia Security and Privacy Requirements. Read this white paper to learn more about the questions faced by customers in Malaysia who are considering a move to the cloud.
The Microsoft Azure Compliance in the context of New Zealand Security and Privacy Requirements white paper is written for IT decision makers in New Zealand who are considering whether to move their data to Microsoft Azure. This paper addresses questions like: Does Microsoft Azure meet New Zealand’s compliance requirements? Where is data stored and who can access it? What is Microsoft doing to protect data? How can a customer verify that Microsoft is doing what it says? New Zealand organizations in need of meeting compliance requirements can read this paper to learn about Azure key security and privacy principles that will enable them to meet their compliance goals.
The Microsoft Azure Compliance in the context of Australia Security and Privacy Requirements white paper is written for Australian organizations looking to navigate their country-specific security and privacy requirements. Protecting data, monitoring and securing access, and meeting customer promises are achieved by Azure through implementing security and privacy principles, enabling Australian customers to leverage our cloud offerings with confidence. 
The Microsoft Azure Compliance in the context of Singapore Security and Privacy Requirements white paper addresses the Singapore standards Multi-Tier Cloud Security (MTCS) and how Microsoft complies with the Singapore Personal Data Privacy Act (PDPA). This means both government and commercial customers can have confidence knowing they comply with Singapore legislative and certification requirements when deploying data to the cloud.
The 14 Cloud Security Controls for UK cloud using Microsoft Azure white paper provides customer strategies on moving their services to Azure while meeting their UK obligations mandated by the CESG/NSCS. Customers of the UK can learn how Azure can be used to help address the 14 controls outlined in the cloud security principles. This paper also outlines how customers can move faster and achieve more while saving money as they adopt Azure cloud services.

These white papers represent a set of new guidance created to help customers understand local laws and governance issues, and provide insight into the local regulatory requirements when deploying to the cloud. Check out these papers as well as other useful guidance on the Microsoft Trust Center.
Quelle: Azure