# Azure product updates - 2026-10-17 **2 new update(s)** — first seen in this run. The last 7 day(s) are rescanned every time so late or backdated announcements are not missed. Grouped by Azure product category. Source: [Azure Updates](https://azure.microsoft.com/en-us/updates) ## Summary by category | Category | Updates | GA | Preview | Top products | | --- | ---: | ---: | ---: | --- | | [AI + machine learning](#ai-machine-learning) | 1 | - | 1 | Azure Databricks | | [Security](#security) | 1 | 1 | - | Key Vault | ## AI + machine learning ### [Public Preview: Azure Databricks Private network gateway](https://azure.microsoft.com/en-us/updates?id=576556) **Status:** In preview | **Published:** 2026-10-16 | **Products:** Azure Databricks | **Tags:** Feature Azure Databricks now offers a Private Network Gateway in Public Preview, enabling secure, simplified, and controlled serverless compute connectivity to virtual networks and transitively connected networks through a single managed gateway. - Capability: Provides a single managed gateway for serverless compute to access multiple private resources, route egress through customer firewalls, and use stable source IPs. - Integration: Works with existing network connectivity configurations (NCCs) and complements Azure Private Link for flexible serverless network security. - Traffic control: Supports SPECIFIC_DESTINATIONS and ALL_TRAFFIC modes for fine-grained or full egress routing through customer security appliances. - Preview limitations: Gateway and subnet must be in the same region as the NCC; supports bandwidth tiers from 10 to 100 Gbps; configurable via account console, REST API, or Terraform. Documentation: [Private network gateway - Azure Databricks](https://learn.microsoft.com/en-us/azure/databricks/security/network/serverless-network-security/private-network-gateway) ## Security ### [Generally Available: External key management for Azure Key Vault Managed HSM](https://azure.microsoft.com/en-us/updates?id=574296) **Status:** Launched | **Published:** 2026-10-16 | **Products:** Key Vault | **Tags:** Security, Feature Azure Key Vault Managed HSM now generally supports external key management, allowing organizations to retain physical control of key-encryption keys outside Microsoft infrastructure, meeting regulatory and sovereignty requirements. - Capability: Enables Azure services supporting customer-managed keys with Managed HSM to use keys stored in customer-operated external HSMs via a proxy implementing a standard EKM Proxy API. - Availability: Generally available in all Azure public regions with Azure Private Link integration in public preview; requires enablement per subscription through Microsoft account team. - Customer impact: Provides full customer sovereignty over key material outside Microsoft infrastructure but shifts responsibility for proxy, external HSM, networking, availability, and support to customers or their HSM vendors, with no Microsoft SLA coverage for these components. - Operational considerations: External key management introduces additional latency, operational complexity, and costs compared to native Managed HSM keys, and does not support backup/restore or key release scenarios. Documentation: [What is Managed HSM external key management?](https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/external-key-management-overview) --- _Generated automatically on 2026-10-17 01:11 UTC._