Microsoft expands Sovereign Cloud with new control features

Microsoft has announced the next stage of Microsoft Sovereign Cloud, adding new capabilities across Sovereign Public Cloud, Sovereign Private Cloud and the Sovereign Partner Ecosystem, according to a post on the Official Microsoft Blog by Douglas Phillips, president and chief technology officer of Microsoft Specialized Clouds.

Microsoft frames sovereignty around each workload.

The company says each workload carries different requirements for data, operations, technology dependencies, continuity and risk, and that Microsoft Sovereign Cloud lets organizations apply the appropriate level of control to each one while keeping a consistent approach to governance and operations.

Sovereign Control Panel enters public preview at Microsoft Ignite.

The unified Azure portal experience helps organizations understand their sovereignty posture, apply and manage controls, and identify gaps and risks. It also supports business continuity readiness by mapping workload dependencies and assessing portability across operating environments.

Operator access and encryption controls expand.

For customers in the European Union and the European Free Trade Association, Microsoft is rolling out Data Guardian, which adds European-resident oversight by a trusted EU partner for qualifying Microsoft engineer remote access to in-scope production systems. Production Touch Ledger, launched with a phased rollout in the EU and EFTA, creates tamper-evident records of that access and the actions performed. External key management with Azure Managed HSM is now generally available, letting customers keep the root encryption key in hardware they own and operate on-premises or through a trusted third party. Azure Confidential Clean Rooms is in limited preview for approved multiparty collaboration on shared sensitive data.

Sovereign Private Cloud adds disconnected operations and local services.

The ability to transition workloads from connected to disconnected operations is entering public preview. DocumentDB and Blob Storage on Azure Local are entering public preview, joining SQL Server on Azure Local, which is already generally available. GitHub Enterprise Local will become generally available at Ignite as a validated GitHub Enterprise Server appliance on Azure Local, and developers can use GitHub Copilot with locally hosted models for inference. Foundry Local will also become generally available at Ignite for connected and disconnected operations on Azure Local, and its integration with Microsoft 365 Local is available in preview for approved customers. Confidential virtual machines on Azure Local are generally available, and Microsoft says Azure Local will support multitenancy.

Partners and continuity guidance round out the update.

Microsoft is publishing new sovereign business continuity guidance and architecture patterns. The Sovereign Partner Ecosystem includes National Partner Clouds such as Bleu in France, along with software, specialized and platform co-innovation partners.