Securing Microsoft Foundry: Design decisions, trade-offs

Executive summary Microsoft Foundry consolidates what used to be several separate services — Azure AI Studio, Azure AI Foundry, Azure OpenAI, Azure AI Services — into a single platform with one resource provider namespace, unified RBAC, networking, and policy. For security teams, that consolidation is mostly good news: fewer disconnected control surfaces, one place to reason about access. But it also changes the shape of the risk. Five points for decision-makers: ...

September 8, 2026 · 13 min · 2559 words · Gabor Szekeres

Small settings that cost me hours - Deploying a secure AI app on Microsoft Foundry

In this blogpost I’m going to walk you through the gotcha’s and the things I wish I knew before I started to build a simple but secure AI app on Microsoft Foundry. Before we do that, I’ll show you the high level architecture of that app Nothing that broke this build was hard. Every single blocker was a one-line setting, a trailing slash, or a permissions boundary I forgot existed. Individually trivial; collectively, a day. This is the list I wish I’d had. ...

September 1, 2026 · 6 min · 1251 words · Gabor Szekeres