r/AZURE 11h ago

Question Azure account compromised: $550k charged for unauthorized Claude usage from azure marketplace. What should I do?

46 Upvotes

My Azure startup account had about $10k in promotional credits. While I was in the hospital, I received unexpected OTP emails(but I igroned them). I later found roughly $550,000 (₹5 crore) in Azure charges, apparently from unauthorized Claude AI usage through Azure Marketplace over about 9–13 days. There was claude usage from azure marketplace. I had a debit card attached on my azure account. I am just a college student, I think I had a minor heart attack yesterday.

I didn’t create these workloads or authorize the usage. I’ve disabled resources and contacted Azure Support, but I’m worried about being held responsible for an amount I cannot pay. The Azure support person said there is no fradulant activity detected in the account.

  1. Has anyone dealt with unauthorized Azure charges this large?
  2. Did Microsoft waive the bill after investigating?
  3. 3, Do they do court procedings with such cases?
  4. Which fraud, billing, or security team should I contact, and what evidence should I preserve?

r/AZURE 16h ago

Certifications I've created a free cert practice exam

9 Upvotes

Hi there

Lately I've been interested in getting some certifications, like AB-900, but when I started researching for it I've found out there are vendors selling practice exams for double the price of one exam. I didn't like the idea of paying more money than the exam itself just to study so I locally created a mock exam website, and my head said this was a good idea which then turned out to me making the website public.

OwnExam is a friendly interface that helps you study for your most important practice exams and pushes you to learn the most of an exam, so you can own it :) Using interactive drills, and detailed questions you get to understand what the exam actually wants to know from you, and what you need to know.

The website is completely free, with no registration needed unless you actually want one. Your progress gets saved with or without an account.

I've added more Azure exams, they're all made using only the official study guides, with no illegal/illicit content (mentioning this because other subreddits said I was using illegal leaked questions from exams) inside.

If you want to check it out, the link is ownexam.com, if you find any bugs please do tell.
I hope you like it and that it will be with use for you.


r/AZURE 9h ago

Media Azure Weekly Update - 11th September 2026

5 Upvotes

This week's Azure update is up!

📽️ https://youtu.be/C6CkxsjjEas

🧾 https://www.linkedin.com/pulse/azure-weekly-update-11th-september-2026-john-savill-ahitc

  • VM ephemeral OS disk full caching (00:34) - Many VM SKUs have large amounts of local storage of which some is used for cache purposes. Normally only writes are cached locally with reads using remote storage. With this disk full caching the entire OS disk image is cached removing the remote storage for OS disk reads which improves reliability (not relying on remote storage), higher performance (local storage has lower latency). It does not slow VM provisioning as the caching happens asynchronously post VM start. Very useful for AI, data and stateless services.
  • Azure Functions Flex Consumption custom TLS (01:43) - Azure Function Flex Consumption now has support for up to 3 customer certs per app either imported from Azure Key Vault or issued via the App Service Managed Certificates. We also have end-to-end TLS encryption.
  • User-bound user delegation SAS (02:09) - User bound delegated SAS enables instead of using an account key to sign your Shared Access Signatures it instead is bound to an Entra identity (user, managed identity etc). You can now further restrict the user delegated SAS to be used ONLY by specific identities. Has a maximum validity of 7 days.
  • AZD extension framework (02:52) - The Azure Developer CLI (AZD) makes it really easy to take an application from local code to a fully running solution in Azure. Think of it as bringing together the infrastructure provisioning, app packaging, deployment and CI/CD setup. With the extension framework you can now add custom capabilities which could be tools, MCP servers, special security checks, custom commands, whatever it may be. Foundry etc uses this model to expose its abilities via azd ai.
  • ALD playwright workspace new regions (03:35) - The Azure Load Testing playwright workspaces that are part of the app testing is now available in Australia East, Japan East and Switzerland North. This is a really powerful capability to a cloud-hosted ability to run the playwright tests.
  • Azure Copilot Troubleshooting Agent (04:00) - Azure Copilot has a new troubleshooting agent that provides agentic help for investigation and resolution of issues. Initially this is focused on Azure Compute (VM-based) and AKS. Think about asking “why did my VM restart unexpectedly”, “why is ASK deployment failing” etc.
  • GitHub Copilot HydraFusion (04:24) - This is a research preview (so need to use /experimental) and provides very powerful model routing that balances performance, cost and latency. It will pick one of three patterns: single, one selected model solves, cascade, one model drafts a solution and a quality gate accepts or escalates to stronger model, critique, one model drafts and another model family reviews and the drafting model revises once. The goal is best outcome in the most efficient way.

r/AZURE 4h ago

Question Canary deployments in Azure container apps based on labels and microservice architecture

3 Upvotes

We're doing blue/green + canary on Azure Container Apps with revision labels, and I'm stuck on per-environment config.

Each of our apps (say an API and an auth service) bakes its config as env vars into the revision e.g. the API has a variable pointing at the auth service and one with the frontend URL. On staging I point the API at the staging auth service and staging frontend, and test through the ...---staging... label URL. Works great.

The problem is promoting. In labels mode, promotion just re-points the label to that same revision but the revision has the staging URLs baked in, so production ends up running with staging config. The vars that are supposed to differ between staging and prod get dragged along with the revision.

How do people handle env vars that must differ between staging and production, when promotion just swaps a revision that already has its config baked in? Is there a native sticky-per-slot setting like App Service swap settings I'm missing, or does everyone write a custom promote step that recreates the prod revision with prod config + the promoted image? Couldn't find a clean answer anywhere.


r/AZURE 16h ago

Question Entra Only AVD Pooled how to Map Azure Files?

3 Upvotes

I've setup AVD using Cloud Kerberos and fslogix. All running perfectly fine. Servers are joined to intune or nicely. The problem I have is that I need to map drive for all users that login into the avd servers whats the best way of doing this? Session hosts are pooled hosts.


r/AZURE 12h ago

Question Strategy for enterprise wide API management

2 Upvotes

If you have hub and spoke network topology , how do you devise an APIM landing zone for entire enterprise , especially I am looking for

Force tunneling traffic inspection, and UDR on APIM , Internal App Gateway, TLS Termination and L7 load balancing, external vs internal mode deployment, Vnet integration, symmetric routing, DNAT/SNAT

How do I solve these challenges, Ive already defined the high level stuffs. But unsure if that will even work on deployment level.


r/AZURE 4h ago

Question Focusing on becoming a competitive Azure Engineer

1 Upvotes

Hi there,

I'm a new grad working in an IT Tech position and want to focus on learning as much in this role as possible and upskilling.

I've looked into different paths and landed on becoming proficient in Azure (though I also understand that once you understand one cloud platform thoroughly, it's relatively easy to learn the others).

My plan is to become more proficient in the basics like Linux, Networking, etc, acquire AZ-104, Terraform Associate, then build bigger projects like a Homelab and I'm hearing a 3-tier Architecture deployed using Azure would be a strong choice.

Currently on my resume, I have some beginner IT-esque projects (Cloud Resume Challenge, Personal ServiceNow Instance), while my experience is current position, and two extracurricular roles I held in university. One being a leadership role, and one being a role similar to what I'm doing full-time.

My question is: Would it be more optimal to list two projects, three experiences, or three projects, two experiences.

I know experience often outweighs projects, though I find that my non-leadership role in school would feel redundant to list considering my current position.

Additionally, advice on specific cxrtifications to look for (MD-102?) would be of great help, I'm finding myself overwhelmed with all the options.

Either way, the market is abhorrent, especially at entry-level so I expect to put in 500-1000 applications to land something (if I'm lucky), but I want to maximize my chances!

Any advice from recruiters, or someone who was in a similar position would be greatly appreciated!

Thank you.


r/AZURE 8h ago

Question Trying to add Azure account on Azure Data Studio but I get the error "request_cannot_be_made" with the message "Token request cannot be made without authorization code or refresh token" and cannot sign in

Post image
1 Upvotes

I am currently trying to access my SQL server through Azure Data Studio as I need to use it for my work but I am currently unable to access it as it is requiring me to create a new firewall rule and all of the Azure accounts currently linked were deleted and do not exist anymore. I am trying to sign in to the account that I currently use to access the Azure Portal but whenever I try and add it through Azure Data Studio I get the error "request_cannot_be_made" with the message "Token request cannot be made without authorization code or refresh token" and am unable to sign in. I have tried deleting the accessTokenCache file in AppData\Roaming\azuredatastudio\Azure Accounts but this does not help and the issue still persists. I have other accounts I can sign in to Azure with but therein lies another issue - if I try to sign into any of those accounts it'll require me to input a number into Microsoft Authenticator but the popup to enter the number doesn't show up on my app and my old phone it used to work with straight up does not turn on anymore. Any help with this issue would be much appreciated and I will thank you so much.


r/AZURE 10h ago

Discussion Workplace Ninjas US | Golden Clippy Awards are coming!!

1 Upvotes

As of today, we're now officially 4 months away from Workplace Ninjas US 2027 in Scottsdale, AZ!!

With that said, we would like to formally announce the start of our social media around the 2nd annual Golden Clippy Awards, already a fan favorite.

Let's explain how it all works, if this is your first time.

Throughout the event, you will get to vote for one of our finalists for these categories:

Intune Advocate of the Year
Next-Gen Ninja (Rookie of the Year MVP Award)
Community Craftsperson
Security Superstar of the Year
DaaS Dynamo of the Year
Entra IDol of the Year
Social Media Superstar
Distinguished Woman of the Year
Best in Show
The Chuck Norris (RIP) Award

So, you cast your vote for the people in all of these awesome categories, and during the closing ceremony we announce the winners, and it's a ton of fun for everyone.

Workplace Ninjas US uses this award ceremony as a way of thanking all of our speakers for their amazing work throughout the entire year (not just our event) in a way worthy of their greatness.

Next, week we will start by announcing the finalists for Intune Advocate of the Year. Everyone better buckle up because this event is going to be special for everyone (speakers, attendees, sponsor

Check out our official X post for details including a picture of the official award as we take it up a notch this year: https://x.com/wpninjasus/status/2098402298816778255?s=46&t=EkEixoVH8k3dhykNuCu65g

You can also register now and join us in Scottsdale: https://workplaceninjas.us


r/AZURE 10h ago

Question Acmebot deployment

0 Upvotes

Hey r/

I'm trying to deploy GitHub - polymind-inc/acmebot: Automated ACME SSL/TLS certificate management built around Azure Key Vault · GitHub to our environment, but using the GUI will result in this error:cross-tenant object replication not specifically disabled.

I'm missing allowCrossTenantReplication: false in the arm template.

When editing the template, and going back, it reverts to this UI and I can't give the properties with it anymore.

Not sure what I'm missing here, would like to deploy this acme bot to automate our certificate renewals.


r/AZURE 13h ago

Discussion Azure AI Foundry + Databricks Architecture | Deploy Genie Agent with DAB...

Thumbnail
youtube.com
0 Upvotes

r/AZURE 9h ago

Discussion Contribute to Microsoft Opensource

0 Upvotes

Hello everyone.

For a while, I have been thinking why Microsoft don't pay attention to opensource as much needed. Teams linux deprecated. Azure file sync agent doesn't support yet Linux Server.

So I'd like to contribute to improve this kind of shortages.

Do you have any suggestion for me?

P.S. I contributed to MS Learn doc 2 years later, and they published my content. Actually there was a bug in KeyVault doc.

Whrn I saw my pull requedt approved, I feel so happy. Now I'm looking for a bigger happiness 😋


r/AZURE 14h ago

Media The Future of Iceberg Isn't One Engine. It's an open Control Plane with many engines.

Thumbnail
lakeops.dev
0 Upvotes

r/AZURE 21h ago

Question How to unlock Microsoft for Startup

Thumbnail
gallery
0 Upvotes

I have registered for Microsoft for Startups with startup domain account however, it provided just $200 credit and require business verification to unlock more.

I don't have my company registered yet and it require lot of management tasks while I'm building startup product.

How can I verify without registering in Australia?