Steef-Jan Wiggers
@steefjan.bsky.social
InfoQ Cloud Lead Editor, Microsoft MVP Azure Integration PaaS, Cloud Native, Speaker, Scuba Diver, Runner, and Field Hockey Player.
The least interesting question about the integration data layer is SQL vs Cosmos. The real work: idempotency stores for duplicate deliveries, the outbox for dual writes, durable state for long-running workflows. sjwiggers.com/2026/08/05/a...
Azure Data Patterns for Integration Architects - Cloud Perspectives
Explore Azure data patterns to understand how integration impacts data storage and processing beyond just selecting a service.
sjwiggers.com
Roughly 98.4% of a production coding agent is harness infrastructure. Only 1.6% is AI decision logic. Which is why Microsoft shipping a supported harness, not just an SDK, is the story. Where agents run, what they touch, whose policy. www.infoq.com/news/2026/08...
Microsoft Agent Framework Harness and Hosted Agents Reach General Availability
Microsoft's Agent Framework now ships a supported runtime. Build 2026 brought the Agent Harness, the GitHub Copilot and Claude Agent SDK connectors, and the orchestration patterns to stable release; t...
infoq.com
Took the FinOps "token economics" framework and held it against a real APIM gateway. Attribution and caching: solid. Goodput, yield, routing: honest gaps. And multi-agent token math is not linear: chains compound context. sjwiggers.com/2026/08/04/t...
Token Economics: Understanding AI Cost Management - Cloud Perspectives
Explore token economics in AI cost management and discover how the Citadel Platform implements these concepts effectively.
sjwiggers.com
Three ways to host MCP servers on Azure Functions — not interchangeable. GA binding extension. Preview self-hosted SDK (Streamable HTTP only). Queue-based option that skips MCP when async decoupling is what you need. sjwiggers.com/2026/07/30/h...
Hosting MCP Servers on Azure Functions: GA vs. Preview - Cloud Perspectives
Hosting MCP servers on Azure Functions gives you three options: the binding extension, self-hosted MCP SDKs, and queue-based tools, and tells you which to use when.
sjwiggers.com
The Citadel series wraps: registering an agent in the AI registry via Azure API Center. Every agent carries a structured AI Publish Contract: what it is, what data it touches, who owns it. sjwiggers.com/2026/07/29/c... #azure #apicenter #euaiact
Registering a Citadel Agent in the AI Registry: Azure API Center - Cloud Perspectives
Learn how to register an AI agent in Azure API Center using the AI Publish Contract pattern, and how it supports EU AI Act Article 49 transparency.
sjwiggers.com
Airbus scored cloud providers on protection from non-European extraterritorial law, right next to scalability and AI. Scaleway won. Not an AWS exit: a sovereign tier for exposed workloads, hyperscaler for the rest. www.infoq.com/news/2026/07...
Airbus Makes Protection from Extraterritorial Law a Scored Criterion in its Cloud Tender
Airbus selected Scaleway as its sovereign cloud provider after a tender that scored protection against non-European extraterritorial legislation alongside technical capability. Airbus frames it as com...
infoq.com
Months in the Logic Apps agent loop, so my first reaction to Automation wasn't "nice designer." It's that apps are private by default; your compliance team can't see what they do. Wrote up the governance angle + a demo: sjwiggers.com/2026/07/28/l...
Logic Apps Automation Preview - Cloud Perspectives
Logic Apps Automation is in public preview. An architect's view of the new SKU, the governance boundary it introduces, a demo you can build, and what it cannot do yet.
sjwiggers.com
KBaaS in Azure Logic Apps removes the hard part: the rag pipeline. Upload documents → parse, chunk, summarise, embed into cosmos db. no ai search needed. Built an hr policy agent + github sample. five undocumented notes in the post. sjwiggers.com/2026/07/23/logic-apps-knowledge-base-as-a-service/
Knowledge Base as a Service in Azure Logic Apps - Cloud Perspectives
Build a RAG-powered HR policy agent using Knowledge Base as a Service in Azure Logic Apps.
sjwiggers.com
Integrate 2026 brought some Logic Apps announcements: Logic apps automation · Knowledge as a service · Foundry agent integration · Standard SDK · Connector namespace sjwiggers.com/2026/07/22/logic-apps-integrate-2026-announcements/ #azurelogicapps #integrate2026 #azure #enterpriseintegration
Azure Logic Apps at Integrate 2026: The Announcements - Cloud Perspectives
Azure Logic Apps Integrate 2026 announcements signal a platform shift. This post unpacks five announcements every integration architect should know and what they mean in practice
sjwiggers.com
AWS showed customers estimated bills in the trillions. Its own alarms fired but paged nobody; customers escalated 4.5 hours later. Mitigation? Disabling budget and cost anomaly alerts platform-wide. www.infoq.com/news/2026/07...
AWS Billing Bug Shows Customers Trillion-Dollar Estimates While Its Own Cost Alarms Fail to Act
A configuration change in AWS's bill computation system showed customers estimated bills in the billions and trillions of dollars for over 24 hours. AWS's own alarms detected the anomalies but failed ...
infoq.com
Citadel series continues: the five APIM gateway policies, in depth. Token limiting, semantic caching, content safety, cost attribution, and PII redaction one gateway, every call governed. sjwiggers.com/2026/07/21/c... #azure #apimanagement #aigovernance
Citadel APIM Gateway Policies Azure: A Deep Dive - Cloud Perspectives
Deep dive into five Citadel APIM gateway policies on Azure — token limiting, semantic caching, content safety, cost attribution, and PII redaction with real policy XML, live demos, and pitfalls from a...
sjwiggers.com
AlphaEvolve went from DeepMind paper to GA product: evolutionary code optimization with the evaluator client-side, so code never leaves your infra. Klarna doubled training throughput. Works only where there's a number to optimize. www.infoq.com/news/2026/07...
Google's AlphaEvolve Reaches General Availability with Evolutionary Code Optimization as a Service
Google's AlphaEvolve reached general availability on the Gemini Enterprise Agent Platform, turning the DeepMind research project into an evolutionary code optimization service. Evaluators run client-s...
infoq.com
Azure Functions isn't just the glue layer. It now has 4 distinct AI patterns — serverless agents, MCP servers, Durable workflows, and RAG pipelines. New post maps all four and when to use each. sjwiggers.com/2026/07/19/a... #azurefunctions #mcp
Azure Functions AI Integration: The Quiet Powerhouse - Cloud Perspectives
Azure Functions AI integration is the scalable engine for serverless agents, MCP servers, and agentic RAG.
sjwiggers.com
You don't have to choose among four Azure integration services. You answer two questions: messaging or orchestration, and then what does failure cost? Answer those, and the service picks itself. sjwiggers.com/2026/07/16/a...
Azure Messaging and Orchestration for Integration Architects - Cloud Perspectives
Explore the intricacies of azure messaging and orchestration to make informed decisions about your integration layer services.
sjwiggers.com
AWS + Anthropic shipped the Claude apps gateway: a self-hosted control plane for Claude Code + Desktop. One container handles identity, policy, telemetry, routing, and spend caps — what enterprise rollouts stall on. My InfoQ write-up: www.infoq.com/news/2026/07...
AWS Ships Claude Apps Gateway as Self-Hosted Control Plane for Claude Code and Claude Desktop
AWS and Anthropic have released the Claude apps gateway for AWS, a self-hosted control plane that centralizes identity, policy, telemetry, routing, and spend caps for Claude Code and Claude Desktop. T...
infoq.com
Google shipped Genkit's Agents API in preview. The neat bit: detached turns start an agent task, disconnect, and poll later. No WebSockets or job queue needed. Human-in-the-loop tools with anti-forgery checks too. Wrote it up for InfoQ: www.infoq.com/news/2026/07...
Google's Genkit Ships Agents API with Detached Turns and Human-in-the-Loop for TypeScript and Go
Google released the Genkit Agents API in preview for TypeScript and Go. The open-source framework packages message history, tool loops, streaming, and state persistence behind a single chat() interfac...
infoq.com
Accepted into the Microsoft MVP Program again: Azure Application PaaS. 💙 After a period marked by losing loved ones, being back on track means everything. Thank you to the community, Microsoft, and my fellow MVPs for carrying me through. #mvpbuzz #azure #mvpprogram
New Citadel post: stopping a governed AI agent cold. Three APIM kill-switch layers: global flip, approval header, per-agent blocklist. Blocked requests die in <50ms, with zero tokens and no agent code touched. sjwiggers.com/2026/07/14/m...
Citadel APIM Kill Switch: Stop a Governed Agent Cold - Cloud Perspectives
Stop a misbehaving AI agent instantly with Microsoft Foundry Citadel Platform Azure — three APIM kill switch layers validated in Application Insights.
sjwiggers.com
The interesting App Service decisions sit around the app: gateway with WAF in front, managed identity everywhere, slots for safe deploys. Get those right, and the app becomes almost boring. A compliment. sjwiggers.com/2026/07/10/a...
Azure App Service Architecture for Synchronous APIs - Cloud Perspectives
Explore Azure App Service architecture, request paths, deployment slots, managed identities, and when it's a less suitable option.
sjwiggers.com
Claude reached GA on Microsoft Foundry with Azure-native billing and governance. Meaningful for US enterprises removing procurement friction. www.infoq.com/news/2026/07... #claude #azure #foundry #gdpr #dataprivacy
Claude Reaches GA on Microsoft Foundry: European Enterprises Cannot Deploy It
Claude models reached GA on Microsoft Foundry with Azure-native billing and governance, but no European data zone exists. Anthropic's own documentation confirms data residency guarantees apply to Bedr...
infoq.com
Building secure Azure AI landing zones? You've probably run into the Spoke model deployment dilemma. It’s not a governance bypass; it’s a runtime requirement for Azure AI Foundry's Agent Service. sjwiggers.com/2026/07/08/a... #azure #cloudarchitecture #azureaifoundry
AI Foundry Spoke Model Deployment: Why It Still Happens - Cloud Perspectives
AI Foundry Spoke model deployment still happens in the Citadel pattern. Here's exactly why, and what it means for your application traffic.
sjwiggers.com
Oracle halved the Always Free Ampere A1 allowance from 4 OCPUs/24 GB to 2/12. No blog post, no email, no announcement. Users found out through documentation diffs and broken instances. Grandfathered instances? infoq.com/news/2026/07/oracle-cloud-free-tier-limits/ #oracle #cloud #freetier
Oracle Quietly Halves Free Tier Ampere A1 Compute Limits with No Public Announcement
Oracle halved the Always Free Ampere A1 compute allowance from 4 OCPUs and 24 GB RAM to 2 OCPUs and 12 GB RAM with no public announcement. Support agents gave conflicting answers on whether PAYG accou...
infoq.com
New post: wiring #CosmosDB conversation persistence into the #Citadel platform on Azure: one document per agent run, question, tool result, answer, and cumulative token counts.🛡️ sjwiggers.com/2026/07/06/microsoft-foundry-citadel-platform-azure-conversation-persistence-cosmos-db/ #azure #aiagents
Microsoft Foundry Citadel Platform Azure: Conversation Persistence with Cosmos DB - Cloud Perspectives
Add conversation persistence to Microsoft Foundry Citadel Platform Azure — store every agent run in Cosmos DB with tool calls, answer, and token counts.
sjwiggers.com
Apple chose Google Cloud to run Private Cloud Compute outside its own data centers for the first time. Apple maintains its own append-only hardware ledger of Google's fleet. infoq.com/news/2026/07/apple-pcc-google-cloud/ #apple #googlecloud #privacy
Apple Extends Private Cloud Compute to Google Cloud for the First Time
Apple chose Google Cloud to run Private Cloud Compute outside its own data centers for the first time, using NVIDIA Blackwell GPUs, Intel TDX, and Google's Titan chip. Apple maintains an independent a...
infoq.com
A practitioner's map of Azure PaaS for integration architects: compute, integration, data, governance, and the gap agentic AI exposes. Four layers + a five-question framework. sjwiggers.com/2026/07/02/a... #azure #paas #agenticai
Azure PaaS Integration for Architects: A Practitioner's Map - Cloud Perspectives
A practitioner's guide to Azure PaaS for integration architects covering compute, integration, data, governance, and AI workload gaps.
sjwiggers.com
New post: connecting a tool-calling agent to the Citadel platform on Azure, routed through APIM, OpenMeteo weather tool, two governed LLM calls per run. sjwiggers.com/2026/07/01/microsoft-foundry-citadel-platform-azure-tool-calling-agent/ #azure #apim #citadel #aiagents
Microsoft Foundry Citadel Platform Azure: Connecting a Tool-Calling Agent - Cloud Perspectives
Connect a tool-calling agent to Microsoft Foundry Citadel Platform on Azure via APIM — real working code, SDK pitfalls from live debugging, and governance validation in Application Insights.
sjwiggers.com
AWS launched Lambda MicroVMs. Each session gets its own Firecracker VM with suspend/resume up to 8 hours. Not a Lambda Functions update a new compute primitive for untrusted code execution. infoq.com/news/2026/06/aws-lambda-microvms/ #aws #serverless #cloud
AWS Launches Lambda MicroVMs for Isolated Agent and User Code Execution
AWS launched Lambda MicroVMs, a new serverless compute primitive that runs each user session or AI agent in its own Firecracker virtual machine with hardware-level isolation, snapshot-based rapid laun...
infoq.com
That's a wrap on the Logic Apps agent loop series 🎉 Post 7: Application Insights, pricing, known limits, and ci/cd deployment for agentic workflows in production. sjwiggers.com/2026/06/29/logic-apps-agent-loop-production/ #azurelogicapps #agenticai #azure #enterpriseintegration
Azure Logic Apps Agent Loop Production Operations - Cloud Perspectives
Azure Logic Apps agent loop production requires Application Insights monitoring, the right pricing model, and a CI/CD pipeline. This post covers all three with KQL queries and deploy scripts.
sjwiggers.com
Agentic workflows need a different security model. Post 6: Easy Auth, Managed Identity, KeyVault. sjwiggers.com/2026/06/26/logic-apps-agent-loop-security/ #azurelogicapps #agenticai #azure
Azure Logic Apps Agentic Workflow Security in Production - Cloud Perspectives
Securing an Azure Logic Apps agentic workflow in production requires Easy Auth, Managed Identity, and Key Vault. This post covers the expanded caller surface and the full security stack.
sjwiggers.com
Cloudflare shipped agent skills for Zero Trust deployment and migration from Zscaler/Palo Alto. Open source, any AI agent can load them. #cloudflare #zerotrust #security www.infoq.com/news/2026/06...
Cloudflare Ships Agent Skills for Zero Trust Deployment and Migration
Cloudflare released the Cloudflare One stack, an open-source library of agent skills for planning, deploying, and managing Zero Trust environments. The skills include automated migration logic for Zsc...
infoq.com