Container Insights supports monitoring pod sandboxed containers. Pod Sandboxing safeguards against “Container Breakout” scenarios such as a malicious or legitimate user escaping container isolation to access host machine resources.
You can now set policies beyond the Azure Resource Manager level and drive in-depth compliance across pods, namespaces, ingress, and other Kubernetes resources.
A new Azure Monitor built-in policy gives you control to provision central Log Analytics workspaces and linked automation account across your subscriptions consistently.
Migrate any Azure Automation Service Management REST APIs and PowerShell cmdlets for Azure Automation to Resource Manager REST APIs or the latest PowerShell cmdlets by January 30, 2020.