Securing AI Foundry Agent Part 1 (Network Perspective)

Securing AI Foundry Agent ( Network Perspective) This video is part of the Art of the Possible Series focused on Azure AI Foundry Private networking and security. This video covers AI Foundry Agent networking and security. Reusable Architectures https://github.com/nehalineogi/azure-networking Previous Videos in this series: Part 3: Part 3 : AI Foundry Networking and Security: Deep Dive (Updated) https://youtu.be/bL9n83uPV84 Part 2: AI Foundry Networking and Security: Deep Dive- configuration, demos and troubleshooting https://youtu.be/3Ed8lLUnN8Y Part 1: AI Foundry Networking and Security: Overview and OYD Feature release https://youtu.be/fNlExLtjH7g Chapters: 00:00:00 Welcome to the Art of the Possible Series 00:01:11 Introductions 00:02:50 Product Direction from Meera (PG) 00:04:48 Basic Agent with Public Networking 01:04:11 Standard Agent with private Networking 01:32:44 Standard Agent with private Networking (Custom domain) 01:42:00 Standard Agent with private Networking (continued...) 02:33:22 Standard Agent (Outbound via AzFW/NVA) 02:38:50 Standard Agent (BYO VNET) 02:54:22 Closing thoughts and thank you! Moments: 01:05:27 BYO Resources for Standard Agent 01:16:45 Agent Network Requirements - Class B and C Networks 01:43:26 VNET Injection and Delegated Subnet 02:22:47 Packet flow from agent subnet to Mock API 02:26:33 Demo Private Networking Presenters: https://www.linkedin.com/in/nehalineogi/ https://www.linkedin.com/in/gabrieldlucacosta/ https://www.linkedin.com/in/warnovav/ Useful links: Architecture diagram: https://learn.microsoft.com/en-us/azure/ai-foundry/agents/how-to/virtual-networks#architecture-diagram Class B and C support: https://github.com/azure-ai-foundry/foundry-samples/tree/main/samples/microsoft/infrastructure-setup/15-private-network-standard-agent-setup#azure-ai-agent-service-standard-agent-setup-with-e2e-network-isolation BYO Resources for Agent Service: https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/standard-agent-setup#leveraging-your-own-resources-for-storing-customer-data Firewall (outbound) https://learn.microsoft.com/en-us/azure/container-apps/use-azure-firewall DNS in Azure (deep dive) https://youtu.be/2kQL-vCyj3A OpenAPI 3.0 Specifications: https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/tool-catalog Azure Container Apps Deep Dive: https://youtu.be/StXw3bwa0Hk Standard Agent deployment script: https://github.com/azure-ai-foundry/foundry-samples/tree/main/samples/microsoft/infrastructure-setup/15-private-network-standard-agent-setup Walter's repo: https://github.com/warnov/agentic-webgen Other links: https://learn.microsoft.com/en-us/azure/ai-foundry/what-is-azure-ai-foundry https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/standard-agent-setup https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/standard-agent-setup#capability-hosts https://learn.microsoft.com/en-us/azure/ai-foundry/agents/how-to/use-your-own-resources#standard-agent-setup-use-existing-service-resources-and-storage-accounts