● Covered by 1 source · 1 reportMedium impact1 neutral
LocalStack Azure Emulator Enters Public Preview, Lacks Security Enforcement
Key points
- LocalStack Azure emulator is in public preview, free and self-serve.
- Supports AKS, Container Apps, Functions, Cosmos DB, and more.
- Many security settings (e.g., HTTPS, access restrictions) are not enforced.
- Networking features like VNet routing and security rules are not implemented.
LocalStack Azure Emulator Now in Public Preview
LocalStack has released its Azure emulator into public preview, making it available for free and self-serve use. The general availability of the emulator is projected for early 2027. This tool allows developers to run Azure services on their local machines, accepting existing ARM and Bicep templates, Terraform modules, Pulumi programs, and Azure CLI scripts without requiring modifications.
Purpose and Scope
The emulator is designed for testing applications locally, aiming to reduce reliance on development subscriptions and associated costs. It provides isolated sandboxes for each developer. The service list is extensive, including AKS, Container Apps, Functions, App Service, Cosmos DB, Service Bus, Event Hubs, Key Vault, App Configuration, Managed Identity, and API Management. LocalStack positions this tool for development and testing, not as a replacement for actual Azure environments.
Fidelity and Known Limitations
Paolo Salvatori, the project lead and former Microsoft principal, states that if a solution runs on Azure but fails on the emulator, it indicates a bug in the emulator. However, the documentation openly details gaps in emulation fidelity. For instance, App Service emulation stores configuration settings like keys, access restrictions, authentication, and publishing credential policies, but does not enforce them. Similarly, `httpsOnly` is not enforced, and the emulator serves HTTP traffic.
Networking and Security Enforcement Gaps
Significant limitations exist in networking and security. The Virtual Network page explicitly states that the emulator does not route network traffic or enforce security rules. Features such as peering, VPN gateways, ExpressRoute circuits, Load Balancer, Application Gateway, and Network Watcher are not implemented. Private DNS zones only accept A records. In Storage, data-plane requests with a bearer token succeed if a token is present, unless RBAC enforcement is specified.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
LocalStack launched its Azure emulator into public preview, offering a free, self-serve tool for local Azure development and testing. While it supports various Azure services and templates, the emulator currently stores but does not enforce many security and networking configurations, impacting its fidelity for certain testing scenarios.