Azure is not more secure than you Live ID email and password.

Using Azure for serious confidential data requires a lot of dicipline, and it's hard to prove that you enforces this. Eg. you can configure Live ID to require change of password.

I would love to restrict access to the Portal by IP adress, or require a challenge like a RSA SecurID.

I know that data is replicated but that doesn't protect against logical errors, accidental removal by admin or hacker screwing up the data.

So I really would like to see this done natively from Azure instead of building my own backup systems like these:
http://blogs.msdn.com/b/windowsazurestorage/archive/2010/04/30/protecting-your-blobs-against-application-errors.aspx

http://blogs.msdn.com/b/windowsazurestorage/archive/2010/05/03/protecting-your-tables-against-application-errors.aspx

I would like my Windows Live ID to be responsible for the billing (credit card), while my Azure services could be shared with my co-workers Windows Live IDs for different roles. I see at least one role that is absolutely needed - the "IT Role" responsible for uploading the CSPKG and updating the CSCFG files. Sharing my Windows Live ID which might be associated with my MVP, MSDN and Microsoft Partner information is not secure and should not be expected of us. There's a whole thread with more info on this here: http://social.msdn.microsoft.com/Forums/en-US/windowsazure/thread/ab12e13d-8a33-4c0b-a4b3-e4d3f0e795c7

As we are trying to get some security certification to our Azure product we stumbled upon this interesting security issue that is lacking in Azure management web site:

"Audit logs that record user activities, exceptions, and information security events should be produced, and kept for an agreed-upon time period, to assist in future investigations and access control monitoring.

Authorities: ISO-27002:2005 10.10.1.; HIPAA 164.312(b)"

As of now, i belive when we create co administrator's they can access all Azure components i.e SQL Azure, Azure strorage, Azure hosted services, etc. it would be great if we could restrict the co administrator's to access only a specific Azure service component, In other words it would be great if could have a co administrator that could access only SQL Azure. Thanks!

Show bandwidth usage reports and graphs for container's past and current month. This should be updated as frequently as possible (daily or hourly) to be able to review container activity.

A company we are working with is very interested in using CDN as a solution in one of their projects. They would like to have built-in usage metrics (like Google Analytics) for CDN. It was important to them, and sounds like a good idea to me.

Currently the Management portal Authenticate the user with Live ID. But most of the organization required the used must be logged in for doing any operation with their subscription using enterprise Active Directory user credentials instead Live Id.
Providing Live Id authentication provides a security loop where the employees can login from any place using the Live Id. The portal must also have the capability to log the activities carried out by an user for audit purpose.

I would like to be able to restrict the number of deployments & instances that can be created by co/sub administrators. For example, I may want to delegate responsibility for staging/production deployments but want to control my costs. It's way too easy to spend money like drunken sailors on Azure.

This is the ability to scale up and down services rapidly for on-demand computing. E.g. be able to add 20/100/500 instances to a service in 5 minutes.

I am admin on more than 3 subscriptions. When i loged in i see all the services from all subscriptions. The problem comes when i need to update , create , delete something. I look carefully every time to see if the component that i works is on right subscription.

I like to see as the feature the ability to "filter" the subscriptions in the portal. To choose the subscription that i have to work and all the content on the management portal to be around of this subscription.

Currently when logging in with manage.windowsazure.com portal with a live id which has no active subscription associated, we get a message "We were unable to find any 'Active' subscriptions associated with your account.".

https://manage.windowsazure.com/Error/NoSubscriptions

We dont find any link for re-directing to login page to try with different live id. So, please provide a link which will re-direct to login page again.

This feature is very useful at evaludate phase of Windows Azure Media Services encoding duration time by chaging encoding setting. and also easy to estimate the cost by getting input/output file size