{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/", "slug": "dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview", "url": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/" }, "title": "Separate delivery IDs from maintenance event IDs in the Scheduled Events preview", "summary": "Which identifier should suppress duplicate Event Grid delivery without losing a maintenance event's later state?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:30:37+00:00", "modified_at": "2026-09-10T00:35:08+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 246, "potentially_affected": "Teams evaluating preview Scheduled Events delivery through Azure Event Grid in a nonproduction environment.", "dse_recommendation": "Use the Event Grid delivery ID for duplicate detection and retain the Scheduled EventId for lifecycle correlation.", "primary_source": { "name": "Scheduled Events - Event Grid - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/scheduled-events-event-grid", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Scheduled Events delivery through Event Grid is a preview that Microsoft does not recommend for production workloads. Its wrapper ID differs from the scheduled event’s EventId, which stays constant as EventStatus changes. Rare duplicate deliveries carry the same wrapper ID and identical payload. Approving a scheduled event permits it to proceed for every VM listed in its Resources array. Microsoft Learn.

\n

Applicability

\n

Evaluate this design only in a preview-approved test environment with event delivery explicitly enabled. Identify the subscribing service, its duplicate-handling storage, and any separate authority to acknowledge maintenance. Keep message receipt distinct from a decision that the listed workloads are ready.

\n

DSE recommendation

\n

Use the Event Grid delivery ID for duplicate detection and retain the Scheduled EventId for lifecycle correlation. Design processing so a repeated delivery does not repeat a disruptive action, while a legitimate later state remains visible. Before implementing acknowledgement, require the controller to resolve and prepare every resource named in the event rather than only the first VM encountered.

\n

Verification

\n

Replay a captured nonsensitive test payload with the same delivery ID and confirm that it is handled as a duplicate. Then exercise later event states and confirm that the lifecycle record is updated rather than discarded. Inspect the entire Resources array in the approval path. Retain the tested identifiers and observed behavior, and do not equate a working preview consumer with approval to operate it in production.

\n

Official references

\n

Microsoft Learn: Scheduled Events in Event Grid. Source reviewed September 9, 2026.

", "content_text": "Source facts\nScheduled Events delivery through Event Grid is a preview that Microsoft does not recommend for production workloads. Its wrapper ID differs from the scheduled event’s EventId, which stays constant as EventStatus changes. Rare duplicate deliveries carry the same wrapper ID and identical payload. Approving a scheduled event permits it to proceed for every VM listed in its Resources array. Microsoft Learn.\nApplicability\nEvaluate this design only in a preview-approved test environment with event delivery explicitly enabled. Identify the subscribing service, its duplicate-handling storage, and any separate authority to acknowledge maintenance. Keep message receipt distinct from a decision that the listed workloads are ready.\nDSE recommendation\nUse the Event Grid delivery ID for duplicate detection and retain the Scheduled EventId for lifecycle correlation. Design processing so a repeated delivery does not repeat a disruptive action, while a legitimate later state remains visible. Before implementing acknowledgement, require the controller to resolve and prepare every resource named in the event rather than only the first VM encountered.\nVerification\nReplay a captured nonsensitive test payload with the same delivery ID and confirm that it is handled as a duplicate. Then exercise later event states and confirm that the lifecycle record is updated rather than discarded. Inspect the entire Resources array in the approval path. Retain the tested identifiers and observed behavior, and do not equate a working preview consumer with approval to operate it in production.\nOfficial references\nMicrosoft Learn: Scheduled Events in Event Grid. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nScheduled Events delivery through Event Grid is a preview that Microsoft does not recommend for production workloads. Its wrapper ID differs from the scheduled event’s EventId, which stays constant as EventStatus changes. Rare duplicate deliveries carry the same wrapper ID and identical payload. Approving a scheduled event permits it to proceed for every VM listed in its Resources array. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/scheduled-events-event-grid).\n\n## Applicability\n\nEvaluate this design only in a preview-approved test environment with event delivery explicitly enabled. Identify the subscribing service, its duplicate-handling storage, and any separate authority to acknowledge maintenance. Keep message receipt distinct from a decision that the listed workloads are ready.\n\n## DSE recommendation\n\nUse the Event Grid delivery ID for duplicate detection and retain the Scheduled EventId for lifecycle correlation. Design processing so a repeated delivery does not repeat a disruptive action, while a legitimate later state remains visible. Before implementing acknowledgement, require the controller to resolve and prepare every resource named in the event rather than only the first VM encountered.\n\n## Verification\n\nReplay a captured nonsensitive test payload with the same delivery ID and confirm that it is handled as a duplicate. Then exercise later event states and confirm that the lifecycle record is updated rather than discarded. Inspect the entire Resources array in the approval path. Retain the tested identifiers and observed behavior, and do not equate a working preview consumer with approval to operate it in production.\n\n## Official references\n\n[Microsoft Learn: Scheduled Events in Event Grid](https://learn.microsoft.com/en-us/azure/virtual-machines/scheduled-events-event-grid). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/", "url": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Separate delivery IDs from maintenance event IDs in the Scheduled Events preview", "item": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/", "url": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/", "headline": "Separate delivery IDs from maintenance event IDs in the Scheduled Events preview", "description": "Which identifier should suppress duplicate Event Grid delivery without losing a maintenance event's later state?", "abstract": "Which identifier should suppress duplicate Event Grid delivery without losing a maintenance event's later state?", "articleBody": "Source facts\nScheduled Events delivery through Event Grid is a preview that Microsoft does not recommend for production workloads. Its wrapper ID differs from the scheduled event’s EventId, which stays constant as EventStatus changes. Rare duplicate deliveries carry the same wrapper ID and identical payload. Approving a scheduled event permits it to proceed for every VM listed in its Resources array. Microsoft Learn.\nApplicability\nEvaluate this design only in a preview-approved test environment with event delivery explicitly enabled. Identify the subscribing service, its duplicate-handling storage, and any separate authority to acknowledge maintenance. Keep message receipt distinct from a decision that the listed workloads are ready.\nDSE recommendation\nUse the Event Grid delivery ID for duplicate detection and retain the Scheduled EventId for lifecycle correlation. Design processing so a repeated delivery does not repeat a disruptive action, while a legitimate later state remains visible. Before implementing acknowledgement, require the controller to resolve and prepare every resource named in the event rather than only the first VM encountered.\nVerification\nReplay a captured nonsensitive test payload with the same delivery ID and confirm that it is handled as a duplicate. Then exercise later event states and confirm that the lifecycle record is updated rather than discarded. Inspect the entire Resources array in the approval path. Retain the tested identifiers and observed behavior, and do not equate a working preview consumer with approval to operate it in production.\nOfficial references\nMicrosoft Learn: Scheduled Events in Event Grid. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:30:37+00:00", "dateModified": "2026-09-10T00:35:08+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-079-separate-delivery-ids-from-maintenance-event-ids-in-the-scheduled-events-preview/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Separate delivery IDs from maintenance event IDs in the Scheduled Events preview" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 246, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Scheduled Events - Event Grid - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/scheduled-events-event-grid" } } ] } }