Search Azure terms

Developer Tools premium EF Core migration An EF Core migration records database schema changes from an Entity Framework Core model so teams can generate, review, and apply controlled schema updates. .NET data access intermediate 4 commands Aliases: Entity Framework Core migration, EF migration Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Security premium Managed identity for data access Managed identity for data access is the pattern of using a managed identity to let a workload read or write data without embedded secrets. Teams use it when pipelines, applications, jobs, or analytics services need secure access to storage, databases, or other data services. In plain English, it gives operators a named control for least-privilege data access, reduced secret exposure, and cleaner audit trails instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data access security intermediate 3 commands Aliases: Managed identity for data access, Microsoft Entra ID, Data access security Quick peek Open full term page

Security field-manual-complete Least privilege data access Microsoft Learn describes least privilege as granting users and applications only the data and operations required to do their jobs. In Azure data access, that means scoped roles, managed identities, limited secrets, network controls, and reviewable permissions instead of broad owner-style access. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking verified Public network access Whether a resource can be reached over public endpoints. Networking advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Databricks access connector A first-party Azure resource that gives Azure Databricks a managed identity for Unity Catalog storage credentials and other governed service access. Azure Databricks intermediate 6 commands Aliases: Access Connector for Azure Databricks, Azure Databricks access connector, Databricks managed identity connector Quick peek Open full term page

Storage complete Storage account public network access Public network access is the storage account setting that controls whether requests can reach the account through public Azure Storage endpoints. Teams pair it with firewalls, virtual network rules, trusted-services exceptions, and private endpoints to decide whether only private network paths should be allowed. Storage accounts advanced 5 commands Aliases: public access for storage account, storage public network access, storage public endpoint access, publicNetworkAccess Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake analytics workload A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric. Data Lake Storage Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Databricks managed resource group The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources. Azure Databricks intermediate 6 commands Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group Quick peek Open full term page

Storage premium Azure NetApp Files Azure NetApp Files provides managed enterprise SMB and NFS volumes in Azure for performance-sensitive file workloads. Backup and recovery intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Data flow debug cluster The live Spark cluster started for a mapping data flow debug session so designers can preview data and run transformation logic interactively. Data Factory Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake directory A directory in Azure Data Lake Storage Gen2 is a hierarchical namespace path segment that can contain files and child directories and can have access controls applied. Data Lake Storage Gen2 fundamentals 5 commands Aliases: ADLS directory, Data Lake folder, Gen2 directory, lake folder Quick peek Open full term page

Storage premium Data Lake filesystem Data Lake filesystem is the compact API and CLI naming for the ADLS Gen2 file-system resource that contains directories and files. Data Lake Storage Gen2 fundamentals 5 commands Aliases: filesystem, ADLS filesystem, storage fs, Azure storage fs Quick peek Open full term page

Storage premium Data Lake Gen2 endpoint A Data Lake Gen2 endpoint is the DFS endpoint on a storage account used by Azure Data Lake Storage Gen2 APIs, ABFS URIs, and hierarchical namespace operations. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS Gen2 endpoint, DFS endpoint, dfs.core.windows.net endpoint, Data Lake endpoint Quick peek Open full term page

Storage premium Data Lake gold layer The Data Lake gold layer is the business-ready medallion layer where curated, aggregated, and governed data is published for analytics, reporting, and decision support. Medallion lakehouse architecture intermediate 5 commands Aliases: gold layer, gold zone, curated business layer, trusted reporting layer Quick peek Open full term page

Storage premium Data Lake ingestion zone A Data Lake ingestion zone is the controlled landing area where source data first arrives before validation, transformation, enrichment, or publication. Data Lake Storage Gen2 fundamentals 5 commands Aliases: landing zone, raw ingestion zone, lake landing area, ingest zone Quick peek Open full term page

Storage premium Data Lake namespace A Data Lake namespace is the hierarchical address space in Azure Data Lake Storage Gen2 that organizes file systems, directories, files, and paths for analytics. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS namespace, hierarchical namespace, HNS namespace, lake namespace Quick peek Open full term page

Storage premium Data Lake partition folder A Data Lake partition folder is a directory pattern, often key=value, that groups files by values such as date, region, tenant, or business domain for efficient reads. Data Lake Storage Gen2 intermediate 5 commands Aliases: partition folder, Hive-style partition folder, date partition folder, lake partition path Quick peek Open full term page

Storage premium Data Lake path ACL A Data Lake path ACL is the access control list applied to a file or directory path in Azure Data Lake Storage Gen2 for fine-grained permissions. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS path ACL, Data Lake path access control, path access control list, data-lake-path-ac Quick peek Open full term page

Analytics premium Databricks workspace VNet injection Databricks workspace VNet injection is the deployment model that places Azure Databricks compute resources into customer-managed virtual network subnets so network security, routing, and private connectivity controls can be applied. Databricks advanced 5 commands Aliases: VNet-injected Databricks workspace, customer-managed VNet workspace, Databricks VNet injection, workspace in customer VNet Quick peek Open full term page

Security premium Key Vault access policy Key Vault access policy controls which identities can read, write, list, delete, recover, sign, unwrap, or manage Key Vault objects when the vault uses policy-based access. Teams see it in key vault access policies blade, secret permissions. It is not Azure RBAC for Key Vault, a network firewall rule, a secret value, a certificate policy, or an application setting; confusing them can create overprivileged identities, broken secret retrieval. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Secrets and keys Intermediate 5 commands Aliases: access policy, vault access policy, Key Vault policy permissions, data-plane access policy Quick peek Open full term page

Storage premium Trusted Microsoft services access Trusted Microsoft services access is an Azure Storage firewall exception that allows selected Azure services to reach a restricted storage account when their service traffic cannot be represented by virtual network or IP rules. The services still authenticate and must be allowed for supported operations. Azure Storage intermediate 5 commands Aliases: trusted Azure services access, AzureServices bypass, allow trusted Microsoft services, storage trusted services access Quick peek Open full term page

AI and Machine Learning premium Azure AI Search data source Azure AI Search data source is the connection definition an Azure AI Search indexer uses to read content from a supported external data store. AI platform and search intermediate 4 commands Aliases: Search data source, SearchIndexerDataSourceConnection, data source connection, indexer data source, search data source connection Quick peek Open full term page

Storage premium Azure Data Box An Azure service that transfers large amounts of data to or from Azure by shipping secure, managed storage devices for offline migration. Data transfer intermediate 4 commands Aliases: Data Box Quick peek Open full term page

Management and Governance premium Azure data plane The Azure data plane is the part of Azure you use after a resource exists, when you interact with the capability that resource provides. Microsoft Learn anchors this term in Azure control plane and data plane, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, data-plane operations are service-specific operations against. Azure Resource Manager fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Data Factory private endpoint A Private Link connection that exposes Data Factory or related data movement targets through a private IP address instead of a public network path. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory private endpoint, ADF private endpoint, data factory private endpoint Quick peek Open full term page

Databases premium MySQL database MySQL database means a named database inside an Azure Database for MySQL server that stores application tables, users, routines, and data objects. You see it when developers create application data boundaries, run migrations, grant access, restore data, or separate tenant and service data. Think of it as the application data boundary inside the managed MySQL server. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium MySQL private access MySQL private access means a MySQL Flexible Server networking model that keeps database connectivity inside a virtual network instead of exposing a public endpoint. You see it when teams host sensitive workloads, enforce network isolation, connect applications through private subnets, or meet compliance expectations. Think of it as private network reachability for the database, not permission to read the data. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium MySQL public access MySQL public access means a MySQL Flexible Server networking model that allows connectivity through a public endpoint controlled by firewall rules. You see it when teams support vendor connections, migration tools, development access, or temporary operations when private connectivity is not available. Think of it as public reachability with strict rules, not open database access. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Blob public access level Blob public access level is the container setting that controls whether anonymous clients can read no data, blobs only, or both container listings and blobs. Blob Storage fundamentals 3 commands Aliases: Blob public access level, public access level, blob public access level Quick peek Open full term page

Analytics learning-path-anchor Databricks metastore The top-level Unity Catalog container for catalogs, schemas, tables, volumes, models, functions, and governance permissions. Databricks intermediate 4 commands Aliases: Unity Catalog metastore, Databricks Unity Catalog metastore, metastore Quick peek Open full term page

Analytics learning-path-anchor Databricks schema A Unity Catalog namespace under a catalog that groups tables, views, volumes, models, functions, and permissions. Databricks fundamentals 4 commands Aliases: Unity Catalog schema, Databricks database schema, schema in Unity Catalog Quick peek Open full term page

Analytics learning-path-anchor Databricks secret scope A named Databricks collection of secrets used to store credentials and grant controlled read or manage access to workloads. Databricks fundamentals 4 commands Aliases: Databricks secrets scope, secret scope, Azure Databricks secrets Quick peek Open full term page

Analytics learning-path-anchor Databricks table A governed Databricks data object, commonly managed, external, or foreign, queried through Unity Catalog and optimized for analytics. Databricks fundamentals 4 commands Aliases: Unity Catalog table, Delta table in Databricks, Databricks managed table Quick peek Open full term page

Storage complete Storage account access key A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Storage accounts advanced 10 commands Aliases: storage access key, account key, shared key, storage key Quick peek Open full term page

Storage field-manual-complete Data Lake Storage Gen2 Data Lake Storage Gen2 is Azure Blob Storage with a hierarchical namespace enabled for analytics workloads. Microsoft Learn describes it as combining file-system style directories, ACLs, and large-scale throughput with Blob Storage durability, security, lifecycle, tiering, and ecosystem compatibility for big data scenarios. Analytics storage fundamentals 8 commands Aliases: ADLS Gen2 Quick peek Open full term page

Databases field-manual-complete PostgreSQL private access PostgreSQL private access means the flexible server is reached through private networking instead of an internet-facing endpoint. The server sits in a delegated subnet in a virtual network, and clients resolve its name through Private DNS. Apps in the same virtual network, peered networks, VPN, or ExpressRoute can connect if routing and security rules allow it. For a learner, the key idea is simple: choose private access when the database should behave like an internal service, not a public database with firewall openings. PostgreSQL flexible server intermediate 5 commands Aliases: PostgreSQL private networking, PostgreSQL VNet integration, Private access for PostgreSQL flexible server, PostgreSQL delegated subnet access Quick peek Open full term page

Databases field-manual-complete PostgreSQL public access PostgreSQL public access means the flexible server has a public DNS name that can be reached over the internet, but only IP ranges you allow get a chance to connect. It is not anonymous access; users still need valid PostgreSQL credentials and encrypted connections. This option is useful when clients cannot use a virtual network, VPN, or ExpressRoute path. The important lesson is that public access is a controlled doorway, not a private network. The doorway needs tight firewall rules, ownership, and regular review. PostgreSQL flexible server fundamentals 5 commands Aliases: PostgreSQL public endpoint, PostgreSQL allowed IP addresses, PostgreSQL firewall access, Public access for PostgreSQL flexible server Quick peek Open full term page

Security field-manual-complete Private Link for data services Private Link for data services means your applications connect to databases, storage, and analytics services through private endpoints instead of public endpoints. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Storage data protection Storage data protection is the set of Azure Storage controls that help recover, retain, and prove integrity for blob data. It includes patterns such as soft delete, container restore, versioning, change feed, point-in-time restore, immutable storage, and operational backup when those features match the workload. Storage accounts intermediate 5 commands Aliases: storage protection, blob data protection, Azure Storage recovery controls, storage recoverability Quick peek Open full term page

Storage field-manual-complete Storage firewall network rule An allow rule that permits selected network sources to reach an Azure Storage account public endpoint. Storage networking intermediate 5 commands Aliases: storage firewall rule, storage account firewall network rule, Azure Storage network ACL rule, storage account network allow rule, Azure Storage firewall network rule, storage account network ACL rule, storage account firewall subnet rule Quick peek Open full term page

Storage field-manual-complete Storage network rules The selected-network rules that control which sources can reach an Azure Storage account public endpoint. Storage networking Intermediate 5 commands Aliases: storage account network rules, storage firewall rules, storage network ACLs, selected network access, storage account firewall allowlist Quick peek Open full term page

Databases field-manual-complete Transparent data encryption Transparent data encryption helps protect Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics by encrypting data, backups, and transaction logs at rest. Encryption and decryption happen in real time without requiring application changes, with service-managed or customer-managed key options. Azure SQL intermediate 5 commands Aliases: TDE, SQL transparent data encryption, Azure SQL TDE, database encryption at rest, TDE protector Quick peek Open full term page

Databases complete SQL database export Microsoft Learn describes SQL database export as creating a BACPAC file that contains database schema and data and storing it in Azure Storage or local tooling output. Export can be started from the portal, PowerShell, Azure CLI, SqlPackage, SSMS, or supported developer tools. Azure SQL fundamentals 5 commands Aliases: database export, Azure SQL BACPAC export, SQL export, export database to BACPAC Quick peek Open full term page

Databases complete SQL database firewall rule Microsoft Learn describes Azure SQL firewall rules as IP allow rules that must permit traffic before clients can reach a logical server or database. Server-level rules can be managed through Azure tools, while database-level rules are scoped to individual databases and managed with Transact-SQL. Data platform intermediate 5 commands Aliases: Azure SQL firewall rule, SQL server firewall rule, database-level firewall rule, SQL IP firewall rule Quick peek Open full term page

Databases complete SQL transparent data encryption Microsoft Learn describes transparent data encryption for Azure SQL as encryption at rest for databases, backups, and transaction logs. It is enabled by default for Azure SQL Database, uses a service-managed protector unless customer-managed keys are configured, and stays transparent to applications. Azure SQL security intermediate 5 commands Aliases: SQL TDE, Azure SQL TDE, transparent data encryption, TDE for Azure SQL Quick peek Open full term page

Monitoring and Observability verified Data collection endpoint An Azure Monitor resource that provides regional endpoints used by agents and data collection rules for configuration access and telemetry ingestion. Azure Monitor data collection Intermediate 4 commands Aliases: DCE, Azure Monitor DCE, monitor data collection endpoint Quick peek Open full term page

Analytics premium Databricks job A scheduled or triggered Databricks workflow that runs one or more tasks using configured compute, parameters, retries, notifications, and access controls. Azure Databricks fundamentals 7 commands Aliases: Databricks workflow job, Lakeflow Job, Databricks Jobs Quick peek Open full term page

Storage premium Data Lake curated zone The governed, consumer-ready area of a data lake where cleaned, conformed, and documented datasets are served for reporting, analytics, AI, or downstream applications. Data Lake Storage Gen2 Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page