Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,608 matching terms. Narrow the search to reduce the list.
Web
field-manual-complete
App Service TLS binding
An App Service TLS binding tells App Service which certificate to use for a custom domain. Without it, your app might be reachable by name but still show browser warnings, serve the wrong certificate, or fail HTTPS checks. The binding connects a hostname, a certificate thumbprint, and a binding type such as SNI. For users, it is the difference between a trusted secure site and a launch that looks broken or unsafe. Treat it as launch-blocking configuration.
App Service Security
intermediate
5 commands
Aliases: TLS binding, SSL binding, App Service certificate binding, custom domain HTTPS binding
Quick peek
Open full term page
App Hosting
field-manual-complete
App Service managed certificate
An App Service managed certificate is a free certificate that Azure App Service can issue for an eligible custom domain on a web app or function app.
App Service TLS
Intermediate
5 commands
Aliases: Azure App Service managed certificate, app service managed certificate
Quick peek
Open full term page
Web
premium
Custom domain
an organization-controlled DNS name bound to an Azure-hosted endpoint instead of the default service hostname.
Domains and TLS
fundamentals
4 commands
Aliases: custom hostname, custom DNS name, application custom domain
Quick peek
Open full term page
Web
premium
Managed certificate
A managed certificate in Azure App Service is a platform-created TLS certificate for a supported custom domain. Azure can issue and renew it for basic HTTPS protection, but it has limitations compared with uploaded, Key Vault, or purchased certificates. That context supports safer operational decisions.
TLS
fundamentals
4 commands
Aliases: App Service managed certificate, free managed certificate
Quick peek
Open full term page
Security
premium
Certificate
A certificate is an X.509 object used for TLS, authentication, or cryptographic operations.
Secrets and keys
fundamentals
2 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service
Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
4 commands
Aliases: App Service, app service
Quick peek
Open full term page
Web
field-manual-complete
App Service custom domain
An App Service custom domain lets people use your real website name instead of the default azurewebsites.net address. You prove that you own the DNS name, point DNS records at the web app, and add the hostname to App Service. The setting is simple on the surface, but production success depends on DNS propagation, ownership verification, TLS certificates, redirects, and whether traffic also passes through Front Door, Traffic Manager, or another edge service. Plan it like a release.
App Service
intermediate
5 commands
Aliases: app service custom domain, custom domain
Quick peek
Open full term page
Web
strict-validated
Basic App Service tier
The Basic App Service tier is a dedicated-compute App Service plan tier intended for lower-scale production, development, or test web apps that need dedicated workers.
App Service plan tiers
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
complete
Standard App Service tier
Microsoft Learn describes App Service plan tiers as the compute and feature boundary for apps hosted in Azure App Service. The Standard tier is a production-oriented tier that supports capabilities such as custom domains, TLS, autoscale, deployment slots, and larger dedicated capacity than entry-level tiers.
App Service plans
intermediate
5 commands
Aliases: standard-app-service-tier, Standard App Service tier, App Service Standard tier, Standard App Service plan, S1 App Service plan, S2 App Service plan
Quick peek
Open full term page
Web
premium
App Service private endpoint
An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access.
App Service Networking
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service auth token store
An App Service Authentication feature that stores provider tokens for signed-in users so application code can access them through the built-in authentication flow. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
5 commands
Aliases: app service auth token store, auth token store
Quick peek
Open full term page
Web
premium
App Service authentication provider
An identity provider configured in App Service Authentication, such as Microsoft Entra ID, that handles user sign-in for the app. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
5 commands
Aliases: app service authentication provider, authentication provider
Quick peek
Open full term page
Web
premium
App Service backup
An App Service feature for creating on-demand or scheduled backups of app content and supported configuration, with restore to an app or slot. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
5 commands
Aliases: app service backup, backup
Quick peek
Open full term page
Web
premium
App Service connection string
A named connection string stored in App Service configuration and exposed to application code for supported database or service connectivity. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
5 commands
Aliases: app service connection string, connection string
Quick peek
Open full term page
Web
premium
App Service diagnostics
Built-in App Service troubleshooting tools and detectors that help diagnose availability, performance, configuration, networking, and runtime problems. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
5 commands
Aliases: app service diagnostics, diagnostics
Quick peek
Open full term page
Web
premium
App Service Environment
Microsoft Learn describes App Service Environment as a single-tenant App Service deployment that runs in a customer virtual network. It hosts App Service plans and apps with stronger network isolation, dedicated compute boundaries, and high-scale hosting compared with the public multitenant App Service model.
App Service isolation
intermediate
5 commands
Aliases: ASE, Azure App Service Environment, app service environment
Quick peek
Open full term page
Web
premium
App Service Environment v3
App Service Environment v3 is the current App Service Environment generation for single-tenant, dedicated App Service hosting with simplified networking and high-scale isolated workloads.
App Service isolation
intermediate
5 commands
Aliases: Azure App Service Environment v3, app service environment v3
Quick peek
Open full term page
Web
premium
App Service Hybrid Connections
App Service Hybrid Connections let an App Service app make outbound TCP connections to a specific host and port in another network through Azure Relay.
App Service networking
intermediate
5 commands
Aliases: Azure App Service Hybrid Connections, app service hybrid connections
Quick peek
Open full term page
Web
premium
App Service Linux worker
An App Service Linux worker is the Linux-based App Service compute instance that runs an app using a built-in Linux runtime stack or custom container.
App Service runtime
intermediate
5 commands
Aliases: Azure App Service Linux worker, app service linux worker
Quick peek
Open full term page
Web
premium
App Service logs
Microsoft Learn explains App Service diagnostic logging as settings that collect application logs, web server logs, detailed errors, failed request traces, container logs, and platform resource logs for App Service apps. These logs can be streamed, stored temporarily, written to storage, or routed through Azure Monitor.
App Service diagnostics
intermediate
5 commands
Aliases: Azure App Service logs, app service logs
Quick peek
Open full term page
Web
premium
App Service Plan
Microsoft Learn describes an App Service plan as the set of compute resources where App Service apps run. The plan defines region, operating system, pricing tier, instance size, scale capacity, and feature availability for one or more hosted apps within the same compute boundary.
App Service hosting plans
intermediate
5 commands
Aliases: Azure App Service plan, serverfarm, App Service hosting plan
Quick peek
Open full term page
Web
premium
App Service restore
App Service restore is recovering App Service content and supported configuration from an app backup, usually by overwriting an app or restoring into another app or deployment slot. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service scale rule
App Service scale rule is an autoscale rule or automatic scaling configuration that changes App Service capacity when metric thresholds, schedules, or platform load signals require more or fewer instances. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Scaling
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service VNet integration
Microsoft Learn describes App Service virtual network integration as the feature that lets an App Service app access resources in or through an Azure virtual network. It affects outbound traffic from the app; inbound private access uses other controls, such as private endpoints and access restrictions.
App Service Networking
intermediate
5 commands
Aliases: App Service virtual network integration, regional VNet integration, Web App VNet integration
Quick peek
Open full term page
Web
premium
App Service Windows worker
App Service Windows worker is a Windows-based worker instance in an App Service plan that runs Windows App Service apps and shares compute with other apps placed in the same plan. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Platform
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
Isolated App Service tier
Isolated App Service tier is the App Service pricing tier used for apps running in an App Service Environment with dedicated, isolated workers and advanced networking options.
App Service Environment
advanced
5 commands
Aliases: App Service Isolated tier, IsolatedV2 tier, Iv2 App Service plan, ASE App Service plan, I1v2, I2v2, I3v2
Quick peek
Open full term page
Web
premium
Shared App Service tier
The Shared App Service tier is a base App Service plan option where apps run on shared Azure virtual machines and receive CPU-minute quotas. It is intended for development and testing, not production workloads that need dedicated compute, autoscale, or predictable performance isolation.
App Service plans
intermediate
5 commands
Aliases: App Service Shared tier, Shared App Service plan, D1 App Service plan, shared compute App Service, App Service D1
Quick peek
Open full term page
Web
premium
App Service plan scale out
App Service plan scale out increases the number of worker instances running apps in an App Service plan, either manually or through scaling rules where supported.
App Service scaling
intermediate
4 commands
Aliases: Azure App Service plan scale out, app service plan scale out
Quick peek
Open full term page
Web
premium
App Service plan scale up
App Service plan scale up is changing an App Service plan to a larger, smaller, or more capable pricing tier so the hosted apps receive different CPU, memory, feature support, and platform limits. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service SKU
App Service SKU is the pricing tier and size selected for an App Service plan, which determines available compute resources, feature support, scale limits, and billing behavior. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Plans
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service worker count
App Service worker count is the number of worker instances allocated to an App Service plan, which determines how many copies of hosted apps run across the plan capacity. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Scaling
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
field-manual-complete
App Service access restriction
App Service access restriction is the rule list that decides which inbound clients are allowed to reach a web app before the request reaches your code.
App Service networking
intermediate
5 commands
Aliases: access restriction, app service access restriction
Quick peek
Open full term page
Web
field-manual-complete
App Service app setting
An App Service app setting is a key-value configuration entry attached to a web app.
App Service configuration
intermediate
5 commands
Aliases: app service app setting, app setting
Quick peek
Open full term page
Web
field-manual-complete
App Service log stream
App Service log stream is the live tail for an App Service app.
App Service diagnostics
intermediate
5 commands
Aliases: Azure App Service log stream, app service log stream
Quick peek
Open full term page
Web
field-manual-complete
Premium v3 App Service tier
Premium v3 is a higher App Service plan tier for apps that need more dedicated compute, memory, or scale than lower tiers provide.
App Service plans
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
field-manual-complete
Premium v4 App Service tier
Premium v4 is the App Service tier you choose when a production web app, API, or container needs stronger dedicated workers than older premium tiers provide. It is still App Service, so Azure manages the platform, patching, load balancing, deployment slots, and scale controls. The difference is the worker profile: faster processors, NVMe-backed local storage, and memory-optimized options. Use it when measured CPU, memory, startup, or local I/O pressure justifies a larger plan, not as a blind fix for every slow request.
App Service plans
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
strict-validated
App Service health check path
An App Service health check path is the URL path App Service probes to determine whether each app instance is healthy enough to receive traffic.
App Service operations
intermediate
5 commands
Aliases: Azure App Service health check path, app service health check path
Quick peek
Open full term page
Web
strict-validated
Free App Service tier
The Free App Service tier is an App Service plan SKU for experimentation on shared infrastructure with limited features and no dedicated compute charge.
App Service plan tiers
fundamentals
5 commands
Aliases: App Service Free tier, F1 App Service tier, Free F1 plan
Quick peek
Open full term page
Storage
learning-path-anchor
Table service endpoint
A Table service endpoint is the address your application uses when it talks to Azure Table Storage. For a normal Azure Storage account, it looks like an account-specific table URL. That address is not just a string in a connection setting; it determines DNS resolution, firewall evaluation, private endpoint routing, TLS, SDK configuration, and what operators test during an outage. If the endpoint is wrong, the table might exist and credentials might be valid, but clients still fail to connect.
Table Storage
intermediate
5 commands
Aliases: Azure Table endpoint, Table Storage endpoint, storage table endpoint, Table data-plane endpoint
Quick peek
Open full term page
Networking
premium
Application Gateway
Application Gateway is an Azure web traffic load balancer for HTTP and HTTPS applications. It routes requests by host name, path, listener, rule, backend pool, and health status, and can add TLS termination and Web Application Firewall controls when those features are configured.
Application delivery
fundamentals
4 commands
Aliases: Azure Application Gateway, App Gateway, regional layer 7 load balancer, HTTP application load balancer
Quick peek
Open full term page
Containers
strict-validated
AKS service mesh
AKS service mesh is a service-to-service traffic layer for AKS workloads, commonly delivered through the Istio-based add-on for traffic management, mTLS, and telemetry.
AKS networking
Advanced
5 commands
Aliases: Azure Kubernetes Service service mesh, aks service mesh
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI Service
Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls.
Generative AI
fundamentals
11 commands
Aliases: Azure OpenAI
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
AI and Machine Learning
premium
Face service
Face service is an Azure AI service that provides APIs for face detection, face analysis, verification, identification, grouping, and liveness-related workflows under approved access controls. Teams use it to build applications that detect faces in images, compare face evidence, verify approved identity scenarios, support liveness checks, or manage face lists within privacy and responsible AI controls. It is not a general image classification service, legal approval to process biometric data, a replacement for human identity review, or a guarantee that every face decision is correct.
Azure AI services
intermediate
6 commands
Aliases: Azure AI Face, Azure AI Face service, Azure Face service, Face API, Azure AI services Face
Quick peek
Open full term page
Storage
premium
File service endpoint
A File service endpoint is the Azure Storage endpoint used by clients and services to access Azure Files shares in a storage account through supported protocols and network paths. Teams use it to connect applications, users, file sync agents, and automation to Azure file shares through the correct public endpoint, private endpoint, or virtual network service endpoint path. It is not a file share itself, a private endpoint by itself, a DNS record alone, authorization proof, or a guarantee that SMB, NFS, FileREST, firewall, and identity settings all match.
Azure Files
intermediate
6 commands
Aliases: Azure Files endpoint, storage file endpoint, file endpoint, Azure Storage file service endpoint
Quick peek
Open full term page
Integration
premium
Service Bus
Azure Service Bus is a fully managed enterprise message broker with message queues and publish-subscribe topics. It helps decouple applications and services, load-balance work across competing consumers, route data across boundaries, and coordinate transactional workflows that require reliable messaging, ordering, sessions, duplicate detection, and dead-letter handling.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus, Service Bus Messaging
Quick peek
Open full term page
Integration
premium
Service Bus authorization rule
Service Bus authorization rule is a shared access policy on a namespace, queue, or topic. It names a key pair and grants Listen, Send, or Manage rights, letting applications create SAS tokens or connection strings scoped to the messaging entity they are allowed to use.
Service Bus
fundamentals
6 commands
Aliases: Service Bus SAS policy, Service Bus shared access policy, Service Bus authorization policy, SAS authorization rule
Quick peek
Open full term page
Integration
premium
Service Bus topic
Service Bus topic is a publish-subscribe entity inside a Service Bus namespace. Publishers send one message to the topic, and matching subscriptions receive their own copies. Topics are used when several downstream systems need the same business event without coupling the publisher to every receiver.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus topic, Service Bus pub-sub topic, topic entity, broker topic
Quick peek
Open full term page
Web
premium
Service Bus trigger
Service Bus trigger is an Azure Functions binding that starts function execution when a message arrives on a Service Bus queue or topic subscription. It connects the Functions runtime to Service Bus, supports queue, topic, and session scenarios, and uses app settings or identity-based connections for access.
Azure Functions
intermediate
6 commands
Aliases: Azure Functions Service Bus trigger, ServiceBusTrigger, Service Bus queue trigger, Service Bus topic trigger
Quick peek
Open full term page
DevOps
premium
Service connection
Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely.
CI/CD
fundamentals
6 commands
Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search