Search Azure terms

Networking premium Application Gateway Application Gateway is an Azure web traffic load balancer for HTTP and HTTPS applications. It routes requests by host name, path, listener, rule, backend pool, and health status, and can add TLS termination and Web Application Firewall controls when those features are configured. Application delivery fundamentals 4 commands Aliases: Azure Application Gateway, App Gateway, regional layer 7 load balancer, HTTP application load balancer Quick peek Open full term page

Networking premium Application Gateway backend pool the group of backend targets that an Application Gateway can forward matched requests to after a listener and routing rule select them. Application delivery and API edge intermediate 4 commands Aliases: Application Gateway backend pool, application gateway backend pool Quick peek Open full term page

Networking premium Application Gateway HTTP setting the Application Gateway backend configuration that controls how the gateway connects to backend servers for HTTP or HTTPS requests. Application delivery and API edge intermediate 4 commands Aliases: Application Gateway HTTP setting, application gateway http setting Quick peek Open full term page

Networking premium Application Gateway listener the Application Gateway component that waits for client requests on a frontend IP address, port, protocol, and optional hostname or certificate. Application delivery and API edge intermediate 4 commands Aliases: Application Gateway listener, application gateway listener Quick peek Open full term page

Networking premium Application Gateway routing rule the Application Gateway component that connects a listener to a backend pool, backend settings, redirect, or path-based routing decision. Application delivery and API edge intermediate 4 commands Aliases: Application Gateway routing rule, application gateway routing rule Quick peek Open full term page

Security premium Application Gateway WAF policy An Application Gateway WAF policy stores Web Application Firewall configuration for Application Gateway v2. It includes managed rules, custom rules, exclusions, and policy settings, and can be associated globally, with a listener, or with a path-based rule for targeted web request inspection. Web application firewall intermediate 4 commands Aliases: Application Gateway WAF policy, WAF policy for Application Gateway, Azure WAF policy, regional WAF policy Quick peek Open full term page

Networking premium Web Application Firewall Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting. Application security fundamentals 6 commands Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF Quick peek Open full term page

Networking premium DDoS Protection Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities. Network security intermediate 6 commands Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection Quick peek Open full term page

Networking premium ExpressRoute ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before. Hybrid connectivity intermediate 6 commands Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity Quick peek Open full term page

Networking premium Front Door Azure Front Door is Microsoft’s global edge service for modern web applications. Microsoft Learn describes it as a cloud CDN that provides fast, reliable, and secure access to static and dynamic content through Microsoft’s global edge network worldwide. Application delivery and API edge intermediate 5 commands Aliases: Azure Front Door, AFD, Azure Front Door Standard, Azure Front Door Premium, global edge Quick peek Open full term page

Networking premium Front Door origin group A Front Door origin group is a logical grouping of origins that receives similar traffic and controls health probing and load balancing behavior. Application delivery and API edge intermediate 5 commands Aliases: Azure Front Door origin group, AFD origin group, backend pool in Front Door, origin pool Quick peek Open full term page

Networking premium Front Door profile Front Door profile is the top-level Azure Front Door Standard or Premium resource that groups edge endpoints, routes, origins, domains, rule sets, security associations, and delivery settings. Teams use it to manage a global application entry point without treating each endpoint, route, or origin as a separate product. In daily Azure work, it shows up when engineers review edge architecture, add a new website, tune routing, attach custom domains, configure WAF, or troubleshoot global traffic. It is not the same thing as a single endpoint, DNS name, backend app, CDN cache rule, or web application firewall policy. Application delivery and API edge intermediate 5 commands Aliases: Azure Front Door profile, AFD profile, Front Door Standard/Premium profile Quick peek Open full term page

Networking premium Azure Firewall Azure Firewall is a managed, stateful network firewall service for filtering traffic to and from Azure virtual network resources. It helps network security and platform teams centralize traffic control, logging, and threat protection across workloads without deploying self-managed firewall appliances for every landing zone. You see it when hub-spoke networks need egress control, applications require segmentation, regulated workloads need inspection, or teams need consistent firewall policy logging. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Network security intermediate 4 commands Aliases: Azure network firewall Quick peek Open full term page

Networking premium DNS zone A DNS zone is an Azure DNS container for record sets that answer names under a domain. Public zones publish internet-resolvable records after registrar delegation, while private zones resolve only for linked virtual networks and support private endpoint and internal naming patterns. DNS fundamentals 4 commands Aliases: Azure DNS zone, DNS zone, public DNS zone, private DNS zone, hosted zone Quick peek Open full term page

Networking premium Front Door origin A Front Door origin is a backend application or service endpoint that Azure Front Door can route client requests to through an origin group. Application delivery and API edge intermediate 4 commands Aliases: Azure Front Door origin, AFD origin, origin server, backend origin Quick peek Open full term page

Networking premium Front Door route Front Door route is the Azure Front Door configuration that decides which domain and path patterns send user requests to which origin group. Teams use it to connect edge endpoints and custom domains to backend applications while controlling accepted protocols, forwarding behavior, caching, and rule-set association. In daily Azure work, it shows up when engineers add APIs, split static and dynamic paths, migrate origins, route traffic between regions, or investigate why a request reached the wrong backend. Application delivery and API edge intermediate 4 commands Aliases: AFD route, Azure Front Door route, edge route Quick peek Open full term page

Networking premium Load Balancer Azure Load Balancer distributes TCP and UDP traffic across backend virtual machines, virtual machine scale sets, or IP configurations. It uses frontend IPs, backend pools, health probes, and rules to provide low-latency Layer 4 traffic distribution for public or internal workloads. Load balancing fundamentals 4 commands Aliases: Azure Load Balancer, Standard Load Balancer, internal load balancer, public load balancer, layer 4 load balancer Quick peek Open full term page

Web premium ARR affinity ARR affinity is the sticky-session behavior in Azure App Service that tries to send a user back to the same worker instance after the first request. It can help older stateful web apps that keep session data on the local worker. It can also hurt scaling because traffic may not spread evenly across all. App Service intermediate 2 commands Aliases: ARRAffinity, App Service session affinity, Application Request Routing affinity, sticky sessions Quick peek Open full term page

Security premium Certificate A certificate is an X.509 object used for TLS, authentication, or cryptographic operations. Secrets and keys fundamentals 2 commands Aliases: No aliases yet Quick peek Open full term page

Networking template-specs-upgraded Rewrite rule Application Gateway rule logic for modifying request or response headers and URLs before backend handling. Application delivery and API edge intermediate 6 commands Aliases: Application Gateway rewrite rule, URL rewrite rule, HTTP header rewrite rule, rewrite rule set, App Gateway rewrite Quick peek Open full term page

Web field-manual-complete App Service access restriction App Service access restriction is the rule list that decides which inbound clients are allowed to reach a web app before the request reaches your code. App Service networking intermediate 5 commands Aliases: access restriction, app service access restriction Quick peek Open full term page

Networking field-manual-complete Traffic Manager Azure Traffic Manager is a DNS-based traffic-routing service that directs clients to healthy application endpoints according to a configured routing method. It monitors endpoints and returns DNS answers, but it is not a proxy, so client traffic flows directly to the selected endpoint. Global routing intermediate 5 commands Aliases: Azure Traffic Manager, DNS traffic routing, traffic manager profile, global DNS routing, DNS failover Quick peek Open full term page

Networking field-manual-complete URL path map A URL path map is an Azure Application Gateway configuration that routes requests to different backend pools based on path patterns in the URL. It connects path rules, backend targets, and HTTP settings so one gateway can serve multiple application paths. Application Gateway intermediate 5 commands Aliases: path-based routing map, Application Gateway path map, URL route map, path rule map Quick peek Open full term page

Networking field-manual-complete Virtual network An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity. Azure Virtual Network beginner 5 commands Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network Quick peek Open full term page

Networking field-manual-complete Load balancer backend pool Microsoft Learn describes a backend pool as the collection of resources that receive traffic from an Azure Load Balancer. Backend pools can include instances added through network interfaces or IP addresses, and multiple pools can serve different traffic groups. Application delivery and API edge intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Networking verified Public IP address A public IP address exposes an Azure resource to the internet or enables outbound communication. IP addressing fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases learning-path-anchor Cosmos DB dedicated gateway Azure Cosmos DB dedicated gateway is provisioned server-side compute that fronts an account and enables the integrated cache for supported NoSQL workloads. Azure Cosmos DB fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium NAT Gateway NAT Gateway means a managed Azure networking service that provides outbound internet connectivity for private resources in associated subnets. You see it when teams let virtual machines, containers, or private application workloads reach updates, APIs, package feeds, or external services. Think of it as an outbound source address and SNAT boundary, not a firewall for all network traffic. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Outbound connectivity fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium API Management gateway The API Management gateway is the component that receives API requests, applies policies, routes traffic to backends, and returns responses to callers. API Management intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium API Management self-hosted gateway An API Management self-hosted gateway is a containerized copy of the API Management gateway that runs where your APIs live, such as on-premises, another cloud, or an Azure Kubernetes environment. Azure API Management remains the place where teams define APIs, products, policies, and observability.. Application delivery and API edge intermediate 4 commands Aliases: APIM self-hosted gateway, self-hosted API gateway Quick peek Open full term page

Databases premium Dedicated gateway Dedicated gateway is documented by Microsoft as part of the Azure Cosmos DB area in Azure. Azure Cosmos DB intermediate 11 commands Aliases: No aliases yet Quick peek Open full term page

Monitoring premium Application Insights Application Insights is the application performance monitoring capability in Azure Monitor. It collects OpenTelemetry or SDK telemetry such as requests, dependencies, exceptions, traces, metrics, and availability results so teams can continuously understand live application health, performance, failures, and user-impacting behavior. Application observability fundamentals 4 commands Aliases: Azure Application Insights, App Insights, Azure Monitor Application Insights, application performance monitoring, APM Quick peek Open full term page

Management and Governance premium Application landing zone An application landing zone is one or more governed Azure subscriptions for a workload environment, placed under management groups so it inherits platform policies and shared services. Landing zones fundamentals 4 commands Aliases: application landing zone Quick peek Open full term page

Identity premium Application permission An application permission is an app-only permission, also exposed as an app role, that lets a client application access a resource without a signed-in user after consent is granted. Identity operations fundamentals 4 commands Aliases: application permission Quick peek Open full term page

Management and Governance premium Application tag An application tag is a resource tag key-value pair that identifies the application, product, workload, or service associated with an Azure resource. Tags and naming fundamentals 4 commands Aliases: application tag Quick peek Open full term page

Identity premium Enterprise application Enterprise application properties in Microsoft Entra ID configure the organization-specific service principal settings for an application, including user assignment, single sign-on, provisioning, and ownership. Microsoft Entra applications intermediate 4 commands Aliases: Entra enterprise application, service principal application, enterprise app Quick peek Open full term page

Monitoring and Observability premium Application Insights connection string An Application Insights connection string specifies the Application Insights resource and endpoints that an instrumented application uses to send telemetry. Application Insights fundamentals 3 commands Aliases: APPLICATIONINSIGHTS_CONNECTION_STRING, application insights connection string Quick peek Open full term page

Virtual Desktop Infrastructure premium Application group An Azure Virtual Desktop application group controls access to a full desktop or a logical grouping of RemoteApp applications from a host pool. Virtual desktops fundamentals 2 commands Aliases: application group Quick peek Open full term page

Monitoring and Observability premium Application map Application Map is an Application Insights view that visualizes application components and dependencies using telemetry, helping teams identify bottlenecks and failure hotspots. Application Insights fundamentals 2 commands Aliases: application map Quick peek Open full term page

Networking premium Application security group An application security group lets you group virtual machine network interfaces so network security group rules can target application roles instead of explicit IP addresses. Network security fundamentals 2 commands Aliases: ASG, application security group Quick peek Open full term page

Web verified Requests in application queue Requests In Application Queue is an Azure Monitor metric for Microsoft.Web/sites that reports how many Web App or Function App requests are waiting in the application request queue. It helps diagnose saturation, slow handlers, cold starts, thread exhaustion, or delayed scale-out. Web App metric intermediate 6 commands Aliases: RequestsInApplicationQueue, App Service application queue, HTTP requests in application queue, Web App request queue metric, Function App request queue metric Quick peek Open full term page

Networking verified VPN Gateway VPN Gateway is an Azure virtual network gateway that creates encrypted VPN tunnels between an Azure virtual network and on-premises networks, remote clients, or other VNets, using configurations such as site-to-site, point-to-site, and VNet-to-VNet connections. for hybrid networks. Hybrid connectivity fundamentals 6 commands Aliases: Azure VPN Gateway, virtual network gateway for VPN, site-to-site VPN gateway, point-to-site VPN gateway Quick peek Open full term page

Containers learning-path-anchor Target port A target port tells Azure Container Apps where to deliver traffic inside your container. Public or internal ingress may expose an endpoint, but the app still has to listen on a specific port. If the container listens on 8080 and ingress targets 80, users may see timeouts, failed probes, or gateway errors. The setting is small, but it is often the difference between the app being deployed and the app being reachable. It should match the application startup command, Dockerfile, framework port, and health probes. Azure Container Apps intermediate 5 commands Aliases: container target port, Container Apps target port, ingress targetPort, container ingress port Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

DevOps premium Canary deployment Canary deployment is a release approach that sends a small portion of real traffic to a new version before rolling it out broadly. Deployment workflows intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Cosmos DB integrated cache Cosmos DB integrated cache means a dedicated gateway feature that serves cached point reads and queries without consuming request units for repeated reads. It is the practical label operators use when they decide how application data should be modeled, queried, protected, and monitored in Azure Cosmos DB. In plain English, it explains where developers, platform engineers, and support teams meet: the application wants fast data access, while the platform controls scale, cost, security, and recovery. A good glossary entry helps the team know which setting to inspect, which owner to involve, and which symptoms prove the design works. Azure Cosmos DB intermediate 5 commands Aliases: Azure Cosmos DB integrated cache, cosmos db integrated cache Quick peek Open full term page

AI and Machine Learning premium Inference endpoint Inference endpoint is the Azure concept that controls how applications invoke deployed machine learning models securely, reliably, and measurably in Azure. Teams see it when working with azure machine learning online endpoints, batch endpoints. It is not a model artifact, a training job, an Azure OpenAI deployment, or an application API gateway by itself; that distinction matters because bad assumptions create failed predictions, public exposure. Use the term when reviewing ownership, access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same resource, setting, or behavior. Azure Machine Learning Intermediate 5 commands Aliases: ML inference endpoint, online endpoint, managed online endpoint, batch endpoint, scoring endpoint Quick peek Open full term page

Databases premium Integrated cache Integrated cache controls how read-heavy Cosmos DB API for NoSQL applications reduce latency and request-unit consumption by reusing cached point reads and query results. Teams see it in azure cosmos db accounts, dedicated gateway configuration. It is not Azure Cache for Redis, a client-side memory cache, analytical store, a materialized view, or a replacement for correct partitioning; confusing them can create unexpected RU spending, stale reads. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Azure Cosmos DB Intermediate 5 commands Aliases: Cosmos DB integrated cache, Azure Cosmos DB integrated cache, dedicated gateway cache, item cache, query cache Quick peek Open full term page

Integration premium API Management operation An API Management operation is one callable action inside an API, such as GET /orders or POST /claims. It tells Azure API Management which HTTP method, URL template, parameters, and display name should be exposed to consumers. The operation can map to a backend route, return a mock response, accept. Application delivery and API edge intermediate 4 commands Aliases: APIM operation, API operation in API Management Quick peek Open full term page

Integration premium Developer portal The developer portal is the Azure API Management portal where API consumers discover APIs, read documentation, sign in, subscribe to products, retrieve subscription details, and test API operations when allowed. Application delivery and API edge intermediate 4 commands Aliases: API Management developer portal, APIM developer portal, developer portal in API Management, API consumer portal Quick peek Open full term page