Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,143 matching terms. Narrow the search to reduce the list.
Networking
premium
Application security group
An application security group lets you group virtual machine network interfaces so network security group rules can target application roles instead of explicit IP addresses.
Network security
fundamentals
2 commands
Aliases: ASG, application security group
Quick peek
Open full term page
Networking
premium
Web Application Firewall
Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting.
Application security
fundamentals
6 commands
Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF
Quick peek
Open full term page
Networking
premium
Network Security Group
Network Security Group means an Azure rule set that filters inbound and outbound network traffic for subnets or network interfaces. You see it when teams restrict application ports, isolate workloads, permit administration, block unwanted traffic, or document network segmentation. Think of it as a prioritized traffic filter near the workload, not complete application security. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path.
Network security
fundamentals
5 commands
Aliases: NSG
Quick peek
Open full term page
Networking
premium
Application Gateway
Application Gateway is an Azure web traffic load balancer for HTTP and HTTPS applications. It routes requests by host name, path, listener, rule, backend pool, and health status, and can add TLS termination and Web Application Firewall controls when those features are configured.
Application delivery
fundamentals
4 commands
Aliases: Azure Application Gateway, App Gateway, regional layer 7 load balancer, HTTP application load balancer
Quick peek
Open full term page
Security
premium
Application Gateway WAF policy
An Application Gateway WAF policy stores Web Application Firewall configuration for Application Gateway v2. It includes managed rules, custom rules, exclusions, and policy settings, and can be associated globally, with a listener, or with a path-based rule for targeted web request inspection.
Web application firewall
intermediate
4 commands
Aliases: Application Gateway WAF policy, WAF policy for Application Gateway, Azure WAF policy, regional WAF policy
Quick peek
Open full term page
Management and Governance
premium
Application landing zone
An application landing zone is one or more governed Azure subscriptions for a workload environment, placed under management groups so it inherits platform policies and shared services.
Landing zones
fundamentals
4 commands
Aliases: application landing zone
Quick peek
Open full term page
Identity
field-manual-complete
Security group
A security group is a named set of identities that receive access together.
Identity operations
fundamentals
4 commands
Aliases: Microsoft Entra security group, Entra security group, access group
Quick peek
Open full term page
Networking
premium
Application Gateway backend pool
the group of backend targets that an Application Gateway can forward matched requests to after a listener and routing rule select them.
Application delivery and API edge
intermediate
4 commands
Aliases: Application Gateway backend pool, application gateway backend pool
Quick peek
Open full term page
Networking
premium
Application Gateway HTTP setting
the Application Gateway backend configuration that controls how the gateway connects to backend servers for HTTP or HTTPS requests.
Application delivery and API edge
intermediate
4 commands
Aliases: Application Gateway HTTP setting, application gateway http setting
Quick peek
Open full term page
Networking
premium
Application Gateway listener
the Application Gateway component that waits for client requests on a frontend IP address, port, protocol, and optional hostname or certificate.
Application delivery and API edge
intermediate
4 commands
Aliases: Application Gateway listener, application gateway listener
Quick peek
Open full term page
Networking
premium
Application Gateway routing rule
the Application Gateway component that connects a listener to a backend pool, backend settings, redirect, or path-based routing decision.
Application delivery and API edge
intermediate
4 commands
Aliases: Application Gateway routing rule, application gateway routing rule
Quick peek
Open full term page
Monitoring
premium
Application Insights
Application Insights is the application performance monitoring capability in Azure Monitor. It collects OpenTelemetry or SDK telemetry such as requests, dependencies, exceptions, traces, metrics, and availability results so teams can continuously understand live application health, performance, failures, and user-impacting behavior.
Application observability
fundamentals
4 commands
Aliases: Azure Application Insights, App Insights, Azure Monitor Application Insights, application performance monitoring, APM
Quick peek
Open full term page
Identity
premium
Application permission
An application permission is an app-only permission, also exposed as an app role, that lets a client application access a resource without a signed-in user after consent is granted.
Identity operations
fundamentals
4 commands
Aliases: application permission
Quick peek
Open full term page
Management and Governance
premium
Application tag
An application tag is a resource tag key-value pair that identifies the application, product, workload, or service associated with an Azure resource.
Tags and naming
fundamentals
4 commands
Aliases: application tag
Quick peek
Open full term page
Identity
premium
Enterprise application
Enterprise application properties in Microsoft Entra ID configure the organization-specific service principal settings for an application, including user assignment, single sign-on, provisioning, and ownership.
Microsoft Entra applications
intermediate
4 commands
Aliases: Entra enterprise application, service principal application, enterprise app
Quick peek
Open full term page
Monitoring and Observability
premium
Application Insights connection string
An Application Insights connection string specifies the Application Insights resource and endpoints that an instrumented application uses to send telemetry.
Application Insights
fundamentals
3 commands
Aliases: APPLICATIONINSIGHTS_CONNECTION_STRING, application insights connection string
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Application group
An Azure Virtual Desktop application group controls access to a full desktop or a logical grouping of RemoteApp applications from a host pool.
Virtual desktops
fundamentals
2 commands
Aliases: application group
Quick peek
Open full term page
Monitoring and Observability
premium
Application map
Application Map is an Application Insights view that visualizes application components and dependencies using telemetry, helping teams identify bottlenecks and failure hotspots.
Application Insights
fundamentals
2 commands
Aliases: application map
Quick peek
Open full term page
Web
verified
Requests in application queue
Requests In Application Queue is an Azure Monitor metric for Microsoft.Web/sites that reports how many Web App or Function App requests are waiting in the application request queue. It helps diagnose saturation, slow handlers, cold starts, thread exhaustion, or delayed scale-out.
Web App metric
intermediate
6 commands
Aliases: RequestsInApplicationQueue, App Service application queue, HTTP requests in application queue, Web App request queue metric, Function App request queue metric
Quick peek
Open full term page
Security
field-manual-complete
Security recommendation
A security recommendation is a prioritized instruction from Microsoft Defender for Cloud that says, in effect, this resource has a security problem worth reviewing.
Cloud security posture
fundamentals
4 commands
Aliases: Defender for Cloud recommendation, cloud security recommendation, security assessment
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB continuous backup
Azure Cosmos DB continuous backup is the backup mode that supports point-in-time restore for supported Cosmos DB resources within a configured retention tier.
Azure Cosmos DB
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB dedicated gateway
Azure Cosmos DB dedicated gateway is provisioned server-side compute that fronts an account and enables the integrated cache for supported NoSQL workloads.
Azure Cosmos DB
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB emulator
The Azure Cosmos DB emulator provides a local environment that emulates Azure Cosmos DB for development and testing without requiring a cloud account.
Azure Cosmos DB
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
learning-path-anchor
Data Lake storage account
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
advanced
19 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for Apache Cassandra
Azure Cosmos DB for Apache Cassandra is a managed NoSQL database service that supports Cassandra workloads using CQL, drivers, and compatible tooling.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for Apache Gremlin
Azure Cosmos DB for Apache Gremlin is a managed graph database service for storing, querying, and traversing graph data with the Gremlin language.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for Table
Azure Cosmos DB for Table is a managed NoSQL key-value and table API compatible with Azure Table storage SDKs and tools.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI resource
An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context.
Azure OpenAI
fundamentals
12 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI Service
Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls.
Generative AI
fundamentals
11 commands
Aliases: Azure OpenAI
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Databases
premium
Azure Managed Redis
Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios.
Managed cache
intermediate
6 commands
Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise
Quick peek
Open full term page
Databases
premium
Cosmos DB logical partition
Cosmos DB logical partition means the group of items in a container that share the same partition key value. It is the practical label operators use when they decide how application data should be modeled, queried, protected, and monitored in Azure Cosmos DB. In plain English, it explains where developers, platform engineers, and support teams meet: the application wants fast data access, while the platform controls scale, cost, security, and recovery. A good glossary entry helps the team know which setting to inspect, which owner to involve, and which symptoms prove the design works.
Azure Cosmos DB
intermediate
6 commands
Aliases: Azure Cosmos DB logical partition, cosmos db logical partition
Quick peek
Open full term page
Networking
premium
DDoS Protection
Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities.
Network security
intermediate
6 commands
Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection
Quick peek
Open full term page
Networking
premium
ExpressRoute
ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before.
Hybrid connectivity
intermediate
6 commands
Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity
Quick peek
Open full term page
AI and Machine Learning
premium
Facetable field
A Facetable field is an Azure AI Search index field marked so the service can return facet buckets, counts, or filter choices for query results. Teams use it to let search applications show refiners such as category, brand, location, date range, status, or price band without scanning and counting results in application code. It is not a full-text analyzer, vector field setting, ranking rule, security trim, or proof that every facet value is clean, useful, or safe to expose to users.
Azure AI Search
intermediate
6 commands
Aliases: Azure AI Search facetable field, facetable index field, facet-enabled field, facetable attribute
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry hub
A Foundry hub is a hub-style Microsoft Foundry resource used in selected scenarios to group AI projects with shared security, connections, data access, and governance settings. Teams use it to organize related AI projects that need common connections, managed identities, network controls, storage, security review, and platform governance across teams or application portfolios. It is not a whole Azure tenant, a model deployment by itself, a replacement for project-level permissions, or the required resource shape for every modern Foundry scenario.
Microsoft Foundry
intermediate
6 commands
Aliases: Azure AI Foundry hub, Foundry hub resource, hub-based project, AI hub
Quick peek
Open full term page
Storage
premium
Service endpoint for Storage
A service endpoint for Storage enables the Microsoft.Storage endpoint on a virtual network subnet and pairs it with storage account network rules. It lets workloads in that subnet reach Azure Storage over the Microsoft backbone while the account firewall allows only approved virtual network sources.
Storage platform
intermediate
6 commands
Aliases: Azure Storage VNet rule, Microsoft.Storage service endpoint, Service endpoint for Storage, Storage service endpoint, service endpoint for storage, service-endpoint-for-storage
Quick peek
Open full term page
Web
premium
App Service Environment v3
App Service Environment v3 is the current App Service Environment generation for single-tenant, dedicated App Service hosting with simplified networking and high-scale isolated workloads.
App Service isolation
intermediate
5 commands
Aliases: Azure App Service Environment v3, app service environment v3
Quick peek
Open full term page
Web
premium
App Service Hybrid Connections
App Service Hybrid Connections let an App Service app make outbound TCP connections to a specific host and port in another network through Azure Relay.
App Service networking
intermediate
5 commands
Aliases: Azure App Service Hybrid Connections, app service hybrid connections
Quick peek
Open full term page
Web
premium
App Service Linux worker
An App Service Linux worker is the Linux-based App Service compute instance that runs an app using a built-in Linux runtime stack or custom container.
App Service runtime
intermediate
5 commands
Aliases: Azure App Service Linux worker, app service linux worker
Quick peek
Open full term page
Web
premium
App Service restore
App Service restore is recovering App Service content and supported configuration from an app backup, usually by overwriting an app or restoring into another app or deployment slot. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service scale rule
App Service scale rule is an autoscale rule or automatic scaling configuration that changes App Service capacity when metric thresholds, schedules, or platform load signals require more or fewer instances. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Scaling
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service Windows worker
App Service Windows worker is a Windows-based worker instance in an App Service plan that runs Windows App Service apps and shares compute with other apps placed in the same plan. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Platform
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry
Create a governed project boundary where AI teams can build agents, evaluations, files, and model deployments without unmanaged sprawl.; Compare, evaluate, and approve model deployments before a generative AI feature is
AI platform
fundamentals
5 commands
Aliases: AI Foundry, Microsoft Foundry, Foundry resource, Foundry project, Azure AI Foundry, azure ai foundry
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Databases
premium
Azure SQL Database
Azure SQL Database is a fully managed relational database service in Azure that provides SQL Server-compatible engines as single databases, elastic pools, and serverless or provisioned compute choices. Microsoft Learn presents it as platform as a service with built-in availability, backups, patching, scaling, and security integration.
Database
intermediate
5 commands
Aliases: Azure SQL DB, Azure SQL Database, Azure SQL pooled database, Azure SQL single database, SQL Database
Quick peek
Open full term page
Identity
premium
Azure tenant
An Azure tenant is the Microsoft Entra directory that provides identity and access management for users, groups, applications, service principals, devices, and Azure resources associated with an organization.
Azure identity
fundamentals
5 commands
Aliases: tenant, Microsoft Entra tenant, tenant ID
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Azure Virtual Desktop
Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control.
Virtual desktops
fundamentals
5 commands
Aliases: AVD
Quick peek
Open full term page
Identity
premium
B2B collaboration
Microsoft Entra B2B collaboration lets organizations invite external users and business partners to access applications and resources while keeping control of corporate data and access policies.
External identities
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Cosmos DB account
Design the account boundary for a global application before choosing databases, containers, regions, consistency, and backup mode.; Separate regulated, tenant-specific, or production workloads into dedicated Cosmos DB ac
Database
intermediate
5 commands
Aliases: Cosmos DB account, cosmos db account
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search