Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 394 matching terms. Narrow the search to reduce the list.
Analytics
learning-path-anchor
Databricks model serving
A managed serving endpoint pattern for exposing Databricks models or AI workloads for online inference with operational controls.
Databricks
intermediate
4 commands
Aliases: Databricks Model Serving, serving endpoint, model serving endpoint
Quick peek
Open full term page
Identity
learning-path-anchor
System-assigned managed identity
A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request...
Managed identities
intermediate
4 commands
Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB dedicated gateway
Azure Cosmos DB dedicated gateway is provisioned server-side compute that fronts an account and enables the integrated cache for supported NoSQL workloads.
Azure Cosmos DB
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
command-rich
Search admin key
A search admin key is one of the generated API keys for an Azure AI Search service that allows full read-write data-plane access. It can create, update, or delete indexes, indexers, data sources, and documents, so it must be protected, rotated, and replaced with role-based access when possible.
Azure AI Search
fundamentals
5 commands
Aliases: Azure AI Search admin key, search service admin key, Azure Search API admin key, primary admin key, secondary admin key
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for Apache Cassandra
Azure Cosmos DB for Apache Cassandra is a managed NoSQL database service that supports Cassandra workloads using CQL, drivers, and compatible tooling.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for Apache Gremlin
Azure Cosmos DB for Apache Gremlin is a managed graph database service for storing, querying, and traversing graph data with the Gremlin language.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for Table
Azure Cosmos DB for Table is a managed NoSQL key-value and table API compatible with Azure Table storage SDKs and tools.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
command-rich
Secondary storage region
The secondary storage region is the other region involved when an Azure Storage account uses geo-redundant options such as GRS or GZRS. Under normal conditions, applications write to the primary region, and Azure asynchronously copies data to the secondary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended..
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Computer Vision
the Azure AI capability that helps applications understand images, read text, detect visual features, and return structured insights from pictures or screenshots
Azure AI services
fundamentals
12 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI Service
Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls.
Generative AI
fundamentals
11 commands
Aliases: Azure OpenAI
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI
Azure OpenAI provides OpenAI model capabilities through Azure resources, deployments, identity, networking, quota, and monitoring controls.
Azure OpenAI
intermediate
8 commands
Aliases: Azure OpenAI Service
Quick peek
Open full term page
Databases
premium
Cosmos DB spatial index
Cosmos DB spatial index is an indexing-policy entry that helps Cosmos DB for NoSQL query valid GeoJSON points, lines, polygons, and multipolygons efficiently. It makes location-aware queries practical without scanning every item in a container. You see it when applications store coordinates, service areas, delivery zones, device positions, or map features in JSON items. The production check is whether GeoJSON shape, indexed path, query function, and partition strategy all line up. Document the decision in code, templates, metrics, and runbooks.
Azure Cosmos DB
intermediate
7 commands
Aliases: No aliases yet
Quick peek
Open full term page
Developer Tools
premium
Azure Developer CLI
An open-source developer command-line tool that accelerates provisioning, deployment, pipeline setup, and monitoring for application resources on Azure.
Developer workflow
fundamentals
6 commands
Aliases: azd
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Databases
premium
Azure Managed Redis
Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios.
Managed cache
intermediate
6 commands
Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise
Quick peek
Open full term page
Databases
premium
Bulk executor
Bulk executor is the Azure Cosmos DB capability or library pattern for sending many create, update, patch, delete, or import operations efficiently instead of processing documents one at a time.
Data platform
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Conflict resolution
the way Azure Cosmos DB decides the winning version when concurrent writes from multiple regions change the same item or logical record
Data platform
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Data Lake bronze layer
The raw ingestion layer in a lakehouse or medallion architecture where source data first lands with minimal transformation and strong traceability.
Data Lake Storage Gen2
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Data Lake curated zone
The governed, consumer-ready area of a data lake where cleaned, conformed, and documented datasets are served for reporting, analytics, AI, or downstream applications.
Data Lake Storage Gen2
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Face API
The Face API is an Azure AI service API that provides face detection, recognition, verification, identification, grouping, and related face analysis capabilities. Teams use it to build applications that detect faces in images, compare faces, verify identity scenarios, support liveness workflows, or organize face-related image data under approved responsible AI controls. It is not a general computer vision labeler, proof of identity by itself, a surveillance policy, or permission to use biometric capabilities without legal, privacy, and access review.
Azure AI services
intermediate
6 commands
Aliases: Azure AI Face, Azure Face API, Face service
Quick peek
Open full term page
AI and Machine Learning
premium
Face service
Face service is an Azure AI service that provides APIs for face detection, face analysis, verification, identification, grouping, and liveness-related workflows under approved access controls. Teams use it to build applications that detect faces in images, compare face evidence, verify approved identity scenarios, support liveness checks, or manage face lists within privacy and responsible AI controls. It is not a general image classification service, legal approval to process biometric data, a replacement for human identity review, or a guarantee that every face decision is correct.
Azure AI services
intermediate
6 commands
Aliases: Azure AI Face, Azure AI Face service, Azure Face service, Face API, Azure AI services Face
Quick peek
Open full term page
AI and Machine Learning
premium
Facetable field
A Facetable field is an Azure AI Search index field marked so the service can return facet buckets, counts, or filter choices for query results. Teams use it to let search applications show refiners such as category, brand, location, date range, status, or price band without scanning and counting results in application code. It is not a full-text analyzer, vector field setting, ranking rule, security trim, or proof that every facet value is clean, useful, or safe to expose to users.
Azure AI Search
intermediate
6 commands
Aliases: Azure AI Search facetable field, facetable index field, facet-enabled field, facetable attribute
Quick peek
Open full term page
Storage
premium
File service endpoint
A File service endpoint is the Azure Storage endpoint used by clients and services to access Azure Files shares in a storage account through supported protocols and network paths. Teams use it to connect applications, users, file sync agents, and automation to Azure file shares through the correct public endpoint, private endpoint, or virtual network service endpoint path. It is not a file share itself, a private endpoint by itself, a DNS record alone, authorization proof, or a guarantee that SMB, NFS, FileREST, firewall, and identity settings all match.
Azure Files
intermediate
6 commands
Aliases: Azure Files endpoint, storage file endpoint, file endpoint, Azure Storage file service endpoint
Quick peek
Open full term page
AI and Machine Learning
premium
Form Recognizer
Form Recognizer is the former name for Azure AI Document Intelligence, an Azure AI service that analyzes documents and extracts text, tables, layout, and structured fields. Teams use it to turn invoices, receipts, IDs, contracts, forms, and scanned documents into structured data for applications, workflow automation, search indexing, review queues, and compliance processing. It is not a human legal review, a guarantee that every extracted field is correct, a storage system for regulated documents, or a reason to skip confidence thresholds and validation logic.
Azure AI Document Intelligence
intermediate
6 commands
Aliases: Azure Form Recognizer, Azure AI Document Intelligence, Document Intelligence, Azure AI Form Recognizer
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
PostgreSQL high availability
PostgreSQL high availability means Azure keeps a standby flexible server ready so the database can continue after certain failures or planned failover events. Instead of relying on one server instance, the primary and standby are kept in sync. Depending on the design, the standby can be in the same availability zone or a different zone. This reduces downtime risk, but it does not remove every responsibility. Applications still need retry logic, connection handling, monitoring, tested failover procedures, and a cost owner because high availability adds real infrastructure.
PostgreSQL flexible server
intermediate
6 commands
Aliases: PostgreSQL high availability, postgresql high availability, Azure Database for PostgreSQL flexible server
Quick peek
Open full term page
Integration
premium
Service Bus
Azure Service Bus is a fully managed enterprise message broker with message queues and publish-subscribe topics. It helps decouple applications and services, load-balance work across competing consumers, route data across boundaries, and coordinate transactional workflows that require reliable messaging, ordering, sessions, duplicate detection, and dead-letter handling.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus, Service Bus Messaging
Quick peek
Open full term page
Integration
premium
Service Bus authorization rule
Service Bus authorization rule is a shared access policy on a namespace, queue, or topic. It names a key pair and grants Listen, Send, or Manage rights, letting applications create SAS tokens or connection strings scoped to the messaging entity they are allowed to use.
Service Bus
fundamentals
6 commands
Aliases: Service Bus SAS policy, Service Bus shared access policy, Service Bus authorization policy, SAS authorization rule
Quick peek
Open full term page
Integration
premium
Service Bus topic
Service Bus topic is a publish-subscribe entity inside a Service Bus namespace. Publishers send one message to the topic, and matching subscriptions receive their own copies. Topics are used when several downstream systems need the same business event without coupling the publisher to every receiver.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus topic, Service Bus pub-sub topic, topic entity, broker topic
Quick peek
Open full term page
Identity
premium
Service principal
A service principal is the local Microsoft Entra identity for an application or automation instance in a tenant. It represents the app for sign-in, consent, and authorization, and it can receive Azure RBAC roles or API permissions without using a human user account.
Azure identity
fundamentals
6 commands
Aliases: Microsoft Entra service principal, Service principal, application service principal, automation identity, service principal, service-principal
Quick peek
Open full term page
Web
premium
Web App
A Web App is an Azure App Service application for hosting web applications, REST APIs, or mobile back ends without managing servers. It runs on an App Service plan, supports common language stacks or containers, and integrates with deployment, scaling, networking, identity, and monitoring features.
App Service
intermediate
6 commands
Aliases: Azure Web App, App Service Web App, Microsoft.Web/sites, App Service app
Quick peek
Open full term page
Networking
premium
Web Application Firewall
Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting.
Application security
fundamentals
6 commands
Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF
Quick peek
Open full term page
AI and Machine Learning
verified
Prompt flow
Prompt flow is a way to build and test an AI application as a flow instead of a single prompt. A flow can connect prompts, Python logic, tools, inputs, outputs, variants, and evaluation steps. In Microsoft Foundry classic and Azure Machine Learning, it helped teams prototype, debug, compare, deploy, and monitor LLM-based applications. In 2026, it is also a migration topic because Microsoft announced that feature development ended and full retirement is planned for April 20, 2027.
Azure Machine Learning
advanced
18 commands
Aliases: No aliases yet
Quick peek
Open full term page
Identity
premium
Access package
An access package bundles resources someone may need for a job or project. Instead of asking separately for groups, apps, or sites, a user requests the package, and Entra applies approval, duration, review, and removal rules.
Identity operations
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Identity
premium
Access review
An access review is a governance check asking, “Should this access still exist?” It lets owners, managers, users, or admins review access to groups, apps, access packages, and privileged roles, then keep or remove access based on decisions and recommendations.
Governance
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
AKS cluster
Microsoft Learn describes Azure Kubernetes Service as a managed Kubernetes service for deploying and managing containerized applications. An AKS cluster provides the managed Kubernetes control plane, node pools, networking, identity, scaling, and Azure integration points for running containers in Azure production environments.
Azure Kubernetes Service
fundamentals
5 commands
Aliases: Azure Kubernetes cluster, AKS managed cluster, Kubernetes cluster in Azure
Quick peek
Open full term page
Containers
premium
AKS ingress controller
Microsoft Learn explains AKS ingress through Kubernetes ingress resources and controllers that route HTTP or HTTPS traffic to services in a cluster. AKS application routing options can configure ingress controllers, DNS integration, TLS handling, and related networking components for production applications.
AKS networking
intermediate
5 commands
Aliases: AKS ingress, Ingress controller for AKS, Kubernetes ingress controller
Quick peek
Open full term page
Containers
premium
AKS Linux node pool
An AKS Linux node pool is a group of Linux-based nodes with shared configuration that runs Kubernetes workloads in an AKS cluster. Node pools let teams separate system components, application workloads, VM sizes, zones, scaling behavior, taints, labels, and upgrade settings.
AKS compute
Intermediate
5 commands
Aliases: Azure Kubernetes Service Linux node pool, aks linux node pool
Quick peek
Open full term page
Containers
premium
AKS node
Microsoft Learn explains that AKS nodes are the virtual machines that run your containerized applications, grouped into node pools with the same configuration. System node pools host core cluster pods, while user node pools typically host application workloads and can differ by size, operating system, taints, or purpose.
AKS compute
intermediate
5 commands
Aliases: AKS cluster node, Kubernetes node in AKS, AKS VM node
Quick peek
Open full term page
Identity
premium
App registration
An app registration is the identity profile for an application, not the application code itself. It tells Microsoft Entra ID how the app is allowed to sign in users or request tokens. It contains values developers copy into configuration, such as client ID, tenant, redirect URI, credentials, and permissions. When sign-in breaks, consent fails, or tokens contain the wrong audience, the app registration is often where engineers look first. It is the contract between the app, Entra ID, administrators, and downstream APIs.
Applications
fundamentals
5 commands
Aliases: Microsoft Entra app registration, application registration
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry
Create a governed project boundary where AI teams can build agents, evaluations, files, and model deployments without unmanaged sprawl.; Compare, evaluate, and approve model deployments before a generative AI feature is
AI platform
fundamentals
5 commands
Aliases: AI Foundry, Microsoft Foundry, Foundry resource, Foundry project, Azure AI Foundry, azure ai foundry
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Databases
premium
Azure Database for MySQL Flexible Server
A fully managed Azure database service for MySQL workloads with configurable compute, storage, backups, networking, maintenance, and high availability options.
Managed MySQL
intermediate
5 commands
Aliases: MySQL Flexible Server
Quick peek
Open full term page
Databases
premium
Azure Database for PostgreSQL Flexible Server
A fully managed Azure PostgreSQL service with configurable compute, storage, backups, networking, maintenance, extensions, and high availability options.
Managed PostgreSQL
intermediate
5 commands
Aliases: PostgreSQL Flexible Server
Quick peek
Open full term page
Storage
premium
Azure file share
An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover.
Files, queues, and tables
fundamentals
5 commands
Aliases: Azure Files share
Quick peek
Open full term page
Storage
premium
Azure NetApp Files
Azure NetApp Files provides managed enterprise SMB and NFS volumes in Azure for performance-sensitive file workloads.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI managed identity
Azure OpenAI managed identity uses Microsoft Entra identities so Azure workloads can call model endpoints without stored keys.
Azure OpenAI
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Azure SQL Business Critical tier
Azure SQL Business Critical tier is a vCore service tier for OLTP workloads that need high transaction rates, low-latency I/O, and high resilience through isolated replicas.
Azure SQL Database
fundamentals
5 commands
Aliases: Azure SQL Business Critical tier, Business Critical tier, BusinessCritical, Premium-like vCore tier, SQL Business Critical
Quick peek
Open full term page
Databases
premium
Azure SQL Database
Azure SQL Database is a fully managed relational database service in Azure that provides SQL Server-compatible engines as single databases, elastic pools, and serverless or provisioned compute choices. Microsoft Learn presents it as platform as a service with built-in availability, backups, patching, scaling, and security integration.
Database
intermediate
5 commands
Aliases: Azure SQL DB, Azure SQL Database, Azure SQL pooled database, Azure SQL single database, SQL Database
Quick peek
Open full term page
Databases
premium
Azure SQL Database DTU model
Azure SQL Database DTU model is a purchasing model that bundles compute, storage, and I/O resources into Database Transaction Units for Basic, Standard, and Premium tiers.
Azure SQL Database
fundamentals
5 commands
Aliases: Azure SQL Database DTU model, DTU model, DTU-based purchasing model, Database Transaction Unit, eDTU
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search