Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,972 matching terms. Narrow the search to reduce the list.
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
field-manual-complete
Container registry
A container registry is the place where teams keep the container images they build and deploy. In Azure, this usually means Azure Container Registry, a private service that stores repositories, tags, image manifests, Helm charts, and other OCI artifacts. Developers push images.
Container registry
fundamentals
5 commands
Aliases: ACR, Azure Container Registry
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Management and Governance
premium
Bicep private registry
A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules.
Bicep
fundamentals
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Connected registry
an Azure Container Registry capability that keeps container images available in remote, edge, or intermittently connected environments by syncing with a parent registry
Azure Container Registry
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
DevOps
premium
Container image build
the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry
Deployment workflows
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
Custom container web app
an Azure App Service web app that runs a team-supplied container image instead of a built-in runtime stack.
App Service
intermediate
4 commands
Aliases: App Service custom container, Web App for Containers, containerized App Service app
Quick peek
Open full term page
Containers
premium
Defender for Containers
Microsoft Defender for Containers is a Defender for Cloud plan that provides security posture, vulnerability assessment, and threat protection for containerized assets such as Kubernetes clusters, workloads, registries, and images.
Azure Kubernetes Service
intermediate
4 commands
Aliases: Microsoft Defender for Containers, container protection plan, Defender container security
Quick peek
Open full term page
Containers
premium
Container image digest
the immutable sha256 reference that identifies the exact container image manifest Azure pulls during deployment
Container images
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container image tag
the human-readable label teams use to version, promote, and find container images in a registry
Container images
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Instances
Azure serverless container compute for running container groups without managing virtual machines or a full orchestrator
Serverless containers
fundamentals
3 commands
Aliases: ACI
Quick peek
Open full term page
Containers
field-manual-complete
Container image
A container image is the sealed package that a container runtime starts. It contains the application, runtime, libraries, filesystem layers, and metadata needed to create containers the same way each time. Teams push images to a registry and then reference them from.
Container images
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
verified
Registry private endpoint
A registry private endpoint lets workloads reach Azure Container Registry through private network addressing instead of the public registry endpoint. Your registry remains a managed Azure service, but clients such as AKS nodes, self-hosted build agents, virtual machines, or container platforms connect
Azure Container Registry
intermediate
5 commands
Aliases: ACR private endpoint, Azure Container Registry Private Link, private registry endpoint, container registry private endpoint
Quick peek
Open full term page
Containers
premium
Event-driven job
An Event-driven job in Azure Container Apps starts job executions when a configured scale rule detects work from an event source. Teams use it to run finite container work such as queue processing, batch enrichment, report generation, or cleanup only when events or messages are waiting. It is not a continuously running container app, an AKS deployment, a scheduled job, or a guarantee that every event is processed exactly once. In production, confirm job trigger type, scale rule, minimum and maximum executions, polling interval, image version, secret references, managed identity, execution status, logs, retries, and queue depth before treating the.
Azure Container Apps
intermediate
6 commands
Aliases: Container Apps event-driven job, KEDA job, event-triggered container job
Quick peek
Open full term page
Containers
premium
ACR admin user
The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR build
ACR build lets Azure Container Registry build an image in the cloud from source context or a Dockerfile. It is handy when you do not want a local Docker engine or want a pipeline to build and push directly in Azure.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR geo-replication
ACR geo-replication keeps container images closer to workloads in multiple regions. Developers push to one registry, and Azure replicates content so regional clusters can pull faster and more reliably, assuming the registry uses the Premium tier.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR import
ACR import is a server-side image copy. Instead of pulling an image to your machine and pushing it back, Azure copies it into your registry directly. It is useful for migration, mirroring, controlled base images, and pipeline cleanup.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR manifest
An ACR manifest is the record behind an image tag. It describes the image layers and configuration, and its digest is the exact content identity. Tags can move, but a manifest digest is what proves the precise image version.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR quarantine policy
ACR quarantine policy is a safety gate for images. Newly pushed images can be hidden from normal users until security scanning or approval clears them, reducing the chance that unreviewed images are pulled into workloads.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
ACR retention policy
An ACR retention policy is a registry-level cleanup rule for untagged manifests in Azure Container Registry. When enabled on a supported registry, it schedules untagged manifests for deletion after the configured number of days, helping control storage growth while requiring care because deleted image data cannot be recovered.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry retention policy, ACR untagged manifest retention, registry retention policy
Quick peek
Open full term page
Containers
premium
ACR scope map
An ACR scope map is a reusable set of repository permissions in Azure Container Registry. It groups actions such as content read, content write, delete, and metadata access, then applies that permission boundary to one or more non-Microsoft Entra registry tokens.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry scope map, repository scope map, registry token scope map
Quick peek
Open full term page
Containers
premium
ACR Task
An ACR Task is automation inside Azure Container Registry for building, testing, patching, or maintaining container images. Instead of relying only on a developer laptop or separate build server, the registry can run a build from source, a.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry Task, ACR Tasks, registry task
Quick peek
Open full term page
Containers
premium
ACR webhook
An ACR webhook is an Azure Container Registry event notification that sends an HTTP or HTTPS request to a configured endpoint when registry actions occur, such as image push or delete. It can be registry-wide or scoped to a repository or tag, including regional replicas.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry webhook, registry webhook, ACR event webhook
Quick peek
Open full term page
DevOps
premium
Image promotion
Image promotion is the controlled process of moving an approved VM or container image version from build or test use into wider production use.
Deployment workflows
intermediate
5 commands
Aliases: Image promotion, image promotion, image-promotion
Quick peek
Open full term page
Containers
premium
Image pull secret
Image pull secret is a Kubernetes secret that stores registry credentials so pods can pull private container images at deployment time.
Azure Container Registry
intermediate
5 commands
Aliases: Image pull secret, image pull secret, image-pull-secret
Quick peek
Open full term page
Containers
premium
Kubelet identity
Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
AKS identity
Intermediate
5 commands
Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity
Quick peek
Open full term page
AI and Machine Learning
premium
ML environment
ML environment is a versioned Azure Machine Learning runtime definition that packages software dependencies, base image, and execution settings for jobs or deployments. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Azure Machine Learning
intermediate
4 commands
Aliases: AML environment, Azure ML environment, ML runtime environment, Machine Learning environment, runtime environment
Quick peek
Open full term page
Containers
field-manual-complete
ACR token
An ACR token is a registry-scoped credential tied to a scope map, used when a non-Entra client needs limited access to selected repositories.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry token, registry token, repository-scoped token
Quick peek
Open full term page
Containers
verified
OCI artifact
OCI artifacts are registry-stored packages that follow the Open Container Initiative distribution model. In Azure Container Registry, teams can store container images plus related artifacts such as Helm charts, signatures, SBOMs, scan results, and other supply-chain files managed with tools like ORAS.
Azure Container Registry
intermediate
5 commands
Aliases: Open Container Initiative artifact, ORAS artifact, ACR OCI artifact, supply-chain artifact
Quick peek
Open full term page
Storage
premium
Azure Container Storage
A cloud-based volume management, deployment, and orchestration service built natively for containers and integrated with Kubernetes persistent volumes.
Container storage
intermediate
4 commands
Aliases: ACS for containers
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps secret
Microsoft Learn describes Container Apps secrets as application-scoped values that can be stored directly or referenced from Azure Key Vault. Revisions can use them through environment variables, registry credentials, or scale rules, while managed identity controls access to Key Vault references. during application configuration and rotation.
Azure Container Apps
intermediate
5 commands
Aliases: Container Apps secret, app-service-app-setting, client-secret, container apps secret, container-apps, container-apps-environment-variable, container-apps-revision, container-apps-secret, container-registry, keda, key-vault, key-vault-access-policy, managed-identity, secret
Quick peek
Open full term page
Management and Governance
premium
Azure subscription
An Azure subscription is a management, billing, and scale unit for Azure resources.
Azure scope
fundamentals
7 commands
Aliases: subscription
Quick peek
Open full term page
Developer Tools
premium
Azure CLI
A cross-platform command-line tool for connecting to Azure and executing administrative commands on Azure resources.
Command line
fundamentals
6 commands
Aliases: az, Azure command-line interface
Quick peek
Open full term page
Developer Tools
premium
Azure Developer CLI
An open-source developer command-line tool that accelerates provisioning, deployment, pipeline setup, and monitoring for application resources on Azure.
Developer workflow
fundamentals
6 commands
Aliases: azd
Quick peek
Open full term page
Compute
premium
Azure Functions
Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers.
Serverless compute
intermediate
6 commands
Aliases: Functions, Function App, serverless functions
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search index
An Azure AI Search index is the place where your application searches. It is not just a pointer to a database or blob container. It is a separate searchable structure with documents, fields, and rules for how text, filters, facets, semantic ranking, and vectors behave. If the index schema is wrong, the search experience feels wrong even when the source data is good. Developers and operators use indexes to make.
AI platform and search
intermediate
5 commands
Aliases: Azure AI Search index, search index, AI Search index, azure-ai-search-index
Quick peek
Open full term page
DevOps
premium
Azure DevOps organization
The top-level Azure DevOps Services container that connects related projects, users, repositories, pipelines, artifacts, permissions, and organization settings.
Azure DevOps
fundamentals
5 commands
Aliases: Azure DevOps org
Quick peek
Open full term page
Storage
premium
Azure Elastic SAN
A cloud-native Azure storage area network service that provides scalable, cost-effective, high-performance block storage volumes for compute workloads.
Block storage
intermediate
5 commands
Aliases: Elastic SAN
Quick peek
Open full term page
Storage
premium
Azure file share
An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover.
Files, queues, and tables
fundamentals
5 commands
Aliases: Azure Files share
Quick peek
Open full term page
AI and Machine Learning
premium
Azure Machine Learning
Azure Machine Learning is a cloud service for managing the machine learning lifecycle, including workspaces, data, training jobs, model deployment, monitoring, and MLOps.
Machine learning operations
advanced
5 commands
Aliases: Azure ML, AML, Machine Learning workspace
Quick peek
Open full term page
Storage
premium
Azure NetApp Files
Azure NetApp Files provides managed enterprise SMB and NFS volumes in Azure for performance-sensitive file workloads.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Azure savings plan
An Azure savings plan provides discounted pricing on eligible compute usage when you commit to an hourly spend for one or three years.
Cost Management
fundamentals
5 commands
Aliases: Azure savings plan, Azure savings plans, compute savings plan, savings plan for compute
Quick peek
Open full term page
Migration
premium
Azure Site Recovery
Azure Site Recovery helps provide disaster recovery by managing replication, failover, and failback for supported workloads.
Disaster recovery
fundamentals
5 commands
Aliases: ASR, Azure Site Recovery, Azure disaster recovery, Site Recovery
Quick peek
Open full term page
Storage
premium
Azure Site Recovery vault
An Azure Site Recovery vault is a Recovery Services vault used to manage replication, failover, and recovery metadata for Site Recovery.
Backup and recovery
intermediate
5 commands
Aliases: ASR vault, Azure Site Recovery vault, Recovery Services vault, Site Recovery Recovery Services vault
Quick peek
Open full term page
Identity
premium
Azure tenant
An Azure tenant is the Microsoft Entra directory that provides identity and access management for users, groups, applications, service principals, devices, and Azure resources associated with an organization.
Azure identity
fundamentals
5 commands
Aliases: tenant, Microsoft Entra tenant, tenant ID
Quick peek
Open full term page
Management and Governance
premium
Bicep public registry
The Bicep public registry provides publicly available Bicep modules that can be referenced from Bicep files, including Azure Verified Modules through the br/public alias.
Bicep
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps
A serverless Azure service for running containerized apps and jobs without directly operating Kubernetes clusters.
Serverless containers
fundamentals
5 commands
Aliases: Azure Container Apps
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search