Search Azure terms

Web premium Function key Microsoft Learn describes Azure Functions access keys as secret values used to make function endpoints harder to call without authorization. A function key is scoped to a specific function, while host, system, and master keys serve broader runtime or administrative access needs for a function app. Azure Functions security intermediate 5 commands Aliases: Azure Functions access key, Function access key, x-functions-key Quick peek Open full term page

Web premium field-manual Master key A master key is a database-level symmetric key used to protect certificates, private keys, and credentials inside SQL databases. Teams use it when SQL objects need encrypted secrets or credentials for secure database operations. In plain English, it gives operators a named control for structured key protection, credential security, and auditable database encryption dependencies instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure Functions access keys intermediate 4 commands Aliases: Master key, _master key, Azure Functions master key, Functions admin key, Functions master key, admin host key, Azure Functions, Azure Functions access keys Quick peek Open full term page

Compute premium Azure Functions Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers. Serverless compute intermediate 6 commands Aliases: Functions, Function App, serverless functions Quick peek Open full term page

Databases verified Redis access keys The primary and secondary key pair used for key-based authentication to an Azure Redis cache when that mode is enabled. Cache and in-memory data fundamentals 7 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI managed identity Azure OpenAI managed identity uses Microsoft Entra identities so Azure workloads can call model endpoints without stored keys. Azure OpenAI intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium SFTP for Azure Blob Storage SFTP for Azure Blob Storage lets clients connect to a storage account through SSH File Transfer Protocol for file access, transfer, and management. It requires a supported storage account with hierarchical namespace enabled, then local users and scoped permissions control access to containers and paths. Storage platform intermediate 5 commands Aliases: Azure Blob Storage SFTP, SFTP support for Azure Blob Storage, storage account SFTP, Blob SFTP endpoint, SFTP for Azure Blob Storage Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI resource An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context. Azure OpenAI fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Service Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls. Generative AI fundamentals 11 commands Aliases: Azure OpenAI Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Azure OpenAI provides OpenAI model capabilities through Azure resources, deployments, identity, networking, quota, and monitoring controls. Azure OpenAI intermediate 8 commands Aliases: Azure OpenAI Service Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Databases premium Azure Managed Redis Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios. Managed cache intermediate 6 commands Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise Quick peek Open full term page

Analytics premium Azure Databricks Unity Catalog A unified governance layer in Azure Databricks for data and AI assets, including catalogs, schemas, tables, volumes, models, privileges, and lineage. Data governance intermediate 5 commands Aliases: Unity Catalog Quick peek Open full term page

Analytics premium Azure integration runtime Azure integration runtime is the compute infrastructure used by Azure Data Factory and Synapse pipelines to move data, dispatch activities, and connect across network environments. Data integration compute intermediate 5 commands Aliases: Integration Runtime, IR, ADF integration runtime Quick peek Open full term page

Storage premium Kerberos authentication for Azure Files Kerberos authentication for Azure Files is the identity-based SMB authentication option that lets Azure file shares use Kerberos with a supported directory identity source instead of only storage keys or SAS. Azure Files advanced 5 commands Aliases: Azure Files Kerberos, Microsoft Entra Kerberos for Azure Files, identity-based authentication for Azure Files, SMB Kerberos Azure Files Quick peek Open full term page

Security premium Key Vault access policy Key Vault access policy controls which identities can read, write, list, delete, recover, sign, unwrap, or manage Key Vault objects when the vault uses policy-based access. Teams see it in key vault access policies blade, secret permissions. It is not Azure RBAC for Key Vault, a network firewall rule, a secret value, a certificate policy, or an application setting; confusing them can create overprivileged identities, broken secret retrieval. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Secrets and keys Intermediate 5 commands Aliases: access policy, vault access policy, Key Vault policy permissions, data-plane access policy Quick peek Open full term page

AI and Machine Learning premium Azure AI Content Safety Azure AI Content Safety is the Azure AI service used to detect harmful text and image content before it reaches users, moderators, or automated workflows. In Azure, teams encounter it when applications accept user posts, comments, uploads, prompts, or model outputs that need moderation and policy review. The useful question is what behavior it proves, Responsible AI advanced 4 commands Aliases: Content Safety, Azure Content Safety, harm detection, content moderation API Quick peek Open full term page

AI and Machine Learning premium Azure AI metrics Azure AI metrics is the measurable signals used to observe Azure AI applications, model endpoints, agents, evaluations, safety checks, and business outcomes. Azure AI services intermediate 4 commands Aliases: AI metrics, AI service metrics, Azure AI Metrics Advisor, Azure Monitor metrics for AI, Metrics Advisor, time series anomaly detection Quick peek Open full term page

AI and Machine Learning premium Azure AI Search service Azure AI Search service is the Azure resource that hosts Azure AI Search indexes, indexers, skillsets, keys, capacity, networking, and query endpoints. AI platform and search intermediate 4 commands Aliases: AI Search resource, AI Search service, Azure Search service, Search service, search service Quick peek Open full term page

AI and Machine Learning premium Azure AI services account An Azure resource that provides endpoints, keys, identity, networking, billing, and monitoring for one or more Azure AI service capabilities. Azure AI services fundamentals 4 commands Aliases: AI services account, Azure AI multi-service resource, Foundry resource, Microsoft.CognitiveServices account Quick peek Open full term page

AI and Machine Learning premium Azure AI Vision The Azure vision service that analyzes images and visual content for tasks such as OCR, object information, captions, tags, and image understanding. AI services intermediate 4 commands Aliases: Azure Vision, Computer Vision, Image Analysis, Vision in Foundry Tools Quick peek Open full term page

Management and Governance premium Azure data plane The Azure data plane is the part of Azure you use after a resource exists, when you interact with the capability that resource provides. Microsoft Learn anchors this term in Azure control plane and data plane, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, data-plane operations are service-specific operations against. Azure Resource Manager fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Azure SQL transparent data encryption Azure SQL Transparent Data Encryption helps protect Azure SQL Database data, log files, and backups at rest by encrypting and decrypting database pages without requiring application changes. Azure SQL Database fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Azure Storage Explorer Azure Storage Explorer is a standalone app for Windows, macOS, and Linux that helps users connect to and manage Azure Storage data and resources through a graphical interface. Storage tooling fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Security premium Managed identity for data access Managed identity for data access is the pattern of using a managed identity to let a workload read or write data without embedded secrets. Teams use it when pipelines, applications, jobs, or analytics services need secure access to storage, databases, or other data services. In plain English, it gives operators a named control for least-privilege data access, reduced secret exposure, and cleaner audit trails instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data access security intermediate 3 commands Aliases: Managed identity for data access, Microsoft Entra ID, Data access security Quick peek Open full term page

Storage complete Storage account access key A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Storage accounts advanced 10 commands Aliases: storage access key, account key, shared key, storage key Quick peek Open full term page

Databases verified Redis access key A single primary or secondary secret used by Redis clients when key-based authentication is enabled for an Azure Redis cache. Cache intermediate 7 commands Aliases: No aliases yet Quick peek Open full term page

Security field-manual-complete Least privilege data access Microsoft Learn describes least privilege as granting users and applications only the data and operations required to do their jobs. In Azure data access, that means scoped roles, managed identities, limited secrets, network controls, and reviewable permissions instead of broad owner-style access. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Private endpoint for Azure Files A private endpoint for Azure Files is the private network path to file shares in a storage account. Instead of mounting or accessing the share through the public file endpoint, clients in approved networks reach a private IP tied to the file service. The share, authentication model, and storage account still matter; the endpoint only changes network reachability. It is especially important for SMB access from Azure workloads, virtual desktops, build systems, and hybrid clients connected through VPN or ExpressRoute. Azure Files advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Private endpoint for Azure OpenAI A private endpoint for Azure OpenAI is the private network doorway to an Azure OpenAI resource. Your application still calls the Azure OpenAI endpoint and authenticates normally, but from approved networks the name can resolve to a private IP instead of a public address. It is commonly used for enterprise chat, RAG, summarization, and agent workloads that handle sensitive prompts or documents. It protects the network path, not the prompt content by itself, so identity, logging, safety, and data controls still matter. Azure OpenAI advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Azure subscription An Azure subscription is a management, billing, and scale unit for Azure resources. Azure scope fundamentals 7 commands Aliases: subscription Quick peek Open full term page

Analytics premium Databricks access connector A first-party Azure resource that gives Azure Databricks a managed identity for Unity Catalog storage credentials and other governed service access. Azure Databricks intermediate 6 commands Aliases: Access Connector for Azure Databricks, Azure Databricks access connector, Databricks managed identity connector Quick peek Open full term page

Web premium Functions Premium plan Functions Premium plan is a hosting plan for Azure Functions that keeps capacity ready while still supporting event-driven scaling for serverless workloads. Teams use it to reduce cold starts, run longer or heavier functions, use VNet integration, and control minimum and maximum capacity more deliberately than Consumption hosting. In daily Azure work, it appears when engineers stabilize latency-sensitive APIs, connect functions to private dependencies, prepare for event spikes, or replace overprovisioned dedicated App Service capacity. It is not a free tier, a guarantee that code is efficient, unlimited scale, or a substitute for trigger tuning and dependency performance testing. Azure Functions hosting advanced 6 commands Aliases: Elastic Premium plan, Azure Functions Premium, EP plan Quick peek Open full term page

Identity premium Access package An access package bundles resources someone may need for a job or project. Instead of asking separately for groups, apps, or sites, a user requests the package, and Entra applies approval, duration, review, and removal rules. Identity operations fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Identity premium Access review An access review is a governance check asking, “Should this access still exist?” It lets owners, managers, users, or admins review access to groups, apps, access packages, and privileged roles, then keep or remove access based on decisions and recommendations. Governance fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Access tier An access tier is the storage temperature for blob data. Hot is for frequent access, cool and cold are for less frequent access, and archive is cheapest to store but slowest to retrieve. Choose tiers based on real lifecycle and retrieval needs. Blob Storage fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure AI Foundry Create a governed project boundary where AI teams can build agents, evaluations, files, and model deployments without unmanaged sprawl.; Compare, evaluate, and approve model deployments before a generative AI feature is AI platform fundamentals 5 commands Aliases: AI Foundry, Microsoft Foundry, Foundry resource, Foundry project, Azure AI Foundry, azure ai foundry Quick peek Open full term page

Containers premium Azure Container Registry A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments. Container images fundamentals 5 commands Aliases: ACR Quick peek Open full term page

DevOps premium Azure DevOps organization The top-level Azure DevOps Services container that connects related projects, users, repositories, pipelines, artifacts, permissions, and organization settings. Azure DevOps fundamentals 5 commands Aliases: Azure DevOps org Quick peek Open full term page

Storage premium Azure file share An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover. Files, queues, and tables fundamentals 5 commands Aliases: Azure Files share Quick peek Open full term page

Storage premium Azure HPC Cache Azure HPC Cache was a managed Azure file-caching service for HPC workloads; Microsoft retired the service on September 30, 2025, so current work should focus on migration or historical inventory. Retired HPC caching advanced 5 commands Aliases: HPC Cache, Azure Storage Cache Quick peek Open full term page

Management and Governance premium Azure Lighthouse Azure Lighthouse enables secure delegated management of Azure resources across customer tenants, supporting service providers and central teams with scalable cross-tenant governance. Delegated resource management advanced 5 commands Aliases: Lighthouse, delegated resource management, Microsoft Managed Services delegation Quick peek Open full term page

AI and Machine Learning premium Azure Machine Learning Azure Machine Learning is a cloud service for managing the machine learning lifecycle, including workspaces, data, training jobs, model deployment, monitoring, and MLOps. Machine learning operations advanced 5 commands Aliases: Azure ML, AML, Machine Learning workspace Quick peek Open full term page

Storage premium Azure Managed Lustre Azure Managed Lustre is a managed parallel file system for high-performance computing and AI workloads that need scalable, low-latency file storage in Azure. Parallel file systems advanced 5 commands Aliases: Managed Lustre, Azure Managed Lustre File System, AMLFS Quick peek Open full term page

Storage premium Azure NetApp Files Azure NetApp Files provides managed enterprise SMB and NFS volumes in Azure for performance-sensitive file workloads. Backup and recovery intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Azure reservation An Azure reservation is a one-year or three-year commitment that provides discounted pricing for eligible Azure resource usage. Cost Management fundamentals 5 commands Aliases: Azure Reservations, Azure reservation, reservation order, reserved capacity, reserved instance Quick peek Open full term page

Monitoring and Observability premium Azure Resource Health Azure Resource Health reports current and past health for individual Azure resources and helps diagnose service-impacting problems. Operational hygiene fundamentals 5 commands Aliases: Azure Resource Health, Azure resource health status, Resource Health, resource availability status Quick peek Open full term page

Management and Governance premium Azure savings plan An Azure savings plan provides discounted pricing on eligible compute usage when you commit to an hourly spend for one or three years. Cost Management fundamentals 5 commands Aliases: Azure savings plan, Azure savings plans, compute savings plan, savings plan for compute Quick peek Open full term page

Migration premium Azure Site Recovery Azure Site Recovery helps provide disaster recovery by managing replication, failover, and failback for supported workloads. Disaster recovery fundamentals 5 commands Aliases: ASR, Azure Site Recovery, Azure disaster recovery, Site Recovery Quick peek Open full term page

Storage premium Azure Site Recovery vault An Azure Site Recovery vault is a Recovery Services vault used to manage replication, failover, and recovery metadata for Site Recovery. Backup and recovery intermediate 5 commands Aliases: ASR vault, Azure Site Recovery vault, Recovery Services vault, Site Recovery Recovery Services vault Quick peek Open full term page

Databases premium Azure SQL active geo-replication Azure SQL active geo-replication creates readable secondary databases in other regions for database-level disaster recovery and failover. Azure SQL Database intermediate 5 commands Aliases: Azure SQL active geo-replication, SQL geo-replication, active geo-replication, geo-secondary database Quick peek Open full term page