Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,983 matching terms. Narrow the search to reduce the list.
Storage
premium
Infrastructure encryption for storage
Infrastructure encryption for storage controls how Azure Storage applies optional double encryption to blobs, files, queues, or tables depending on account and scope configuration. Teams see it in storage account creation, encryption blade. It is not blob immutability, soft delete, encryption in transit, customer-managed key rotation, or disabling shared key authorization; confusing them can create storage accounts that cannot meet compliance, rebuild-only remediation. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Storage Security
Intermediate
5 commands
Aliases: storage infrastructure encryption, storage account double encryption, require infrastructure encryption, double encryption for Azure Storage
Quick peek
Open full term page
Storage
premium
Azure Storage Discovery
Azure Storage Discovery is a fully managed service that provides enterprise-wide visibility into Azure Blob Storage and Azure Data Lake Storage estates for analysis, optimization, security, and operations.
Storage platform
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
SFTP for Azure Blob Storage
SFTP for Azure Blob Storage lets clients connect to a storage account through SSH File Transfer Protocol for file access, transfer, and management. It requires a supported storage account with hierarchical namespace enabled, then local users and scoped permissions control access to containers and paths.
Storage platform
intermediate
5 commands
Aliases: Azure Blob Storage SFTP, SFTP support for Azure Blob Storage, storage account SFTP, Blob SFTP endpoint, SFTP for Azure Blob Storage
Quick peek
Open full term page
Storage
premium
Azure Container Storage
A cloud-based volume management, deployment, and orchestration service built natively for containers and integrated with Kubernetes persistent volumes.
Container storage
intermediate
4 commands
Aliases: ACS for containers
Quick peek
Open full term page
Storage
premium
Azure Storage Actions
Azure Storage Actions is a fully managed platform for automating data management tasks across Azure Blob Storage and Azure Data Lake Storage objects without provisioning separate compute.
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Azure Storage Explorer
Azure Storage Explorer is a standalone app for Windows, macOS, and Linux that helps users connect to and manage Azure Storage data and resources through a graphical interface.
Storage tooling
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Azure Storage Mover
Azure Storage Mover is a fully managed migration service that helps move files and folders from on-premises or AWS S3 sources to Azure Storage while minimizing workload downtime.
Storage migration
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Azure Managed Redis
Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios.
Managed cache
intermediate
6 commands
Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise
Quick peek
Open full term page
Analytics
premium
Azure Synapse Analytics
Azure Synapse Analytics is Microsoft’s integrated analytics service for enterprise data warehousing, big data, data integration, and exploratory analytics.
Synapse Analytics
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Service endpoint for Storage
A service endpoint for Storage enables the Microsoft.Storage endpoint on a virtual network subnet and pairs it with storage account network rules. It lets workloads in that subnet reach Azure Storage over the Microsoft backbone while the account firewall allows only approved virtual network sources.
Storage platform
intermediate
6 commands
Aliases: Azure Storage VNet rule, Microsoft.Storage service endpoint, Service endpoint for Storage, Storage service endpoint, service endpoint for storage, service-endpoint-for-storage
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Analytics
premium
Azure Data Explorer
A fully managed, high-performance analytics service for near-real-time analysis of large telemetry, log, event, and time-series datasets.
Real-time analytics
intermediate
5 commands
Aliases: ADX, Kusto
Quick peek
Open full term page
Analytics
premium
Azure Databricks
A unified, open analytics platform on Azure for building, deploying, sharing, and maintaining enterprise data, analytics, and AI solutions at scale.
Data engineering and AI
intermediate
5 commands
Aliases: Databricks on Azure
Quick peek
Open full term page
Databases
premium
Azure SQL auditing
Azure SQL auditing tracks database events and writes audit logs to supported destinations such as storage, Log Analytics, or Event Hubs.
Azure SQL Database
fundamentals
5 commands
Aliases: Azure SQL audit logs, Azure SQL auditing, SQL auditing, database auditing
Quick peek
Open full term page
Databases
premium
Azure SQL Database
Azure SQL Database is a fully managed relational database service in Azure that provides SQL Server-compatible engines as single databases, elastic pools, and serverless or provisioned compute choices. Microsoft Learn presents it as platform as a service with built-in availability, backups, patching, scaling, and security integration.
Database
intermediate
5 commands
Aliases: Azure SQL DB, Azure SQL Database, Azure SQL pooled database, Azure SQL single database, SQL Database
Quick peek
Open full term page
Storage
premium
General-purpose v2 storage account
General-purpose v2 storage account is an Azure Storage account resource using the StorageV2 kind to host common storage services under one managed namespace. Teams use it to provide durable storage for applications while centralizing endpoints, redundancy, encryption, lifecycle management, networking, monitoring, and access control. In daily Azure work, it appears when engineers provision blob containers, file shares, queues, tables, static websites, backups, application artifacts, or Data Lake Gen2-enabled storage in a landing zone. It is not a specific blob container, an unlimited performance guarantee, an identity provider, or a safe design unless access, networking, and data protection are configured.
Storage accounts
beginner
5 commands
Aliases: Azure general-purpose v2 storage account, GPv2 storage account, StorageV2 storage account
Quick peek
Open full term page
Storage
premium
Trusted Microsoft services for storage
Trusted Microsoft services for Azure Storage are specific Azure services that Microsoft documents as eligible for storage firewall exceptions. Depending on the service, access may be based on tenant registration, supported operations, or managed identity authorization combined with Azure RBAC or Data Lake ACLs.
Storage platform
intermediate
5 commands
Aliases: trusted Azure services for Storage, storage trusted services list, Azure Storage trusted services, trusted services storage firewall
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search data source
Azure AI Search data source is the connection definition an Azure AI Search indexer uses to read content from a supported external data store.
AI platform and search
intermediate
4 commands
Aliases: Search data source, SearchIndexerDataSourceConnection, data source connection, indexer data source, search data source connection
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search service
Azure AI Search service is the Azure resource that hosts Azure AI Search indexes, indexers, skillsets, keys, capacity, networking, and query endpoints.
AI platform and search
intermediate
4 commands
Aliases: AI Search resource, AI Search service, Azure Search service, Search service, search service
Quick peek
Open full term page
Databases
premium
Azure Cache for Redis
A managed in-memory data store based on Redis that improves application performance by caching frequently accessed data close to workloads.
Cache
fundamentals
4 commands
Aliases: Azure Redis Cache, Redis cache, managed Redis cache
Quick peek
Open full term page
Storage
premium
Azure Files private endpoint
Azure Files private endpoint connects Azure file share traffic to a storage account through a private IP address in a virtual network. It helps network, security, and storage teams keep SMB or NFS access on private network paths without exposing file access directly over public endpoints. You see it when regulated workloads need private access, branch users connect through VPN, or applications must mount shares without public storage exposure. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
Private connectivity
intermediate
4 commands
Aliases: Private endpoint for Azure Files, Azure Files Private Link
Quick peek
Open full term page
Monitoring and Observability
premium
Diagnostic settings for storage
Diagnostic settings for storage route Azure Storage platform logs and metrics, including service-specific operations where supported, to destinations such as Log Analytics, Event Hubs, or Storage for investigation and compliance.
Data operations
intermediate
4 commands
Aliases: storage diagnostic settings, Azure Storage diagnostic settings, Storage account diagnostic settings, storage platform log routing
Quick peek
Open full term page
Storage
premium
Minimum TLS version for Storage
Minimum TLS version for Storage is a storage account setting that rejects client connections using TLS versions below the configured minimum. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Storage security
intermediate
4 commands
Aliases: TLS minimum for storage, TLS1_2 storage, minimum TLS for Azure Storage, minimumTlsVersion, storage minimum TLS
Quick peek
Open full term page
Storage
premium
NFS 3.0 for Blob Storage
NFS 3.0 for Blob Storage means an Azure Blob Storage protocol option that lets Linux clients mount blob containers through NFS version 3. You see it when teams connect analytics jobs, HPC workloads, migration tools, or Linux applications that expect mounted file paths. Think of it as a storage protocol choice with account, namespace, and network requirements. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path.
Blob Storage
advanced
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
learning-path-anchor
Table Storage
Table Storage is Azure Storage for simple structured NoSQL records. You create tables, store entities, and identify each entity with a PartitionKey and RowKey. It is useful when the data is large, sparse, inexpensive to keep, and usually accessed by known keys. It is not a relational database, search engine, or analytics warehouse. The best fit is operational data that can be denormalized, read directly, updated independently, and kept cheap without requiring joins, stored procedures, or secondary indexes.
Table Storage
fundamentals
5 commands
Aliases: Azure Table Storage, Storage Tables, Azure Storage Tables, Azure Tables storage
Quick peek
Open full term page
Storage
premium
Blob storage account
A Blob storage account is the Azure Storage account that provides the namespace, security boundary, network configuration, redundancy, and service endpoint for Blob data.
Storage accounts
advanced
3 commands
Aliases: Blob storage account, storage account, blob storage account
Quick peek
Open full term page
Storage
learning-path-anchor
Data Lake storage account
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
advanced
19 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Azure SQL logical server
An Azure SQL logical server is a logical administrative construct for Azure SQL Database and related SQL resources. Microsoft Learn describes it as the central point for managing a collection of databases, including logins, firewall rules, auditing, threat detection policies, and failover groups.
Azure SQL Database
fundamentals
16 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
field-manual-complete
Data Lake Storage Gen2
Data Lake Storage Gen2 is Azure Blob Storage with a hierarchical namespace enabled for analytics workloads. Microsoft Learn describes it as combining file-system style directories, ACLs, and large-scale throughput with Blob Storage durability, security, lifecycle, tiering, and ecosystem compatibility for big data scenarios.
Analytics storage
fundamentals
8 commands
Aliases: ADLS Gen2
Quick peek
Open full term page
Storage
field-manual-complete
Blob Storage
Blob Storage is Azure object storage for massive amounts of unstructured data such as documents, images, video, backups, logs, and application files.
Storage
advanced
5 commands
Aliases: Blob Storage, blob-storage, blob, blob-container, blob-access-tier, blob-soft-delete, blob-versioning, storage-account, account-sas, private-endpoint-for-storage, azure-files, data-lake-storage-gen2, queue-storage
Quick peek
Open full term page
Storage
field-manual-complete
Private endpoint for Storage
A private endpoint for Storage is the private network entry point to one storage account service, such as Blob, Files, Queue, Table, Data Lake Storage, or static website content.
Storage platform
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
field-manual-complete
Storage account trusted services
Storage account trusted services are Azure service exceptions that can pass a storage firewall when selected network access is restricted. They help specific Microsoft services reach storage for approved scenarios, but they do not replace authentication, authorization, logging, private access review, or least-privilege design.
Storage network security
fundamentals
5 commands
Aliases: trusted Microsoft services for storage, AzureServices bypass, storage trusted services exception
Quick peek
Open full term page
Storage
field-manual-complete
Storage diagnostic logging
Storage diagnostic logging uses Azure Monitor diagnostic settings and storage service resource logs to record data-plane operations such as reads, writes, deletes, authentication outcomes, latency, and request metadata. Operators can send those logs to Log Analytics, Event Hubs, or storage for investigation, monitoring, and compliance evidence.
Storage accounts
intermediate
5 commands
Aliases: storage logs, storage resource logs, Azure Storage diagnostic settings, storage audit logs
Quick peek
Open full term page
Storage
field-manual-complete
Storage firewall
A storage firewall is the Azure Storage network security configuration that restricts data-plane access to selected virtual networks, IP ranges, resource instances, private paths, or trusted service exceptions. It controls network reachability to storage services, while identity and authorization still decide whether an allowed request can access data.
Network security
fundamentals
5 commands
Aliases: storage account firewall, Azure Storage firewall, storage network rules, storage network security
Quick peek
Open full term page
Storage
field-manual-complete
Storage key rotation
The controlled process of moving clients to one storage account key while regenerating the other key.
Storage security
intermediate
5 commands
Aliases: storage account key rotation, rotate storage keys, regenerate storage account keys, Azure Storage access key rotation, Azure Storage key rotation, rotate storage account keys, regenerate storage account access key
Quick peek
Open full term page
Storage
complete
Storage account
Microsoft Learn describes an Azure storage account as the resource that contains Azure Storage data objects such as blobs, files, queues, and tables. It provides a unique namespace for data accessible over HTTP or HTTPS, with durability, availability, security, and scalability choices.
Storage account
intermediate
5 commands
Aliases: storage-account, Storage account, Azure Storage account, general-purpose storage account, GPv2 storage account, storage account resource
Quick peek
Open full term page
Storage
complete
Storage account diagnostic settings
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage diagnostics, storage logging, Azure Monitor diagnostic settings for storage, resource logs for storage
Quick peek
Open full term page
Storage
complete
Storage account key
A shared secret that can authorize broad access to a storage account.
Storage platform
intermediate
5 commands
Aliases: storage key, storage account shared key, Azure Storage key, account key
Quick peek
Open full term page
Storage
complete
Storage account minimum TLS
Microsoft Learn describes the storage account minimum TLS setting as the required Transport Layer Security version for requests to Azure Storage. Clients using older TLS versions can be rejected, helping teams enforce stronger encrypted transport for Blob, File, Queue, and Table access.
Storage accounts
fundamentals
5 commands
Aliases: minimum TLS for storage, Azure Storage TLS minimum, storage TLS floor, minimum transport security for storage
Quick peek
Open full term page
Storage
complete
Storage account minimum TLS version
Microsoft Learn identifies minimumTlsVersion as the storage account property that sets the lowest Transport Layer Security version accepted by Azure Storage. Operators configure the value through portal, CLI, PowerShell, templates, or policy to block clients using older TLS versions. settings. consistently. consistently.
Storage accounts
advanced
5 commands
Aliases: minimumTlsVersion, storage minimum TLS version, TLS version setting for storage, Azure Storage TLS version
Quick peek
Open full term page
Storage
command-rich
Primary storage region
The primary storage region is the home region for an Azure Storage account. When an application writes blobs, files, queues, or tables under normal conditions, it writes to the primary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically.
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
command-rich
Secondary storage region
The secondary storage region is the other region involved when an Azure Storage account uses geo-redundant options such as GRS or GZRS. Under normal conditions, applications write to the primary region, and Azure asynchronously copies data to the secondary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended..
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI resource
An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context.
Azure OpenAI
fundamentals
12 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
top-250-pre130-priority-upgraded
Customer managed key for Azure OpenAI
Customer managed key for Azure OpenAI is a production Azure concept tied to Azure OpenAI.
Azure OpenAI
advanced
4 commands
Aliases: Customer-managed key for Azure OpenAI, Customer managed key for Azure OpenAI
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI Service
Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls.
Generative AI
fundamentals
11 commands
Aliases: Azure OpenAI
Quick peek
Open full term page
Storage
premium
Locally redundant storage
Microsoft Learn describes locally redundant storage as Azure Storage redundancy that replicates data within the primary region in a local storage scale unit. LRS is the lowest-cost redundancy option and provides high durability, but it does not protect against regional disasters.
Azure Storage
intermediate
10 commands
Aliases: LRS
Quick peek
Open full term page
Management and Governance
premium
Azure Policy
Azure Policy is a governance service for creating, assigning, and managing rules that evaluate Azure resources.
Azure Policy
fundamentals
7 commands
Aliases: Policy
Quick peek
Open full term page
Management and Governance
premium
Azure subscription
An Azure subscription is a management, billing, and scale unit for Azure resources.
Azure scope
fundamentals
7 commands
Aliases: subscription
Quick peek
Open full term page
Compute
premium
Azure Functions
Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers.
Serverless compute
intermediate
6 commands
Aliases: Functions, Function App, serverless functions
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search