Search Azure terms

Networking field-manual-complete Virtual network An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity. Azure Virtual Network beginner 5 commands Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network Quick peek Open full term page

Networking premium Network Security Group Network Security Group means an Azure rule set that filters inbound and outbound network traffic for subnets or network interfaces. You see it when teams restrict application ports, isolate workloads, permit administration, block unwanted traffic, or document network segmentation. Think of it as a prioritized traffic filter near the workload, not complete application security. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Network security fundamentals 5 commands Aliases: NSG Quick peek Open full term page

Containers premium Azure CNI Overlay An AKS networking mode that assigns pods private overlay CIDR addresses while nodes use VNet IPs, conserving subnet address space. Azure Kubernetes Service intermediate 4 commands Aliases: AKS overlay networking Quick peek Open full term page

Networking premium Azure Firewall Azure Firewall is a managed, stateful network firewall service for filtering traffic to and from Azure virtual network resources. It helps network security and platform teams centralize traffic control, logging, and threat protection across workloads without deploying self-managed firewall appliances for every landing zone. You see it when hub-spoke networks need egress control, applications require segmentation, regulated workloads need inspection, or teams need consistent firewall policy logging. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Network security intermediate 4 commands Aliases: Azure network firewall Quick peek Open full term page

Analytics premium Databricks managed resource group The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources. Azure Databricks intermediate 6 commands Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group Quick peek Open full term page

Web premium App Service VNet integration Microsoft Learn describes App Service virtual network integration as the feature that lets an App Service app access resources in or through an Azure virtual network. It affects outbound traffic from the app; inbound private access uses other controls, such as private endpoints and access restrictions. App Service Networking intermediate 5 commands Aliases: App Service virtual network integration, regional VNet integration, Web App VNet integration Quick peek Open full term page

Containers premium Kubenet Kubenet is an AKS network plugin where nodes receive virtual network IP addresses and pods receive IP addresses from a separate pod CIDR, with routing handled through user-defined routes. AKS networking Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium Service endpoint A service endpoint is a subnet-level Azure Virtual Network capability that provides direct connectivity to supported Azure services over the Microsoft backbone. It extends the subnet identity to the service so the service can allow traffic from selected virtual networks without requiring a public IP address on the client workload. Private access fundamentals 5 commands Aliases: Service endpoint, VNet service endpoint, service endpoint, service-endpoint, subnet service endpoint, virtual network service endpoint Quick peek Open full term page

Networking premium Application security group An application security group lets you group virtual machine network interfaces so network security group rules can target application roles instead of explicit IP addresses. Network security fundamentals 2 commands Aliases: ASG, application security group Quick peek Open full term page

Networking template-specs-upgraded Route table Microsoft Learn explains that Azure creates default routes for each virtual network subnet, and custom routes can be placed in route tables associated with subnets. A route table contains routes with address prefixes and next hop types that influence outbound traffic selection. Routing fundamentals 7 commands Aliases: UDR table, Azure route table, custom route table, subnet route table, user-defined route table Quick peek Open full term page

Analytics field-manual-complete Kusto private endpoint A Kusto private endpoint connects clients on an Azure virtual network to an Azure Data Explorer cluster through Azure Private Link, using private IP addressing so query and ingestion traffic can avoid public internet exposure and follow private DNS and approval controls. Azure Data Explorer advanced 6 commands Aliases: No aliases yet Quick peek Open full term page

Databases verified VNet injection for SQL MI VNet injection for SQL MI means deploying Azure SQL Managed Instance inside a dedicated Azure virtual network subnet that is delegated to Microsoft.Sql/managedInstances, with required network rules so the managed instance has private connectivity and service management access. Azure SQL Managed Instance intermediate 6 commands Aliases: SQL MI VNet injection, SQL Managed Instance subnet integration, SQL MI delegated subnet, managed instance VNet placement Quick peek Open full term page

Networking verified VPN Gateway VPN Gateway is an Azure virtual network gateway that creates encrypted VPN tunnels between an Azure virtual network and on-premises networks, remote clients, or other VNets, using configurations such as site-to-site, point-to-site, and VNet-to-VNet connections. for hybrid networks. Hybrid connectivity fundamentals 6 commands Aliases: Azure VPN Gateway, virtual network gateway for VPN, site-to-site VPN gateway, point-to-site VPN gateway Quick peek Open full term page

Databases field-manual-complete Redis private endpoint A Redis private endpoint gives your application a private IP path to Redis inside an Azure virtual network. Instead of letting clients reach the cache through its public endpoint, you attach a private endpoint to a subnet and connect through Private Link. The cache remains a managed Azure service, but traffic from approved networks resolves to private address space. This is most useful when security policy, compliance rules, or network design require Redis to behave like an internal dependency rather than an internet-exposed service. Cache and in-memory data intermediate 5 commands Aliases: Redis Private Endpoint, Azure Redis private endpoint, Redis endpoint over Private Link, Private Redis endpoint Quick peek Open full term page

Storage field-manual-complete Storage private endpoint A Private Link network interface that lets clients reach one Azure Storage service through a private IP address. Private networking Intermediate 5 commands Aliases: private endpoint for storage, Azure Storage private endpoint, storage Private Link endpoint, private storage access, storage account private link Quick peek Open full term page

Networking field-manual-complete Subnet A subnet is a smaller address range inside an Azure virtual network. It is where many network-connected resources actually land, such as virtual machines, private endpoints, container nodes, and delegated platform services. Subnets let teams separate workloads, apply network security groups, attach route tables, reserve IP space, and control private connectivity. A good subnet plan gives every workload enough addresses and the right network controls. A bad plan creates overlapping ranges, blocked traffic, exhausted IPs, or painful migrations later. Virtual networking fundamentals 5 commands Aliases: Azure subnet, VNet subnet, virtual network subnet, subnet address prefix Quick peek Open full term page

Databases complete SQL managed instance subnet Microsoft Learn describes a SQL Managed Instance subnet as a dedicated subnet in an Azure virtual network that must meet SQL Managed Instance network requirements before deployment. Its address range, network configuration, routing, and available IP capacity determine where managed instances can be placed and expanded. SQL Managed Instance intermediate 5 commands Aliases: Azure SQL Managed Instance subnet, SQL MI subnet, managed instance dedicated subnet Quick peek Open full term page

Storage complete Storage account private endpoint A storage account private endpoint connects a storage service to a private IP address in an Azure virtual network. It lets clients reach Blob, File, Queue, Table, DFS, or Web endpoints over Private Link instead of the public internet, with DNS directing traffic privately. Storage accounts advanced 5 commands Aliases: storage private endpoint, Private Link for storage account, storage Private Link endpoint, private storage endpoint Quick peek Open full term page

Virtual Desktop Infrastructure premium Azure Virtual Desktop Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control. Virtual desktops fundamentals 5 commands Aliases: AVD Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Analytics field-manual-complete Synapse managed virtual network A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet Quick peek Open full term page

Compute premium Azure Functions Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers. Serverless compute intermediate 6 commands Aliases: Functions, Function App, serverless functions Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Compute premium Accelerated networking for VM Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads. Virtual Machines intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Azure Database for MySQL Flexible Server A fully managed Azure database service for MySQL workloads with configurable compute, storage, backups, networking, maintenance, and high availability options. Managed MySQL intermediate 5 commands Aliases: MySQL Flexible Server Quick peek Open full term page

Storage premium Azure Elastic SAN A cloud-native Azure storage area network service that provides scalable, cost-effective, high-performance block storage volumes for compute workloads. Block storage intermediate 5 commands Aliases: Elastic SAN Quick peek Open full term page

Storage premium Azure file share An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover. Files, queues, and tables fundamentals 5 commands Aliases: Azure Files share Quick peek Open full term page

Analytics premium Azure integration runtime Azure integration runtime is the compute infrastructure used by Azure Data Factory and Synapse pipelines to move data, dispatch activities, and connect across network environments. Data integration compute intermediate 5 commands Aliases: Integration Runtime, IR, ADF integration runtime Quick peek Open full term page

Databases premium Azure SQL Database Azure SQL Database is a fully managed relational database service in Azure that provides SQL Server-compatible engines as single databases, elastic pools, and serverless or provisioned compute choices. Microsoft Learn presents it as platform as a service with built-in availability, backups, patching, scaling, and security integration. Database intermediate 5 commands Aliases: Azure SQL DB, Azure SQL Database, Azure SQL pooled database, Azure SQL single database, SQL Database Quick peek Open full term page

Networking premium Azure Bastion A fully managed Azure service that provides secure RDP and SSH access to virtual machines without exposing VM public IP addresses. Remote access fundamentals 4 commands Aliases: Azure Bastion host, Bastion, RDP SSH over Bastion, managed jump box Quick peek Open full term page

Containers premium Azure CNI An AKS networking approach where CNI plugins assign pod addresses, route pod traffic, and integrate Kubernetes networking with Azure virtual networks. Kubernetes networking fundamentals 4 commands Aliases: Azure Container Networking Interface Quick peek Open full term page

Management and Governance premium Azure control plane The Azure control plane is the part of Azure you use to manage resources rather than consume the application or data inside them. Microsoft Learn anchors this term in Azure control plane and data plane, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, the Azure control plane is handled by. Azure Resource Manager intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Azure data plane The Azure data plane is the part of Azure you use after a resource exists, when you interact with the capability that resource provides. Microsoft Learn anchors this term in Azure control plane and data plane, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, data-plane operations are service-specific operations against. Azure Resource Manager fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Azure Files private endpoint Azure Files private endpoint connects Azure file share traffic to a storage account through a private IP address in a virtual network. It helps network, security, and storage teams keep SMB or NFS access on private network paths without exposing file access directly over public endpoints. You see it when regulated workloads need private access, branch users connect through VPN, or applications must mount shares without public storage exposure. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Private connectivity intermediate 4 commands Aliases: Private endpoint for Azure Files, Azure Files Private Link Quick peek Open full term page

Networking premium Network Watcher Network Watcher means an Azure diagnostics service that helps inspect, monitor, and troubleshoot network behavior across supported Azure resources. You see it when teams test connectivity, capture packets, review flow logs, inspect topology, or prove whether a problem is network-related. Think of it as a network evidence toolkit, not a replacement for application logs or security analytics. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Diagnostics fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Azure SQL logical server An Azure SQL logical server is a logical administrative construct for Azure SQL Database and related SQL resources. Microsoft Learn describes it as the central point for managing a collection of databases, including logins, firewall rules, auditing, threat detection policies, and failover groups. Azure SQL Database fundamentals 16 commands Aliases: No aliases yet Quick peek Open full term page

Containers field-manual-complete AKS network plugin An AKS network plugin is the networking choice that decides how Kubernetes pods get IP addresses and how traffic moves inside an Azure Kubernetes Service cluster. AKS networking Intermediate 5 commands Aliases: Azure Kubernetes Service network plugin, aks network plugin Quick peek Open full term page

Storage field-manual-complete Azure Files Azure Files provides managed SMB and NFS file shares in Azure for applications, users, containers, and virtual machines that still need file-system access. Managed file shares fundamentals 5 commands Aliases: Azure file shares, Azure managed file shares, cloud file shares Quick peek Open full term page

AI and Machine Learning field-manual-complete Azure OpenAI private endpoint An Azure OpenAI private endpoint gives your model-calling applications a private network path to an Azure OpenAI resource. Instead of reaching the resource over its public endpoint, approved clients in a virtual network resolve the service name to a private IP address. This is useful for sensitive prompts, internal copilots, and retrieval systems that must stay inside controlled network boundaries. It still requires identity, DNS, and application configuration to be correct. Test callers before lockdown. Azure OpenAI intermediate 5 commands Aliases: OpenAI private endpoint, Azure OpenAI Private Link, private model endpoint, private endpoint for Azure OpenAI Quick peek Open full term page

Databases field-manual-complete Azure SQL private endpoint A database capability or setting in Azure SQL Database that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context. Azure SQL Database intermediate 5 commands Aliases: Azure SQL private endpoint, azure-sql-private-endpoint, azure-sql-database, azure-sql-logical-server, private-endpoint, private-dns-zone, vnet-peering, managed-identity, app-service-vnet-integration, azure-sql-firewall-rule, service-endpoint Quick peek Open full term page

Storage field-manual-complete Private endpoint for Azure Files A private endpoint for Azure Files is the private network path to file shares in a storage account. Instead of mounting or accessing the share through the public file endpoint, clients in approved networks reach a private IP tied to the file service. The share, authentication model, and storage account still matter; the endpoint only changes network reachability. It is especially important for SMB access from Azure workloads, virtual desktops, build systems, and hybrid clients connected through VPN or ExpressRoute. Azure Files advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Private endpoint for Azure OpenAI A private endpoint for Azure OpenAI is the private network doorway to an Azure OpenAI resource. Your application still calls the Azure OpenAI endpoint and authenticates normally, but from approved networks the name can resolve to a private IP instead of a public address. It is commonly used for enterprise chat, RAG, summarization, and agent workloads that handle sensitive prompts or documents. It protects the network path, not the prompt content by itself, so identity, logging, safety, and data controls still matter. Azure OpenAI advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Storage firewall network rule An allow rule that permits selected network sources to reach an Azure Storage account public endpoint. Storage networking intermediate 5 commands Aliases: storage firewall rule, storage account firewall network rule, Azure Storage network ACL rule, storage account network allow rule, Azure Storage firewall network rule, storage account network ACL rule, storage account firewall subnet rule Quick peek Open full term page

Storage field-manual-complete Storage network rule A storage account network access rule that allows selected sources after public access is restricted. Storage networking intermediate 5 commands Aliases: Azure Storage network rules, storage account network rules, storage network ACLs, storage firewall network access, Azure Storage network rule, storage account network rule, storage network ACL rule Quick peek Open full term page

Storage field-manual-complete Storage network rules The selected-network rules that control which sources can reach an Azure Storage account public endpoint. Storage networking Intermediate 5 commands Aliases: storage account network rules, storage firewall rules, storage network ACLs, selected network access, storage account firewall allowlist Quick peek Open full term page

Compute field-manual-complete Virtual machine An Azure compute resource that runs a full guest operating system for workloads needing server-level control. Azure Virtual Machines beginner 5 commands Aliases: Azure VM, VM, cloud virtual server, IaaS virtual machine, virtual machine Quick peek Open full term page

Databases complete SQL managed instance virtual cluster Microsoft Learn describes the SQL Managed Instance virtual cluster as service-managed infrastructure that hosts managed instances inside a customer virtual network subnet. The virtual cluster contains isolated virtual machines and VM groups, supports management operations, and is created or changed as instances are deployed, scaled, or removed. SQL Managed Instance intermediate 5 commands Aliases: SQL MI virtual cluster, Azure SQL Managed Instance virtual cluster, managed instance platform cluster Quick peek Open full term page

Storage complete Storage account public network access Public network access is the storage account setting that controls whether requests can reach the account through public Azure Storage endpoints. Teams pair it with firewalls, virtual network rules, trusted-services exceptions, and private endpoints to decide whether only private network paths should be allowed. Storage accounts advanced 5 commands Aliases: public access for storage account, storage public network access, storage public endpoint access, publicNetworkAccess Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI resource An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context. Azure OpenAI fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Service Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls. Generative AI fundamentals 11 commands Aliases: Azure OpenAI Quick peek Open full term page