Search Azure terms

Analytics learning-path-anchor Synapse workspace repository A Synapse workspace repository is where a Synapse workspace saves its authoring artifacts when Git integration is enabled. Instead of every notebook, pipeline, SQL script, linked service, or dataset living only in the live workspace, the team works through branches, commits, pull requests, and a publish branch. That gives data engineers a familiar code-review... Synapse Analytics fundamentals 5 commands Aliases: Synapse Git repository, Synapse source control, Synapse code repository, workspace Git integration Quick peek Open full term page

Analytics learning-path-anchor Databricks repo A workspace Git integration, now called Git folders, for versioning notebooks and files used in Databricks development and CI/CD. Databricks fundamentals 4 commands Aliases: Databricks Repos, Databricks Git folder, Azure Databricks Git folders, workspace Git folder Quick peek Open full term page

DevOps premium Service connection Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely. CI/CD fundamentals 6 commands Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection Quick peek Open full term page

Containers premium ACR admin user The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR repository An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each. Azure Container Registry fundamentals 5 commands Aliases: Azure Container Registry repository, container registry repository, image repository Quick peek Open full term page

Containers premium Azure Container Registry A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments. Container images fundamentals 5 commands Aliases: ACR Quick peek Open full term page

DevOps premium Azure DevOps project A workspace inside Azure DevOps for a team to plan, track, code, build, test, deploy, and collaborate on software delivery. Azure DevOps fundamentals 5 commands Aliases: ADO project Quick peek Open full term page

DevOps premium Container image build the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry Deployment workflows intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Web premium Local Git deployment Microsoft Learn describes Local Git deployment for App Service as a method for deploying code from a Git repository on a local computer to an app-hosted Git endpoint. It requires deployment credentials and Source Control Manager basic authentication. Operators should review it with the connected Azure resource settings. App Service intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

DevOps premium Pipeline in Azure DevOps A pipeline in Azure DevOps is an automated build, test, and deployment workflow. Microsoft Learn describes Azure Pipelines as CI/CD for many languages, platforms, and targets, with YAML or classic definitions that connect source changes to repeatable delivery stages. CI/CD fundamentals 5 commands Aliases: Azure Pipelines, ADO pipeline, Azure DevOps CI/CD pipeline, YAML pipeline, Azure Pipeline, DevOps pipeline Quick peek Open full term page

Web premium Zip deploy Zip deploy is an App Service deployment method that pushes a ZIP package to a web app and has Kudu extract or run the package. Microsoft Learn documents ZIP, WAR, JAR, EAR, and individual-file deployment, including the requirement that the deployment archive contain project files at its root. App Service intermediate 5 commands Aliases: ZIP deployment, Kudu ZIP deployment, package deployment, zip push deployment Quick peek Open full term page

Web premium App Service Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it. App Service intermediate 4 commands Aliases: App Service, app service Quick peek Open full term page

Identity premium Client ID A client ID is the application identifier assigned to an app registration by Microsoft Entra ID. Microsoft Learn describes the Application, or client, ID as the value that uniquely identifies an application in the Microsoft identity platform across tenants and clouds. Applications fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Identity premium Client secret A client secret is a password-style credential added to an app registration so a confidential application can authenticate to Microsoft Entra ID. Microsoft Learn recommends managing credentials carefully and also supports certificates and federated credentials for stronger automation patterns and rotation. Applications fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Data Factory Git integration The source-control connection that lets Data Factory authoring use Azure Repos or GitHub branches instead of editing only the live factory mode. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory Git integration, ADF Git integration, data factory git integration Quick peek Open full term page

Analytics premium Data Factory global parameter A factory-level constant that pipelines can reference in expressions and that CI/CD can override per environment. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory global parameter, ADF global parameter, data factory global parameter Quick peek Open full term page

Analytics premium Data Factory publish branch The repository branch where Data Factory stores generated ARM templates after publishing from the collaboration branch. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory publish branch, ADF publish branch, data factory publish branch Quick peek Open full term page

Web premium FTP deployment FTP deployment is an Azure App Service deployment method where application files are uploaded to a web app through FTP or FTPS publishing endpoints. Teams use it to support simple or legacy file-based releases when a full CI/CD pipeline, container image, or ZIP deployment flow is not available. In daily Azure work, it shows up when engineers publish static content, migrate an older web app, recover a small site, rotate deployment credentials, or disable basic publishing after modernization. It is not source control, a build pipeline, a secure secret-management strategy, or the preferred deployment method for regulated production systems. App Service deployment intermediate 4 commands Aliases: FTPS deployment, App Service FTP deployment, FTP/S deployment Quick peek Open full term page

DevOps premium GitHub Actions deployment GitHub Actions deployment is a repository workflow that publishes application code, containers, or infrastructure changes to Azure after selected GitHub events such as push, pull request, or release. Teams use it to standardize builds, approvals, tests, packaging, and deployment to Azure services without relying on manual portal changes. In daily Azure work, it shows up when engineers configure App Service Deployment Center, deploy to a slot, use azure/login, run Bicep deployments, or troubleshoot a failed workflow run. Deployment workflows intermediate 4 commands Aliases: GitHub Actions deploy, GitHub Actions CI/CD deployment, GitHub workflow deployment Quick peek Open full term page

Analytics premium Global parameter Global parameter is a Data Factory value defined once at the factory level so multiple pipelines can reference the same environment or configuration setting. Teams use it to avoid hardcoding repeated values such as storage containers, environment names, control-table names, feature flags, or standard paths across many pipelines. In daily Azure work, it shows up when engineers author pipeline expressions, promote factories through CI/CD, override values per environment, debug parameterized datasets, or troubleshoot missing deployment parameters. Data Factory beginner 4 commands Aliases: ADF global parameter, Data Factory global parameter, factory global parameter Quick peek Open full term page

Identity premium Certificate credential A certificate credential lets an app authenticate with a certificate instead of a shared secret. Applications fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

DevOps verified Release pipeline A release pipeline promotes build artifacts through controlled deployment stages with tasks, approvals, variables, gates, and deployment history. CI/CD fundamentals 6 commands Aliases: Azure DevOps release, classic release pipeline, release definition Quick peek Open full term page

AI and Machine Learning field-manual-complete Training job In Azure Machine Learning, a training job executes model-training code on a selected compute target using a defined environment, data, inputs, outputs, and command or pipeline configuration. The service records status, logs, metrics, artifacts, and metadata so experiments can be monitored, reproduced, and promoted. Azure Machine Learning intermediate 6 commands Aliases: Azure ML training job, Azure Machine Learning job, ML training run, command job, model training job Quick peek Open full term page

DevOps verified OIDC federation OIDC federation in Azure uses workload identity federation to let external workloads exchange trusted identity-provider tokens for Microsoft identity platform access tokens. It removes long-lived secrets for supported scenarios such as GitHub Actions, Kubernetes workloads, Azure Pipelines, and other external compute platforms. CI/CD security fundamentals 5 commands Aliases: OpenID Connect federation, workload identity federation, federated identity credential, secretless CI/CD authentication Quick peek Open full term page

DevOps field-manual-complete Variable group A variable group stores reusable Azure Pipelines variables and protected secrets that approved pipelines can consume during builds or releases. CI/CD fundamentals 4 commands Aliases: Azure Pipelines variable group, pipeline variable group, DevOps variable group, shared pipeline variables Quick peek Open full term page

DevOps top-250-pre130-priority-upgraded GitHub Actions for Azure GitHub Actions for Azure is the set of GitHub workflow patterns and Azure actions used to sign in, build, test, package, deploy, and manage Azure resources from a repository. Teams use it to connect source control to Azure deployments while keeping workflow steps, identities, approvals, and release evidence in versioned automation. In daily Azure work, it shows up when engineers use azure/login, deploy web apps or functions, run Azure CLI scripts, deploy Bicep, push containers, or configure OIDC federation. CI/CD intermediate 4 commands Aliases: Azure GitHub Actions, Azure actions, azure/login, GitHub Actions for Azure Quick peek Open full term page

Networking premium CIDR block A CIDR block expresses an IP address range with an address and prefix length, such as 10.0.0.0/16, for virtual network address space, subnets, and routes. IP addressing fundamentals 3 commands Aliases: CIDR Quick peek Open full term page

Databases learning-path-anchor Cosmos DB emulator The Azure Cosmos DB emulator provides a local environment that emulates Azure Cosmos DB for development and testing without requiring a cloud account. Azure Cosmos DB fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Databases command-rich Cosmos DB for PostgreSQL Azure Cosmos DB for PostgreSQL is a managed PostgreSQL service with Citus distributed tables, currently on a retirement path and not recommended for new projects. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Change data capture in Data Factory A Data Factory capability for processing changed data from supported sources. Data integration intermediate 10 commands Aliases: CDC Quick peek Open full term page

Networking premium ExpressRoute ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before. Hybrid connectivity intermediate 6 commands Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity Quick peek Open full term page

Containers premium Flux extension The Flux extension is the microsoft.flux Kubernetes cluster extension for Azure Kubernetes Service or Azure Arc-enabled Kubernetes that installs Flux v2 controllers for GitOps reconciliation. Teams use it to sync Git, OCI, Helm, or Kustomize sources to Kubernetes clusters so desired configuration is versioned, reconciled, audited, and applied consistently across AKS and Arc-enabled environments. It is not a CI pipeline by itself, a replacement for cluster security, a guarantee that every manifest is safe, or a reason to let unreviewed repository changes modify production clusters. Kubernetes GitOps intermediate 6 commands Aliases: microsoft.flux extension, GitOps Flux extension, AKS Flux extension, Azure Arc Flux extension Quick peek Open full term page

AI and Machine Learning premium Foundry IQ Foundry IQ is a managed knowledge layer for Microsoft Foundry that connects enterprise data into reusable, permission-aware knowledge bases for AI agents. Teams use it to ground agents in approved enterprise knowledge from Azure, SharePoint, OneLake, the web, and Azure AI Search-backed knowledge bases while preserving permissions and reusable retrieval configuration. It is not a general data lake, a replacement for source-system permissions, a guarantee that retrieved content is correct, or a reason to skip citation, freshness, and access reviews. Microsoft Foundry intermediate 6 commands Aliases: Microsoft Foundry IQ, Foundry IQ knowledge base, managed knowledge layer, permission-aware knowledge base Quick peek Open full term page

Networking premium Web Application Firewall Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting. Application security fundamentals 6 commands Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF Quick peek Open full term page

Containers premium AKS network policy An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service. AKS networking Intermediate 5 commands Aliases: Azure Kubernetes Service network policy, aks network policy Quick peek Open full term page

Containers premium API server authorized IP ranges API server authorized IP ranges are an AKS security setting that limits who can reach the Kubernetes control-plane endpoint. Instead of letting any public IP attempt a connection to the API server, the cluster allows only specified public CIDR ranges, such as corporate VPN, jump-host, automation,. Azure Kubernetes Service intermediate 5 commands Aliases: AKS API server authorized IP ranges, authorized API server IP ranges Quick peek Open full term page

Management and Governance premium Bicep build Bicep build is the Bicep CLI command that compiles a Bicep file into an Azure Resource Manager JSON template, optionally writing output to a file or stdout. Bicep intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium Front Door Azure Front Door is Microsoft’s global edge service for modern web applications. Microsoft Learn describes it as a cloud CDN that provides fast, reliable, and secure access to static and dynamic content through Microsoft’s global edge network worldwide. Application delivery and API edge intermediate 5 commands Aliases: Azure Front Door, AFD, Azure Front Door Standard, Azure Front Door Premium, global edge Quick peek Open full term page

Networking premium Front Door profile Front Door profile is the top-level Azure Front Door Standard or Premium resource that groups edge endpoints, routes, origins, domains, rule sets, security associations, and delivery settings. Teams use it to manage a global application entry point without treating each endpoint, route, or origin as a separate product. In daily Azure work, it shows up when engineers review edge architecture, add a new website, tune routing, attach custom domains, configure WAF, or troubleshoot global traffic. It is not the same thing as a single endpoint, DNS name, backend app, CDN cache rule, or web application firewall policy. Application delivery and API edge intermediate 5 commands Aliases: Azure Front Door profile, AFD profile, Front Door Standard/Premium profile Quick peek Open full term page

Management and Governance premium Implicit dependency Implicit dependency is a deployment dependency that Azure Resource Manager infers when one resource references another resource or its properties. ARM deployments fundamentals 5 commands Aliases: Implicit dependency, implicit dependency, implicit-dependency Quick peek Open full term page

Analytics premium Incremental copy Incremental copy is the Azure concept that controls how data platforms move changes without reprocessing every source row or file. Teams see it when working with data factory pipelines, copy activity. It is not a full reload, a one-time migration, a backup job, or a blind append into a lake; that distinction matters because bad assumptions create duplicate records, missed changes. Use the term when reviewing ownership, access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same resource, setting, or behavior. Azure Data Factory Intermediate 5 commands Aliases: incremental load, delta copy, watermark copy, CDC copy, last modified copy Quick peek Open full term page

Containers premium kubeconfig kubeconfig is the client configuration that tells kubectl and related tools which Kubernetes cluster, user credential, context, and namespace to use. Microsoft Learn describes AKS access through credentials retrieved with az aks get-credentials, where context selection determines which cluster receives operational commands. AKS access and administration Intermediate 5 commands Aliases: Kubernetes config file, AKS kubeconfig, kubectl configuration, cluster credentials Quick peek Open full term page

Containers premium Kubenet Kubenet is an AKS network plugin where nodes receive virtual network IP addresses and pods receive IP addresses from a separate pod CIDR, with routing handled through user-defined routes. AKS networking Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure AI Search Azure AI Search is a managed retrieval service for full-text, vector, hybrid, and semantic search across application and enterprise content. It provides search services, indexes, indexers, skillsets, ranking features, security controls, and APIs used by apps, copilots, and knowledge portals. Search fundamentals 4 commands Aliases: Azure AI Search, AI Search, Azure Cognitive Search, enterprise search, vector search, hybrid search, semantic search, Search service Quick peek Open full term page

Containers premium Azure CNI An AKS networking approach where CNI plugins assign pod addresses, route pod traffic, and integrate Kubernetes networking with Azure virtual networks. Kubernetes networking fundamentals 4 commands Aliases: Azure Container Networking Interface Quick peek Open full term page

Containers premium Azure CNI Overlay An AKS networking mode that assigns pods private overlay CIDR addresses while nodes use VNet IPs, conserving subnet address space. Azure Kubernetes Service intermediate 4 commands Aliases: AKS overlay networking Quick peek Open full term page

Management and Governance premium Bicep linter The Bicep linter checks Bicep files for syntax errors and best-practice rule violations during development and CI. Bicep fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Cosmos DB firewall Azure Cosmos DB firewall controls inbound access to a Cosmos DB account by allowing selected IP addresses, IP ranges, Azure services, or virtual network paths. Azure Cosmos DB intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Grounded generation Grounded generation is a generative AI pattern where model responses are based on supplied source material, retrieved enterprise content, tool results, or other approved grounding data. Generative AI intermediate 4 commands Aliases: grounded AI generation, grounded response generation, RAG answer generation Quick peek Open full term page

AI and Machine Learning premium Grounding Grounding is the practice of supplying relevant external information, retrieved content, or tool results so a generative AI model can base its answer on known context. AI platform and search intermediate 4 commands Aliases: AI grounding, model grounding, grounding a prompt Quick peek Open full term page