Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 472 matching terms. Narrow the search to reduce the list.
DevOps
verified
OIDC federation
OIDC federation in Azure uses workload identity federation to let external workloads exchange trusted identity-provider tokens for Microsoft identity platform access tokens. It removes long-lived secrets for supported scenarios such as GitHub Actions, Kubernetes workloads, Azure Pipelines, and other external compute platforms.
CI/CD security
fundamentals
5 commands
Aliases: OpenID Connect federation, workload identity federation, federated identity credential, secretless CI/CD authentication
Quick peek
Open full term page
Networking
premium
CIDR block
A CIDR block expresses an IP address range with an address and prefix length, such as 10.0.0.0/16, for virtual network address space, subnets, and routes.
IP addressing
fundamentals
3 commands
Aliases: CIDR
Quick peek
Open full term page
Networking
premium
Network Security Group
Network Security Group means an Azure rule set that filters inbound and outbound network traffic for subnets or network interfaces. You see it when teams restrict application ports, isolate workloads, permit administration, block unwanted traffic, or document network segmentation. Think of it as a prioritized traffic filter near the workload, not complete application security. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path.
Network security
fundamentals
5 commands
Aliases: NSG
Quick peek
Open full term page
Networking
premium
Application security group
An application security group lets you group virtual machine network interfaces so network security group rules can target application roles instead of explicit IP addresses.
Network security
fundamentals
2 commands
Aliases: ASG, application security group
Quick peek
Open full term page
Identity
field-manual-complete
Security group
A security group is a named set of identities that receive access together.
Identity operations
fundamentals
4 commands
Aliases: Microsoft Entra security group, Entra security group, access group
Quick peek
Open full term page
Security
field-manual-complete
Security recommendation
A security recommendation is a prioritized instruction from Microsoft Defender for Cloud that says, in effect, this resource has a security problem worth reviewing.
Cloud security posture
fundamentals
4 commands
Aliases: Defender for Cloud recommendation, cloud security recommendation, security assessment
Quick peek
Open full term page
Containers
premium
ACR admin user
The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Web
premium
App Service
Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
4 commands
Aliases: App Service, app service
Quick peek
Open full term page
Analytics
premium
Data Factory Git integration
The source-control connection that lets Data Factory authoring use Azure Repos or GitHub branches instead of editing only the live factory mode.
Data integration and orchestration
Intermediate
4 commands
Aliases: Data Factory Git integration, ADF Git integration, data factory git integration
Quick peek
Open full term page
Analytics
premium
Data Factory global parameter
A factory-level constant that pipelines can reference in expressions and that CI/CD can override per environment.
Data integration and orchestration
Intermediate
4 commands
Aliases: Data Factory global parameter, ADF global parameter, data factory global parameter
Quick peek
Open full term page
Analytics
premium
Data Factory publish branch
The repository branch where Data Factory stores generated ARM templates after publishing from the collaboration branch.
Data integration and orchestration
Intermediate
4 commands
Aliases: Data Factory publish branch, ADF publish branch, data factory publish branch
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace repository
A Synapse workspace repository is where a Synapse workspace saves its authoring artifacts when Git integration is enabled. Instead of every notebook, pipeline, SQL script, linked service, or dataset living only in the live workspace, the team works through branches, commits, pull requests, and a publish branch. That gives data engineers a familiar code-review...
Synapse Analytics
fundamentals
5 commands
Aliases: Synapse Git repository, Synapse source control, Synapse code repository, workspace Git integration
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks repo
A workspace Git integration, now called Git folders, for versioning notebooks and files used in Databricks development and CI/CD.
Databricks
fundamentals
4 commands
Aliases: Databricks Repos, Databricks Git folder, Azure Databricks Git folders, workspace Git folder
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB emulator
The Azure Cosmos DB emulator provides a local environment that emulates Azure Cosmos DB for development and testing without requiring a cloud account.
Azure Cosmos DB
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for PostgreSQL
Azure Cosmos DB for PostgreSQL is a managed PostgreSQL service with Citus distributed tables, currently on a retirement path and not recommended for new projects.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Networking
premium
ExpressRoute
ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before.
Hybrid connectivity
intermediate
6 commands
Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity
Quick peek
Open full term page
Containers
premium
Flux extension
The Flux extension is the microsoft.flux Kubernetes cluster extension for Azure Kubernetes Service or Azure Arc-enabled Kubernetes that installs Flux v2 controllers for GitOps reconciliation. Teams use it to sync Git, OCI, Helm, or Kustomize sources to Kubernetes clusters so desired configuration is versioned, reconciled, audited, and applied consistently across AKS and Arc-enabled environments. It is not a CI pipeline by itself, a replacement for cluster security, a guarantee that every manifest is safe, or a reason to let unreviewed repository changes modify production clusters.
Kubernetes GitOps
intermediate
6 commands
Aliases: microsoft.flux extension, GitOps Flux extension, AKS Flux extension, Azure Arc Flux extension
Quick peek
Open full term page
DevOps
premium
Service connection
Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely.
CI/CD
fundamentals
6 commands
Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection
Quick peek
Open full term page
Networking
premium
Web Application Firewall
Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting.
Application security
fundamentals
6 commands
Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
API server authorized IP ranges
API server authorized IP ranges are an AKS security setting that limits who can reach the Kubernetes control-plane endpoint. Instead of letting any public IP attempt a connection to the API server, the cluster allows only specified public CIDR ranges, such as corporate VPN, jump-host, automation,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS API server authorized IP ranges, authorized API server IP ranges
Quick peek
Open full term page
DevOps
premium
Azure DevOps project
A workspace inside Azure DevOps for a team to plan, track, code, build, test, deploy, and collaborate on software delivery.
Azure DevOps
fundamentals
5 commands
Aliases: ADO project
Quick peek
Open full term page
Management and Governance
premium
Bicep build
Bicep build is the Bicep CLI command that compiles a Bicep file into an Azure Resource Manager JSON template, optionally writing output to a file or stdout.
Bicep
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
DevOps
premium
Container image build
the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry
Deployment workflows
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Networking
premium
Front Door
Azure Front Door is Microsoft’s global edge service for modern web applications. Microsoft Learn describes it as a cloud CDN that provides fast, reliable, and secure access to static and dynamic content through Microsoft’s global edge network worldwide.
Application delivery and API edge
intermediate
5 commands
Aliases: Azure Front Door, AFD, Azure Front Door Standard, Azure Front Door Premium, global edge
Quick peek
Open full term page
Networking
premium
Front Door profile
Front Door profile is the top-level Azure Front Door Standard or Premium resource that groups edge endpoints, routes, origins, domains, rule sets, security associations, and delivery settings. Teams use it to manage a global application entry point without treating each endpoint, route, or origin as a separate product. In daily Azure work, it shows up when engineers review edge architecture, add a new website, tune routing, attach custom domains, configure WAF, or troubleshoot global traffic. It is not the same thing as a single endpoint, DNS name, backend app, CDN cache rule, or web application firewall policy.
Application delivery and API edge
intermediate
5 commands
Aliases: Azure Front Door profile, AFD profile, Front Door Standard/Premium profile
Quick peek
Open full term page
Analytics
premium
Incremental copy
Incremental copy is the Azure concept that controls how data platforms move changes without reprocessing every source row or file. Teams see it when working with data factory pipelines, copy activity. It is not a full reload, a one-time migration, a backup job, or a blind append into a lake; that distinction matters because bad assumptions create duplicate records, missed changes. Use the term when reviewing ownership, access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same resource, setting, or behavior.
Azure Data Factory
Intermediate
5 commands
Aliases: incremental load, delta copy, watermark copy, CDC copy, last modified copy
Quick peek
Open full term page
Containers
premium
Kubenet
Kubenet is an AKS network plugin where nodes receive virtual network IP addresses and pods receive IP addresses from a separate pod CIDR, with routing handled through user-defined routes.
AKS networking
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
Local Git deployment
Microsoft Learn describes Local Git deployment for App Service as a method for deploying code from a Git repository on a local computer to an app-hosted Git endpoint. It requires deployment credentials and Source Control Manager basic authentication. Operators should review it with the connected Azure resource settings.
App Service
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
DevOps
premium
Pipeline in Azure DevOps
A pipeline in Azure DevOps is an automated build, test, and deployment workflow. Microsoft Learn describes Azure Pipelines as CI/CD for many languages, platforms, and targets, with YAML or classic definitions that connect source changes to repeatable delivery stages.
CI/CD
fundamentals
5 commands
Aliases: Azure Pipelines, ADO pipeline, Azure DevOps CI/CD pipeline, YAML pipeline, Azure Pipeline, DevOps pipeline
Quick peek
Open full term page
Web
premium
Zip deploy
Zip deploy is an App Service deployment method that pushes a ZIP package to a web app and has Kudu extract or run the package. Microsoft Learn documents ZIP, WAR, JAR, EAR, and individual-file deployment, including the requirement that the deployment archive contain project files at its root.
App Service
intermediate
5 commands
Aliases: ZIP deployment, Kudu ZIP deployment, package deployment, zip push deployment
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL on-demand
Synapse SQL on-demand is the serverless SQL pool model in Azure Synapse Analytics. It lets teams run T-SQL queries over data in the lake without provisioning dedicated warehouse capacity, storing only metadata objects while using external data sources, views, functions, and security objects.
Synapse Analytics
fundamentals
6 commands
Aliases: SQL on-demand, Synapse serverless SQL, serverless SQL in Synapse, built-in serverless SQL pool
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Studio
Synapse Studio is the browser-based workspace experience for Azure Synapse Analytics. It exposes hubs for data, development, integration, monitoring, and management, letting users author notebooks and SQL scripts, build pipelines, configure connections, review access, and work with Git-backed or live artifacts.
Synapse Analytics
fundamentals
6 commands
Aliases: Azure Synapse Studio, Synapse web workspace, Synapse workspace UI, Synapse authoring experience
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace firewall
A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It...
Synapse Analytics
intermediate
6 commands
Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search
Azure AI Search is a managed retrieval service for full-text, vector, hybrid, and semantic search across application and enterprise content. It provides search services, indexes, indexers, skillsets, ranking features, security controls, and APIs used by apps, copilots, and knowledge portals.
Search
fundamentals
4 commands
Aliases: Azure AI Search, AI Search, Azure Cognitive Search, enterprise search, vector search, hybrid search, semantic search, Search service
Quick peek
Open full term page
Management and Governance
premium
Bicep linter
The Bicep linter checks Bicep files for syntax errors and best-practice rule violations during development and CI.
Bicep
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Identity
premium
Client ID
A client ID is the application identifier assigned to an app registration by Microsoft Entra ID. Microsoft Learn describes the Application, or client, ID as the value that uniquely identifies an application in the Microsoft identity platform across tenants and clouds.
Applications
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Identity
premium
Client secret
A client secret is a password-style credential added to an app registration so a confidential application can authenticate to Microsoft Entra ID. Microsoft Learn recommends managing credentials carefully and also supports certificates and federated credentials for stronger automation patterns and rotation.
Applications
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Cosmos DB firewall
Azure Cosmos DB firewall controls inbound access to a Cosmos DB account by allowing selected IP addresses, IP ranges, Azure services, or virtual network paths.
Azure Cosmos DB
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
FTP deployment
FTP deployment is an Azure App Service deployment method where application files are uploaded to a web app through FTP or FTPS publishing endpoints. Teams use it to support simple or legacy file-based releases when a full CI/CD pipeline, container image, or ZIP deployment flow is not available. In daily Azure work, it shows up when engineers publish static content, migrate an older web app, recover a small site, rotate deployment credentials, or disable basic publishing after modernization. It is not source control, a build pipeline, a secure secret-management strategy, or the preferred deployment method for regulated production systems.
App Service deployment
intermediate
4 commands
Aliases: FTPS deployment, App Service FTP deployment, FTP/S deployment
Quick peek
Open full term page
DevOps
premium
GitHub Actions deployment
GitHub Actions deployment is a repository workflow that publishes application code, containers, or infrastructure changes to Azure after selected GitHub events such as push, pull request, or release. Teams use it to standardize builds, approvals, tests, packaging, and deployment to Azure services without relying on manual portal changes. In daily Azure work, it shows up when engineers configure App Service Deployment Center, deploy to a slot, use azure/login, run Bicep deployments, or troubleshoot a failed workflow run.
Deployment workflows
intermediate
4 commands
Aliases: GitHub Actions deploy, GitHub Actions CI/CD deployment, GitHub workflow deployment
Quick peek
Open full term page
Analytics
premium
Global parameter
Global parameter is a Data Factory value defined once at the factory level so multiple pipelines can reference the same environment or configuration setting. Teams use it to avoid hardcoding repeated values such as storage containers, environment names, control-table names, feature flags, or standard paths across many pipelines. In daily Azure work, it shows up when engineers author pipeline expressions, promote factories through CI/CD, override values per environment, debug parameterized datasets, or troubleshoot missing deployment parameters.
Data Factory
beginner
4 commands
Aliases: ADF global parameter, Data Factory global parameter, factory global parameter
Quick peek
Open full term page
Identity
premium
Certificate credential
A certificate credential lets an app authenticate with a certificate instead of a shared secret.
Applications
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB continuous backup
Azure Cosmos DB continuous backup is the backup mode that supports point-in-time restore for supported Cosmos DB resources within a configured retention tier.
Azure Cosmos DB
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
learning-path-anchor
Table
A table is the basic place where structured data lives in a database. Each row is one record, and each column describes one attribute, such as customer ID, order date, amount, or status. In Azure, tables show up in Azure SQL Database, SQL Managed Instance, Synapse dedicated SQL pools, Fabric warehouses, PostgreSQL, MySQL, and...
Database
intermediate
4 commands
Aliases: database table, SQL table, relational table, data table
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB dedicated gateway
Azure Cosmos DB dedicated gateway is provisioned server-side compute that fronts an account and enables the integrated cache for supported NoSQL workloads.
Azure Cosmos DB
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
command-rich
Synapse workspace
A Synapse workspace is the main container where a team builds and operates Azure Synapse Analytics. It gives the team one named place for SQL pools, Spark pools, pipelines, notebooks, linked services, access rules, monitoring, and the connection to the default data lake. The workspace is not just a folder in the portal; it...
Analytics platform
fundamentals
9 commands
Aliases: Azure Synapse workspace, Synapse Analytics workspace, workspace in Azure Synapse, Synapse analytics boundary
Quick peek
Open full term page
Networking
template-specs-upgraded
Route table
Microsoft Learn explains that Azure creates default routes for each virtual network subnet, and custom routes can be placed in route tables associated with subnets. A route table contains routes with address prefixes and next hop types that influence outbound traffic selection.
Routing
fundamentals
7 commands
Aliases: UDR table, Azure route table, custom route table, subnet route table, user-defined route table
Quick peek
Open full term page
DevOps
verified
Release pipeline
A release pipeline promotes build artifacts through controlled deployment stages with tasks, approvals, variables, gates, and deployment history.
CI/CD
fundamentals
6 commands
Aliases: Azure DevOps release, classic release pipeline, release definition
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search