Search Azure terms

Integration premium Communication Services Azure Communication Services, the platform that adds voice, video, chat, SMS, email, and calling workflows to custom applications through Azure APIs and SDKs Communications Beginner 3 commands Aliases: Azure Communication Services Quick peek Open full term page

Integration premium Email Communication Services Email Communication Services is the Azure Communication Services email capability used to create email resources, configure domains and senders, and send transactional or application email through Azure. Azure Communication Services intermediate 4 commands Aliases: Azure Communication Services Email, ACS Email, Email Communication Service Quick peek Open full term page

Integration premium Contact messages customer-facing message exchanges that an Azure Communication Services workload sends, receives, tracks, or routes for support, notification, appointment, or service workflows Communication Services intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Trusted Microsoft services access Trusted Microsoft services access is an Azure Storage firewall exception that allows selected Azure services to reach a restricted storage account when their service traffic cannot be represented by virtual network or IP rules. The services still authenticate and must be allowed for supported operations. Azure Storage intermediate 5 commands Aliases: trusted Azure services access, AzureServices bypass, allow trusted Microsoft services, storage trusted services access Quick peek Open full term page

Storage premium Trusted Microsoft services for storage Trusted Microsoft services for Azure Storage are specific Azure services that Microsoft documents as eligible for storage firewall exceptions. Depending on the service, access may be based on tenant registration, supported operations, or managed identity authorization combined with Azure RBAC or Data Lake ACLs. Storage platform intermediate 5 commands Aliases: trusted Azure services for Storage, storage trusted services list, Azure Storage trusted services, trusted services storage firewall Quick peek Open full term page

AI and Machine Learning premium Azure AI services Azure AI services is the family of Azure cloud AI APIs and resources, surfaced through Foundry Tools, for vision, speech, language, translation, content, and generative scenarios. AI services fundamentals 4 commands Aliases: AI services, Azure AI services account, Cognitive Services, Foundry Tools Quick peek Open full term page

AI and Machine Learning premium Azure AI services account An Azure resource that provides endpoints, keys, identity, networking, billing, and monitoring for one or more Azure AI service capabilities. Azure AI services fundamentals 4 commands Aliases: AI services account, Azure AI multi-service resource, Foundry resource, Microsoft.CognitiveServices account Quick peek Open full term page

AI and Machine Learning premium AI services account key An AI services account key is a secret key for a multi-service Azure AI or Microsoft Foundry resource. It can authenticate requests for supported services tied to that resource, making storage, rotation, and access control especially important. Azure AI services intermediate 3 commands Aliases: multi-service account key, Foundry resource key, AIServices account key, Cognitive Services account key Quick peek Open full term page

AI and Machine Learning premium AI services endpoint An AI services endpoint is the base URL for a multi-service Azure AI or Microsoft Foundry resource. Applications combine this endpoint with a supported API path and authentication method to call the resource. Azure AI services fundamentals 3 commands Aliases: multi-service endpoint, Foundry resource endpoint, AIServices endpoint, Cognitive Services endpoint Quick peek Open full term page

AI and Machine Learning premium AI services resource An AI services resource is the Azure resource, commonly Microsoft.CognitiveServices/accounts with kind AIServices, that provides the governance scope for AI service access, networking, billing, monitoring, keys, endpoints, model deployments, projects, and related configuration. Azure AI services fundamentals 3 commands Aliases: Azure AI services resource, Foundry resource, AIServices resource, Cognitive Services account Quick peek Open full term page

AI and Machine Learning premium Cognitive services account key A key used to authenticate to an Azure AI services resource. AI platform and search intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Migration verified Recovery Services vault A Recovery Services vault stores backup and site recovery data and configuration. Backup and recovery fundamentals 8 commands Aliases: No aliases yet Quick peek Open full term page

Security field-manual-complete Private Link for data services Private Link for data services means your applications connect to databases, storage, and analytics services through private endpoints instead of public endpoints. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Storage account trusted services Storage account trusted services are Azure service exceptions that can pass a storage firewall when selected network access is restricted. They help specific Microsoft services reach storage for approved scenarios, but they do not replace authentication, authorization, logging, private access review, or least-privilege design. Storage network security fundamentals 5 commands Aliases: trusted Microsoft services for storage, AzureServices bypass, storage trusted services exception Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace managed identity A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service... Synapse Analytics intermediate 8 commands Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity Quick peek Open full term page

Containers premium AKS network policy An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service. AKS networking Intermediate 5 commands Aliases: Azure Kubernetes Service network policy, aks network policy Quick peek Open full term page

Internet of Things premium IoT Hub IoT Hub is the managed Azure service that provides secure, bidirectional communication between IoT applications and their connected devices at scale. Device messaging intermediate 5 commands Aliases: Azure IoT Hub, device-to-cloud messaging, cloud-to-device messaging, IoT message hub, IoT Hub endpoint Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace firewall A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It... Synapse Analytics intermediate 6 commands Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall Quick peek Open full term page

Containers premium Dapr Dapr is a distributed application runtime that gives microservices common building-block APIs for service invocation, pub/sub, bindings, state, workflows, and observability. Distributed applications intermediate 4 commands Aliases: Dapr, DAPR Quick peek Open full term page

Containers premium Dapr service invocation Dapr service invocation is a Dapr building block for calling another application by Dapr app ID instead of hard-coding its network address in the caller. Azure Container Apps intermediate 4 commands Aliases: Dapr service invocation, DAPR service invocation Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace repository A Synapse workspace repository is where a Synapse workspace saves its authoring artifacts when Git integration is enabled. Instead of every notebook, pipeline, SQL script, linked service, or dataset living only in the live workspace, the team works through branches, commits, pull requests, and a publish branch. That gives data engineers a familiar code-review... Synapse Analytics fundamentals 5 commands Aliases: Synapse Git repository, Synapse source control, Synapse code repository, workspace Git integration Quick peek Open full term page

Containers learning-path-anchor System node pool A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the... Azure Kubernetes Service intermediate 4 commands Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool Quick peek Open full term page

Identity learning-path-anchor System-assigned managed identity A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request... Managed identities intermediate 4 commands Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity Quick peek Open full term page

Storage learning-path-anchor Table batch operation A Table batch operation lets an application change several Azure Table entities together instead of sending separate requests and hoping they all succeed. It is useful when records belong to the same partition and must stay consistent, such as a header row plus related detail rows. The important limitation is strict: the entities must... Table Storage intermediate 4 commands Aliases: entity group transaction, Table Storage batch, batch transaction, partition-scoped batch Quick peek Open full term page

AI and Machine Learning learning-path-anchor Text to speech Text to speech in Azure AI Speech converts written text or SSML into synthesized audio using neural voices, custom voice options, language support, and APIs. Teams use it to add spoken responses to apps, contact centers, accessibility tools, devices, and media workflows while governing region, keys, networking, and quota. Azure AI services fundamentals 4 commands Aliases: Text to speech, text to speech, Azure Text to speech, Microsoft Learn Text to speech, TTS, speech synthesis, Azure AI Speech synthesis, neural voices, SSML speech Quick peek Open full term page

Analytics command-rich Synapse workspace A Synapse workspace is the main container where a team builds and operates Azure Synapse Analytics. It gives the team one named place for SQL pools, Spark pools, pipelines, notebooks, linked services, access rules, monitoring, and the connection to the default data lake. The workspace is not just a folder in the portal; it... Analytics platform fundamentals 9 commands Aliases: Azure Synapse workspace, Synapse Analytics workspace, workspace in Azure Synapse, Synapse analytics boundary Quick peek Open full term page

AI and Machine Learning premium Computer Vision the Azure AI capability that helps applications understand images, read text, detect visual features, and return structured insights from pictures or screenshots Azure AI services fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

Networking verified Public IP address A public IP address exposes an Azure resource to the internet or enables outbound communication. IP addressing fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Service Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls. Generative AI fundamentals 11 commands Aliases: Azure OpenAI Quick peek Open full term page

Analytics premium Change data capture in Data Factory A Data Factory capability for processing changed data from supported sources. Data integration intermediate 10 commands Aliases: CDC Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Hybrid and Multicloud premium Azure Local Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc. Distributed infrastructure advanced 6 commands Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure Quick peek Open full term page

Analytics premium Azure Synapse Analytics Azure Synapse Analytics is Microsoft’s integrated analytics service for enterprise data warehousing, big data, data integration, and exploratory analytics. Synapse Analytics intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Cosmos DB serverless account Cosmos DB serverless account is a Cosmos DB account created with the serverless capacity mode so databases and containers are billed by consumed request units and storage. It turns serverless billing into an account-level design choice rather than a per-container toggle. You see it when teams create accounts for prototypes, seasonal apps, low-duty-cycle workloads, or services with uncertain early demand. The production check is whether the account capacity mode supports the API, scale target, compliance need, and migration plan. Document the decision in code, templates, metrics, and runbooks. Azure Cosmos DB intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Data Factory Azure’s managed data integration service for creating pipelines that move, transform, schedule, and orchestrate data across cloud, SaaS, and hybrid stores. Data integration and orchestration Intermediate 6 commands Aliases: Data Factory, Data Factory, data factory Quick peek Open full term page

Storage premium Data Lake analytics workload A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric. Data Lake Storage Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Databricks access connector A first-party Azure resource that gives Azure Databricks a managed identity for Unity Catalog storage credentials and other governed service access. Azure Databricks intermediate 6 commands Aliases: Access Connector for Azure Databricks, Azure Databricks access connector, Databricks managed identity connector Quick peek Open full term page

Networking premium ExpressRoute ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before. Hybrid connectivity intermediate 6 commands Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity Quick peek Open full term page

AI and Machine Learning premium Face API The Face API is an Azure AI service API that provides face detection, recognition, verification, identification, grouping, and related face analysis capabilities. Teams use it to build applications that detect faces in images, compare faces, verify identity scenarios, support liveness workflows, or organize face-related image data under approved responsible AI controls. It is not a general computer vision labeler, proof of identity by itself, a surveillance policy, or permission to use biometric capabilities without legal, privacy, and access review. Azure AI services intermediate 6 commands Aliases: Azure AI Face, Azure Face API, Face service Quick peek Open full term page

AI and Machine Learning premium Face service Face service is an Azure AI service that provides APIs for face detection, face analysis, verification, identification, grouping, and liveness-related workflows under approved access controls. Teams use it to build applications that detect faces in images, compare face evidence, verify approved identity scenarios, support liveness checks, or manage face lists within privacy and responsible AI controls. It is not a general image classification service, legal approval to process biometric data, a replacement for human identity review, or a guarantee that every face decision is correct. Azure AI services intermediate 6 commands Aliases: Azure AI Face, Azure AI Face service, Azure Face service, Face API, Azure AI services Face Quick peek Open full term page

Databases premium Failover Failover is the process of moving an application, database, or service workload from a primary resource to a secondary resource when the primary is unavailable, unhealthy, or intentionally switched. Teams use it to keep a business service running by directing traffic, reads, writes, or recovery operations to a standby region, zone, replica, failover group, or disaster recovery target. It is not a backup by itself, a promise of zero data loss, automatic repair for every dependency, or proof that clients, DNS, identity, and downstream services will follow correctly. Business continuity intermediate 6 commands Aliases: service failover, regional failover, database failover, planned failover, unplanned failover Quick peek Open full term page

Storage premium File service endpoint A File service endpoint is the Azure Storage endpoint used by clients and services to access Azure Files shares in a storage account through supported protocols and network paths. Teams use it to connect applications, users, file sync agents, and automation to Azure file shares through the correct public endpoint, private endpoint, or virtual network service endpoint path. It is not a file share itself, a private endpoint by itself, a DNS record alone, authorization proof, or a guarantee that SMB, NFS, FileREST, firewall, and identity settings all match. Azure Files intermediate 6 commands Aliases: Azure Files endpoint, storage file endpoint, file endpoint, Azure Storage file service endpoint Quick peek Open full term page

AI and Machine Learning premium Form Recognizer Form Recognizer is the former name for Azure AI Document Intelligence, an Azure AI service that analyzes documents and extracts text, tables, layout, and structured fields. Teams use it to turn invoices, receipts, IDs, contracts, forms, and scanned documents into structured data for applications, workflow automation, search indexing, review queues, and compliance processing. It is not a human legal review, a guarantee that every extracted field is correct, a storage system for regulated documents, or a reason to skip confidence thresholds and validation logic. Azure AI Document Intelligence intermediate 6 commands Aliases: Azure Form Recognizer, Azure AI Document Intelligence, Document Intelligence, Azure AI Form Recognizer Quick peek Open full term page

AI and Machine Learning premium Foundry hub A Foundry hub is a hub-style Microsoft Foundry resource used in selected scenarios to group AI projects with shared security, connections, data access, and governance settings. Teams use it to organize related AI projects that need common connections, managed identities, network controls, storage, security review, and platform governance across teams or application portfolios. It is not a whole Azure tenant, a model deployment by itself, a replacement for project-level permissions, or the required resource shape for every modern Foundry scenario. Microsoft Foundry intermediate 6 commands Aliases: Azure AI Foundry hub, Foundry hub resource, hub-based project, AI hub Quick peek Open full term page

Containers premium Kubernetes Deployment A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications. Kubernetes workloads Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Service Bus Azure Service Bus is a fully managed enterprise message broker with message queues and publish-subscribe topics. It helps decouple applications and services, load-balance work across competing consumers, route data across boundaries, and coordinate transactional workflows that require reliable messaging, ordering, sessions, duplicate detection, and dead-letter handling. Messaging fundamentals 6 commands Aliases: Azure Service Bus, Service Bus Messaging Quick peek Open full term page

Analytics premium Synapse SQL administrator A Synapse SQL administrator is the Synapse RBAC role focused on serverless SQL access and SQL artifacts. It grants broad serverless SQL pool permissions plus create, read, update, and delete access to published SQL scripts, credentials, and linked services within a workspace. Synapse Analytics intermediate 6 commands Aliases: Synapse SQL Administrator, Synapse SQL admin, SQL administrator in Synapse, Synapse SQL admin role Quick peek Open full term page

Storage premium Account SAS An account SAS is a powerful storage access token signed with the account key. It can grant limited access across multiple storage services, but because it is key-based and hard to audit, keep permissions narrow and expiry short. Blob Storage fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium ACR import ACR import is a server-side image copy. Instead of pulling an image to your machine and pushing it back, Azure copies it into your registry directly. It is useful for migration, mirroring, controlled base images, and pipeline cleanup. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium AKS cluster Microsoft Learn describes Azure Kubernetes Service as a managed Kubernetes service for deploying and managing containerized applications. An AKS cluster provides the managed Kubernetes control plane, node pools, networking, identity, scaling, and Azure integration points for running containers in Azure production environments. Azure Kubernetes Service fundamentals 5 commands Aliases: Azure Kubernetes cluster, AKS managed cluster, Kubernetes cluster in Azure Quick peek Open full term page