Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 498 matching terms. Narrow the search to reduce the list.
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
Defender for Containers
Microsoft Defender for Containers is a Defender for Cloud plan that provides security posture, vulnerability assessment, and threat protection for containerized assets such as Kubernetes clusters, workloads, registries, and images.
Azure Kubernetes Service
intermediate
4 commands
Aliases: Microsoft Defender for Containers, container protection plan, Defender container security
Quick peek
Open full term page
Containers
premium
Container image digest
the immutable sha256 reference that identifies the exact container image manifest Azure pulls during deployment
Container images
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container image tag
the human-readable label teams use to version, promote, and find container images in a registry
Container images
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container image
A container image is the sealed package that a container runtime starts. It contains the application, runtime, libraries, filesystem layers, and metadata needed to create containers the same way each time. Teams push images to a registry and then reference them from.
Container images
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container registry
A container registry is the place where teams keep the container images they build and deploy. In Azure, this usually means Azure Container Registry, a private service that stores repositories, tags, image manifests, Helm charts, and other OCI artifacts. Developers push images.
Container registry
fundamentals
5 commands
Aliases: ACR, Azure Container Registry
Quick peek
Open full term page
Management and Governance
premium
Bicep private registry
A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules.
Bicep
fundamentals
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
ACR build
ACR build lets Azure Container Registry build an image in the cloud from source context or a Dockerfile. It is handy when you do not want a local Docker engine or want a pipeline to build and push directly in Azure.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR geo-replication
ACR geo-replication keeps container images closer to workloads in multiple regions. Developers push to one registry, and Azure replicates content so regional clusters can pull faster and more reliably, assuming the registry uses the Premium tier.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR import
ACR import is a server-side image copy. Instead of pulling an image to your machine and pushing it back, Azure copies it into your registry directly. It is useful for migration, mirroring, controlled base images, and pipeline cleanup.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
ACR Task
An ACR Task is automation inside Azure Container Registry for building, testing, patching, or maintaining container images. Instead of relying only on a developer laptop or separate build server, the registry can run a build from source, a.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry Task, ACR Tasks, registry task
Quick peek
Open full term page
Containers
premium
Connected registry
an Azure Container Registry capability that keeps container images available in remote, edge, or intermittently connected environments by syncing with a parent registry
Azure Container Registry
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Image pull secret
Image pull secret is a Kubernetes secret that stores registry credentials so pods can pull private container images at deployment time.
Azure Container Registry
intermediate
5 commands
Aliases: Image pull secret, image pull secret, image-pull-secret
Quick peek
Open full term page
Containers
premium
Kubelet identity
Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
AKS identity
Intermediate
5 commands
Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity
Quick peek
Open full term page
Security
premium
Secret
A secret is sensitive data that Azure Key Vault stores and controls, such as a password, API key, token, or connection string. Secrets have names, values, versions, metadata, and access controls, and Key Vault encrypts them at rest through audited operations.
Secrets and keys
fundamentals
5 commands
Aliases: Azure secret, Key Vault secret, secret value, application secret, stored credential
Quick peek
Open full term page
Containers
premium
AKS Windows node pool
An AKS Windows node pool is a group of Windows Server worker nodes in an AKS cluster, used to run Windows container workloads while Linux pools continue to host core Kubernetes system components.
AKS
intermediate
3 commands
Aliases: Windows node pool, Windows Server node pool, AKS Windows containers
Quick peek
Open full term page
Containers
verified
OCI artifact
OCI artifacts are registry-stored packages that follow the Open Container Initiative distribution model. In Azure Container Registry, teams can store container images plus related artifacts such as Helm charts, signatures, SBOMs, scan results, and other supply-chain files managed with tools like ORAS.
Azure Container Registry
intermediate
5 commands
Aliases: Open Container Initiative artifact, ORAS artifact, ACR OCI artifact, supply-chain artifact
Quick peek
Open full term page
Containers
verified
Registry private endpoint
A registry private endpoint lets workloads reach Azure Container Registry through private network addressing instead of the public registry endpoint. Your registry remains a managed Azure service, but clients such as AKS nodes, self-hosted build agents, virtual machines, or container platforms connect
Azure Container Registry
intermediate
5 commands
Aliases: ACR private endpoint, Azure Container Registry Private Link, private registry endpoint, container registry private endpoint
Quick peek
Open full term page
DevOps
premium
Container image build
the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry
Deployment workflows
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
field-manual-complete
Blob container
A blob container is the named bucket inside an Azure Storage account where blobs live.
Blob Storage
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps
A serverless Azure service for running containerized apps and jobs without directly operating Kubernetes clusters.
Serverless containers
fundamentals
5 commands
Aliases: Azure Container Apps
Quick peek
Open full term page
Containers
premium
Container Apps custom domain
A custom hostname assigned to a Container App ingress endpoint.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps environment variable
An environment variable passed into a Container Apps container.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps ingress
The Container Apps setting that controls whether and how HTTP or TCP traffic reaches a container app.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps replica
a running instance of a Container Apps revision that is added or removed as Azure Container Apps scales the workload
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps session
an isolated, short-lived execution environment from a Container Apps dynamic session pool, often used for sandboxed code or custom runtime tasks
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps traffic split
percentage-based Container Apps ingress routing that sends traffic to active revisions or labels for canary, blue-green, or A/B releases
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps workload profile
the Container Apps environment compute profile that controls resource size, scaling model, isolation, and billing behavior for deployed apps
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Dedicated container throughput
A database capability or setting in Azure Cosmos DB that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context.
Azure Cosmos DB
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Azure Container Storage
A cloud-based volume management, deployment, and orchestration service built natively for containers and integrated with Kubernetes persistent volumes.
Container storage
intermediate
4 commands
Aliases: ACS for containers
Quick peek
Open full term page
Containers
premium
Container Apps job
A Container Apps resource for running scheduled, event-driven, or manual containerized tasks to completion.
Azure Container Apps
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
premium
Cosmos DB container
A Cosmos DB container is the unit that stores items and defines data behavior such as partition key, indexing policy, throughput, time to live, and unique keys. Microsoft Learn describes containers as resources inside databases that distribute data and requests across logical partitions.
Azure Cosmos DB
intermediate
4 commands
Aliases: Azure Cosmos DB container, NoSQL container, Cosmos container
Quick peek
Open full term page
Web
premium
Custom container web app
an Azure App Service web app that runs a team-supplied container image instead of a built-in runtime stack.
App Service
intermediate
4 commands
Aliases: App Service custom container, Web App for Containers, containerized App Service app
Quick peek
Open full term page
Databases
premium
Dedicated throughput container
A dedicated throughput container is an Azure Cosmos DB container with throughput provisioned directly on that container instead of sharing database-level throughput with other containers.
Cosmos DB
intermediate
4 commands
Aliases: dedicated container throughput, container-level throughput, Cosmos DB dedicated throughput container
Quick peek
Open full term page
Storage
premium
Container access level
the Blob Storage container setting that decides whether anonymous clients can read no data, individual blobs, or container listings and blobs
Storage platform
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container group
the Azure Container Instances unit where containers share scheduling, lifecycle, local network, exposed endpoints, resources, and storage volumes
Serverless containers
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Insights
Azure Monitor views and data collection used to understand Kubernetes cluster and workload health
Monitoring
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Instances
Azure serverless container compute for running container groups without managing virtual machines or a full orchestrator
Serverless containers
fundamentals
3 commands
Aliases: ACI
Quick peek
Open full term page
Storage
premium
Container public access level
the Blob Storage container setting that decides whether anonymous reads are private, blob-only, or container-level
Blob Storage access
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Container soft delete
the Blob Storage protection feature that lets teams restore deleted containers during a configured retention window
Blob Storage protection
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container App environment
Microsoft Learn describes a Container Apps environment as a secure boundary around one or more container apps and jobs. The runtime manages the environment by handling OS upgrades, scale operations, failover procedures, resource balancing, shared networking, and observability settings for the workloads that run inside it.
Serverless containers
fundamentals
5 commands
Aliases: Container App environment, app-service-plan, azure-kubernetes-service, azure-monitor, container app environment, container-app-environment, container-apps, container-apps-ingress, container-apps-managed-environment, container-apps-revision, container-apps-secret, container-apps-workload-profile, managed-identity
Quick peek
Open full term page
Containers
verified
Container Apps certificate
A certificate used for TLS on a Container Apps custom domain.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
verified
Container Apps exec
An interactive command execution feature for a running Container App replica.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
verified
Container Apps log stream
A live log stream for a Container App replica or revision.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps managed environment
A Container Apps managed environment is the shared home where one or more Azure Container Apps and jobs run. It is not your container image or one app instance; it is the boundary around the runtime, networking, logging, certificates, Dapr settings, and workload profile capacity that those apps use. Teams choose an environment before creating.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps revision
Microsoft Learn explains that a Container Apps revision is created at first deployment and whenever revision-scope settings change. Revision mode controls whether one or multiple revisions stay active, enabling traffic splitting, labels, rollbacks, and safer updates without changing the whole container app resource. in controlled production releases.
Azure Container Apps
intermediate
5 commands
Aliases: Container Apps revision, active-revision, container apps revision, container-app-environment, container-apps, container-apps-ingress, container-apps-revision, container-apps-traffic-split, container-image, container-image-digest, deployment-labels, deployment-slot, inactive-revision, keda
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps scale rule
A Container Apps scale rule tells Azure Container Apps when to run more or fewer replicas of an app revision. Instead of guessing capacity manually, you define a trigger such as HTTP concurrency, CPU, memory, Service Bus messages, Kafka lag, or another KEDA-supported event source. The rule works with minimum and maximum replica limits, so.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps secret
Microsoft Learn describes Container Apps secrets as application-scoped values that can be stored directly or referenced from Azure Key Vault. Revisions can use them through environment variables, registry credentials, or scale rules, while managed identity controls access to Key Vault references. during application configuration and rotation.
Azure Container Apps
intermediate
5 commands
Aliases: Container Apps secret, app-service-app-setting, client-secret, container apps secret, container-apps, container-apps-environment-variable, container-apps-revision, container-apps-secret, container-registry, keda, key-vault, key-vault-access-policy, managed-identity, secret
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search