Search Azure terms

Containers field-manual-complete Container registry A container registry is the place where teams keep the container images they build and deploy. In Azure, this usually means Azure Container Registry, a private service that stores repositories, tags, image manifests, Helm charts, and other OCI artifacts. Developers push images. Container registry fundamentals 5 commands Aliases: ACR, Azure Container Registry Quick peek Open full term page

Containers premium Azure Container Registry A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments. Container images fundamentals 5 commands Aliases: ACR Quick peek Open full term page

Management and Governance premium Bicep private registry A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules. Bicep fundamentals 6 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Connected registry an Azure Container Registry capability that keeps container images available in remote, edge, or intermittently connected environments by syncing with a parent registry Azure Container Registry intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

DevOps premium Container image build the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry Deployment workflows intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Web premium Custom container web app an Azure App Service web app that runs a team-supplied container image instead of a built-in runtime stack. App Service intermediate 4 commands Aliases: App Service custom container, Web App for Containers, containerized App Service app Quick peek Open full term page

Containers premium Defender for Containers Microsoft Defender for Containers is a Defender for Cloud plan that provides security posture, vulnerability assessment, and threat protection for containerized assets such as Kubernetes clusters, workloads, registries, and images. Azure Kubernetes Service intermediate 4 commands Aliases: Microsoft Defender for Containers, container protection plan, Defender container security Quick peek Open full term page

Containers premium Container image digest the immutable sha256 reference that identifies the exact container image manifest Azure pulls during deployment Container images intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container image tag the human-readable label teams use to version, promote, and find container images in a registry Container images fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Instances Azure serverless container compute for running container groups without managing virtual machines or a full orchestrator Serverless containers fundamentals 3 commands Aliases: ACI Quick peek Open full term page

Containers field-manual-complete Container Apps secret Microsoft Learn describes Container Apps secrets as application-scoped values that can be stored directly or referenced from Azure Key Vault. Revisions can use them through environment variables, registry credentials, or scale rules, while managed identity controls access to Key Vault references. during application configuration and rotation. Azure Container Apps intermediate 5 commands Aliases: Container Apps secret, app-service-app-setting, client-secret, container apps secret, container-apps, container-apps-environment-variable, container-apps-revision, container-apps-secret, container-registry, keda, key-vault, key-vault-access-policy, managed-identity, secret Quick peek Open full term page

Containers field-manual-complete Container image A container image is the sealed package that a container runtime starts. It contains the application, runtime, libraries, filesystem layers, and metadata needed to create containers the same way each time. Teams push images to a registry and then reference them from. Container images fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers verified Registry private endpoint A registry private endpoint lets workloads reach Azure Container Registry through private network addressing instead of the public registry endpoint. Your registry remains a managed Azure service, but clients such as AKS nodes, self-hosted build agents, virtual machines, or container platforms connect Azure Container Registry intermediate 5 commands Aliases: ACR private endpoint, Azure Container Registry Private Link, private registry endpoint, container registry private endpoint Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Containers premium Event-driven job An Event-driven job in Azure Container Apps starts job executions when a configured scale rule detects work from an event source. Teams use it to run finite container work such as queue processing, batch enrichment, report generation, or cleanup only when events or messages are waiting. It is not a continuously running container app, an AKS deployment, a scheduled job, or a guarantee that every event is processed exactly once. In production, confirm job trigger type, scale rule, minimum and maximum executions, polling interval, image version, secret references, managed identity, execution status, logs, retries, and queue depth before treating the. Azure Container Apps intermediate 6 commands Aliases: Container Apps event-driven job, KEDA job, event-triggered container job Quick peek Open full term page

DevOps premium Service connection Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely. CI/CD fundamentals 6 commands Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection Quick peek Open full term page

Containers premium ACR admin user The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR build ACR build lets Azure Container Registry build an image in the cloud from source context or a Dockerfile. It is handy when you do not want a local Docker engine or want a pipeline to build and push directly in Azure. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR geo-replication ACR geo-replication keeps container images closer to workloads in multiple regions. Developers push to one registry, and Azure replicates content so regional clusters can pull faster and more reliably, assuming the registry uses the Premium tier. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR import ACR import is a server-side image copy. Instead of pulling an image to your machine and pushing it back, Azure copies it into your registry directly. It is useful for migration, mirroring, controlled base images, and pipeline cleanup. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR manifest An ACR manifest is the record behind an image tag. It describes the image layers and configuration, and its digest is the exact content identity. Tags can move, but a manifest digest is what proves the precise image version. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR quarantine policy ACR quarantine policy is a safety gate for images. Newly pushed images can be hidden from normal users until security scanning or approval clears them, reducing the chance that unreviewed images are pulled into workloads. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR repository An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each. Azure Container Registry fundamentals 5 commands Aliases: Azure Container Registry repository, container registry repository, image repository Quick peek Open full term page

Containers premium ACR retention policy An ACR retention policy is a registry-level cleanup rule for untagged manifests in Azure Container Registry. When enabled on a supported registry, it schedules untagged manifests for deletion after the configured number of days, helping control storage growth while requiring care because deleted image data cannot be recovered. Azure Container Registry intermediate 5 commands Aliases: Azure Container Registry retention policy, ACR untagged manifest retention, registry retention policy Quick peek Open full term page

Containers premium ACR scope map An ACR scope map is a reusable set of repository permissions in Azure Container Registry. It groups actions such as content read, content write, delete, and metadata access, then applies that permission boundary to one or more non-Microsoft Entra registry tokens. Azure Container Registry intermediate 5 commands Aliases: Azure Container Registry scope map, repository scope map, registry token scope map Quick peek Open full term page

Containers premium ACR Task An ACR Task is automation inside Azure Container Registry for building, testing, patching, or maintaining container images. Instead of relying only on a developer laptop or separate build server, the registry can run a build from source, a. Azure Container Registry intermediate 5 commands Aliases: Azure Container Registry Task, ACR Tasks, registry task Quick peek Open full term page

Containers premium ACR webhook An ACR webhook is an Azure Container Registry event notification that sends an HTTP or HTTPS request to a configured endpoint when registry actions occur, such as image push or delete. It can be registry-wide or scoped to a repository or tag, including regional replicas. Azure Container Registry intermediate 5 commands Aliases: Azure Container Registry webhook, registry webhook, ACR event webhook Quick peek Open full term page

Containers premium Active revision Active revision is the Container Apps revision that is allowed to receive traffic. In everyday Azure work, teams use it to roll out a new container image, keep a rollback candidate warm, or split traffic between versions. The useful evidence is revision mode, active state, replica health, labels, and traffic weight. Treat the term as Azure Container Apps intermediate 5 commands Aliases: Container Apps active revision, revision activation, active Container Apps revision Quick peek Open full term page

Integration premium Event Hubs emulator The Event Hubs emulator is a local development tool that simulates Azure Event Hubs so developers can test producers and consumers without connecting to the cloud. Teams use it to prototype and test Event Hubs applications locally before connecting code to a real Azure namespace. It is not a production Event Hubs namespace, a substitute for scale testing, or a guarantee that cloud networking, identity, quota, or geo-recovery behavior works. In production, confirm the namespace, event hub, partitions, identity, network path, consumer groups, checkpoints, metrics, owner, and rollback plan before treating the stream design as healthy. Event Hubs intermediate 5 commands Aliases: Azure Event Hubs emulator, local Event Hubs emulator, Event Hubs local emulator Quick peek Open full term page

DevOps premium Image promotion Image promotion is the controlled process of moving an approved VM or container image version from build or test use into wider production use. Deployment workflows intermediate 5 commands Aliases: Image promotion, image promotion, image-promotion Quick peek Open full term page

Containers premium Image pull secret Image pull secret is a Kubernetes secret that stores registry credentials so pods can pull private container images at deployment time. Azure Container Registry intermediate 5 commands Aliases: Image pull secret, image pull secret, image-pull-secret Quick peek Open full term page

Containers premium Inactive revision Inactive revision is an Azure Container Apps revision that remains in the revision list but is not actively serving traffic or running replicas. Azure Container Apps intermediate 5 commands Aliases: Inactive revision, inactive revision, inactive-revision Quick peek Open full term page

Containers premium Kubelet identity Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. AKS identity Intermediate 5 commands Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity Quick peek Open full term page

Containers premium Helm Helm is a Kubernetes package manager that deploys applications using charts, values files, and release history, including workloads running on AKS. AKS beginner 4 commands Aliases: Helm charts, Kubernetes Helm, Helm Quick peek Open full term page

AI and Machine Learning premium ML environment ML environment is a versioned Azure Machine Learning runtime definition that packages software dependencies, base image, and execution settings for jobs or deployments. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Azure Machine Learning intermediate 4 commands Aliases: AML environment, Azure ML environment, ML runtime environment, Machine Learning environment, runtime environment Quick peek Open full term page

Containers field-manual-complete ACR token An ACR token is a registry-scoped credential tied to a scope map, used when a non-Entra client needs limited access to selected repositories. Azure Container Registry intermediate 5 commands Aliases: Azure Container Registry token, registry token, repository-scoped token Quick peek Open full term page

Containers verified OCI artifact OCI artifacts are registry-stored packages that follow the Open Container Initiative distribution model. In Azure Container Registry, teams can store container images plus related artifacts such as Helm charts, signatures, SBOMs, scan results, and other supply-chain files managed with tools like ORAS. Azure Container Registry intermediate 5 commands Aliases: Open Container Initiative artifact, ORAS artifact, ACR OCI artifact, supply-chain artifact Quick peek Open full term page

Management and Governance premium Bicep public registry The Bicep public registry provides publicly available Bicep modules that can be referenced from Bicep files, including Azure Verified Modules through the br/public alias. Bicep fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps A serverless Azure service for running containerized apps and jobs without directly operating Kubernetes clusters. Serverless containers fundamentals 5 commands Aliases: Azure Container Apps Quick peek Open full term page

Containers premium Container Apps custom domain A custom hostname assigned to a Container App ingress endpoint. Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps environment variable An environment variable passed into a Container Apps container. Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps ingress The Container Apps setting that controls whether and how HTTP or TCP traffic reaches a container app. Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps replica a running instance of a Container Apps revision that is added or removed as Azure Container Apps scales the workload Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps session an isolated, short-lived execution environment from a Container Apps dynamic session pool, often used for sandboxed code or custom runtime tasks Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps traffic split percentage-based Container Apps ingress routing that sends traffic to active revisions or labels for canary, blue-green, or A/B releases Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps workload profile the Container Apps environment compute profile that controls resource size, scaling model, isolation, and billing behavior for deployed apps Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Dedicated container throughput A database capability or setting in Azure Cosmos DB that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context. Azure Cosmos DB intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Event Hubs schema registry Event Hubs schema registry is a central repository in Event Hubs for schemas used by event-driven and messaging applications. Teams use it to let producers and consumers share versioned event schemas so payloads stay consistent as applications evolve. It is not an event hub partition, a data catalog for every dataset, an automatic validator for all messages, or a substitute for application-side schema handling. In production, confirm the namespace, event hub, partitions, identity, network path, consumer groups, checkpoints, metrics, owner, and rollback plan before treating the stream design as healthy. Event Hubs intermediate 5 commands Aliases: Azure Schema Registry, schema group, Event Hubs Schema Registry Quick peek Open full term page

Storage premium Azure Container Storage A cloud-based volume management, deployment, and orchestration service built natively for containers and integrated with Kubernetes persistent volumes. Container storage intermediate 4 commands Aliases: ACS for containers Quick peek Open full term page

Management and Governance premium Bicep registry A Bicep registry is a module source that lets Bicep files reference reusable modules by registry path and version tag. Bicep fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page