Search Azure terms

Storage field-manual-complete Storage data protection Storage data protection is the set of Azure Storage controls that help recover, retain, and prove integrity for blob data. It includes patterns such as soft delete, container restore, versioning, change feed, point-in-time restore, immutable storage, and operational backup when those features match the workload. Storage accounts intermediate 5 commands Aliases: storage protection, blob data protection, Azure Storage recovery controls, storage recoverability Quick peek Open full term page

Security premium Data classification tag A tag or catalog label that marks the sensitivity, owner, regulatory handling, or business classification of an Azure resource or dataset. Data protection and governance Intermediate 4 commands Aliases: classification tag, sensitivity tag, data sensitivity tag, confidentiality tag Quick peek Open full term page

Security premium Data exfiltration control A set of Azure controls that restrict, inspect, or approve where sensitive data can leave a workload, workspace, network, or tenant boundary. Network and data protection Intermediate 4 commands Aliases: egress control, data exfiltration protection, approved outbound data boundary Quick peek Open full term page

Security field-manual-complete Least privilege data access Microsoft Learn describes least privilege as granting users and applications only the data and operations required to do their jobs. In Azure data access, that means scoped roles, managed identities, limited secrets, network controls, and reviewable permissions instead of broad owner-style access. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance verified Resource delete protection Resource delete protection uses Azure management locks, usually CanNotDelete, to stop critical resources or resource groups from being deleted by ordinary control-plane operations. Management locks fundamentals 5 commands Aliases: Azure delete protection, management lock delete protection, CanNotDelete lock, delete lock, protected Azure resource Quick peek Open full term page

Storage premium General-purpose v2 storage account General-purpose v2 storage account is an Azure Storage account resource using the StorageV2 kind to host common storage services under one managed namespace. Teams use it to provide durable storage for applications while centralizing endpoints, redundancy, encryption, lifecycle management, networking, monitoring, and access control. In daily Azure work, it appears when engineers provision blob containers, file shares, queues, tables, static websites, backups, application artifacts, or Data Lake Gen2-enabled storage in a landing zone. It is not a specific blob container, an unlimited performance guarantee, an identity provider, or a safe design unless access, networking, and data protection are configured. Storage accounts beginner 5 commands Aliases: Azure general-purpose v2 storage account, GPv2 storage account, StorageV2 storage account Quick peek Open full term page

Storage premium Immutable storage Immutable storage is Azure Blob Storage configured to protect data in a write-once, read-many state so it cannot be modified or deleted during a retention period. Data protection intermediate 5 commands Aliases: Immutable storage, immutable storage, immutable-storage Quick peek Open full term page

Security premium Key Key controls how protected workloads use cryptographic material for encryption, signing, key wrapping, customer-managed keys, and regulated data protection. Teams see it in key vault keys, managed hsm keys. It is not a password, secret value, certificate, storage account key, shared access signature, or application configuration setting; confusing them can create failed encryption operations, accidental key deletion. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Secrets and cryptography Fundamentals 5 commands Aliases: Azure Key Vault key, cryptographic key, key object, encryption key Quick peek Open full term page

AI and Machine Learning premium Azure AI Speech The Azure speech service for converting speech to text, text to speech, speech translation, pronunciation assessment, and related speech-enabled capabilities. AI services intermediate 4 commands Aliases: Azure Speech, Speech in Foundry Tools, Speech service, Speech-to-text Quick peek Open full term page

Storage premium Azure Files backup Azure Files backup protects Azure file shares using Azure Backup policies, recovery points, snapshots, and supported vaulted backup options. It helps backup and platform teams recover shared file data after accidental deletion, ransomware, or operator mistakes without managing separate backup servers or unreviewed snapshot scripts. You see it when business file shares need retention, recovery testing, policy enforcement, ransomware recovery, or evidence for data protection audits. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Backup and recovery intermediate 4 commands Aliases: Azure file share backup, Azure Backup for Azure Files Quick peek Open full term page

Storage premium File share snapshot File share snapshot is a point-in-time copy of an Azure Files share that can help recover earlier versions of files and directories in Azure. Azure Files intermediate 4 commands Aliases: File share snapshot, file share snapshot Quick peek Open full term page

Storage premium File share soft delete File share soft delete is a data protection setting that retains deleted Azure file shares for a configured recovery period before permanent deletion in Azure. Azure Files intermediate 4 commands Aliases: File share soft delete, file share soft delete Quick peek Open full term page

Storage premium Blob storage account A Blob storage account is the Azure Storage account that provides the namespace, security boundary, network configuration, redundancy, and service endpoint for Blob data. Storage accounts advanced 3 commands Aliases: Blob storage account, storage account, blob storage account Quick peek Open full term page

Storage premium Blob versioning Blob versioning is an Azure Storage data protection feature that automatically keeps previous versions of block blobs when they are modified or deleted. Microsoft Learn explains that version IDs let teams list, read, restore, or manage prior blob states alongside soft delete and lifecycle policies. Blob Storage fundamentals 3 commands Aliases: Blob versioning, versioning, blob versioning Quick peek Open full term page

Storage premium Container soft delete the Blob Storage protection feature that lets teams restore deleted containers during a configured retention window Blob Storage protection intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Prebuilt document model A prebuilt document model is a ready-made Document Intelligence model for a common document type such as an invoice, receipt, ID document, contract, bank statement, pay stub, or tax form. Instead of collecting labeled examples and training a custom model, a developer calls the prebuilt model and receives extracted fields, text, tables, confidence scores, and layout information. It is useful when the document matches a known pattern well enough. It is not magic; teams still need validation, exception handling, data protection, and downstream business rules. Document Intelligence fundamentals 6 commands Aliases: No aliases yet Quick peek Open full term page

Security field-manual-complete Infrastructure encryption Infrastructure encryption controls whether supported Azure services apply an extra platform encryption layer for workloads that require stronger data-at-rest protection. Teams see it in storage accounts, encryption scopes. It is not customer-managed keys, transparent data encryption, transport encryption, or a backup retention policy; confusing them can create noncompliant storage designs, irreversible creation-time gaps. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Data Protection Intermediate 5 commands Aliases: double encryption, platform infrastructure encryption, second encryption layer, infrastructure-level encryption Quick peek Open full term page

Management and Governance verified Resource lock A resource lock is a control-plane safety catch for Azure resources. It tells Azure Resource Manager to block deletion or broader changes even when the user normally has permission. CanNotDelete is the common production guardrail because it stops accidental removal while still allowing most updates. ReadOnly is stricter and can break normal operations if used carelessly. Locks are not backups, RBAC, soft delete, or data protection. They are a deliberate pause before someone or something changes critical infrastructure. Azure Resource Manager fundamentals 5 commands Aliases: ARM lock, Management lock, Azure resource lock Quick peek Open full term page

Storage field-manual-complete Storage blob service properties Storage blob service properties are account-level Blob service settings such as delete retention, container soft delete, versioning, change feed, last access tracking, default service version, CORS, and static website options. They shape data protection, browser access, recovery behavior, and operational diagnostics for Blob workloads. Blob Storage configuration fundamentals 5 commands Aliases: Blob service properties, storage account blob service settings, blobServices properties Quick peek Open full term page

Storage complete Soft delete Microsoft Learn describes Azure Storage soft delete as protection that retains deleted or overwritten data for a configured retention period. During that period, eligible blobs, containers, file shares, versions, snapshots, or metadata can be restored before permanent deletion occurs after retention expires. Data protection fundamentals 5 commands Aliases: storage soft delete, blob soft delete, container soft delete, recoverable delete Quick peek Open full term page

Storage complete Storage account Microsoft Learn describes an Azure storage account as the resource that contains Azure Storage data objects such as blobs, files, queues, and tables. It provides a unique namespace for data accessible over HTTP or HTTPS, with durability, availability, security, and scalability choices. Storage account intermediate 5 commands Aliases: storage-account, Storage account, Azure Storage account, general-purpose storage account, GPv2 storage account, storage account resource Quick peek Open full term page

Storage complete Storage account soft delete Storage account soft delete is a data protection configuration that keeps deleted blobs, containers, or shares recoverable for a defined retention period. It helps teams recover from accidental deletion or overwrite without immediately restoring from backup. Retention days determine how long recovery remains possible. Storage accounts intermediate 5 commands Aliases: Storage account soft delete, storage account soft delete, storage-account-soft-delete, storage soft delete, blob soft delete, container soft delete Quick peek Open full term page

Storage field-manual-complete Blob soft delete Blob soft delete keeps deleted or overwritten blob data recoverable for a retention period, giving operators a safety net for accidental changes. Blob Storage fundamentals 4 commands Aliases: soft delete for blobs, blob delete retention, deleted blob restore Quick peek Open full term page

Storage field-manual-complete Legal hold Microsoft Learn describes a legal hold as an immutable storage policy for blob data that keeps objects protected until the hold is explicitly cleared. While a hold is active, objects can be created and read, but not modified or deleted. Data protection fundamentals 2 commands Aliases: No aliases yet Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Advanced threat protection for SQL Advanced threat protection for SQL is the Defender for SQL capability that detects anomalous and potentially harmful database activity. In everyday Azure work, teams use it to surface SQL injection attempts, unusual access, unfamiliar principals, suspicious applications, or brute-force credential patterns. The useful evidence is Defender plan state, server or database protection setting, alert recipient, Azure SQL intermediate 4 commands Aliases: SQL Advanced Threat Protection, Azure SQL threat detection, Defender for SQL ATP, ATP for Azure SQL Quick peek Open full term page

Databases premium Azure SQL transparent data encryption Azure SQL Transparent Data Encryption helps protect Azure SQL Database data, log files, and backups at rest by encrypting and decrypting database pages without requiring application changes. Azure SQL Database fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Hyperscale database Hyperscale database is an individual Azure SQL Database configured to use the Hyperscale service tier and its scalable storage and compute architecture. Azure SQL intermediate 4 commands Aliases: Azure SQL Hyperscale database, hyperscale database, Hyperscale database, Hyperscale SQL database Quick peek Open full term page

Analytics learning-path-anchor Databricks metastore The top-level Unity Catalog container for catalogs, schemas, tables, volumes, models, functions, and governance permissions. Databricks intermediate 4 commands Aliases: Unity Catalog metastore, Databricks Unity Catalog metastore, metastore Quick peek Open full term page

Analytics learning-path-anchor Databricks MLflow The managed MLflow experience in Azure Databricks for experiments, runs, metrics, artifacts, model lineage, and MLOps evidence. Databricks fundamentals 4 commands Aliases: MLflow on Databricks, Databricks experiment tracking, MLflow tracking Quick peek Open full term page

Analytics learning-path-anchor Databricks model serving A managed serving endpoint pattern for exposing Databricks models or AI workloads for online inference with operational controls. Databricks intermediate 4 commands Aliases: Databricks Model Serving, serving endpoint, model serving endpoint Quick peek Open full term page

Analytics learning-path-anchor Databricks notebook A collaborative Azure Databricks document for code, SQL, visualizations, exploration, jobs, and ML workflows attached to compute. Databricks fundamentals 4 commands Aliases: Azure Databricks notebook, Databricks workspace notebook, interactive notebook Quick peek Open full term page

Analytics learning-path-anchor Databricks Photon The native vectorized Azure Databricks engine for accelerating eligible SQL, DataFrame, ETL, and streaming workloads. Databricks intermediate 4 commands Aliases: Photon engine, Photon acceleration, Databricks vectorized engine Quick peek Open full term page

Analytics learning-path-anchor Databricks repo A workspace Git integration, now called Git folders, for versioning notebooks and files used in Databricks development and CI/CD. Databricks fundamentals 4 commands Aliases: Databricks Repos, Databricks Git folder, Azure Databricks Git folders, workspace Git folder Quick peek Open full term page

Analytics learning-path-anchor Databricks schema A Unity Catalog namespace under a catalog that groups tables, views, volumes, models, functions, and permissions. Databricks fundamentals 4 commands Aliases: Unity Catalog schema, Databricks database schema, schema in Unity Catalog Quick peek Open full term page

Analytics learning-path-anchor Databricks secret scope A named Databricks collection of secrets used to store credentials and grant controlled read or manage access to workloads. Databricks fundamentals 4 commands Aliases: Databricks secrets scope, secret scope, Azure Databricks secrets Quick peek Open full term page

Analytics learning-path-anchor Databricks SQL warehouse A Databricks SQL compute resource for interactive queries, dashboards, BI tools, and governed analytics workloads. Databricks intermediate 4 commands Aliases: SQL warehouse, Databricks SQL compute, serverless SQL warehouse Quick peek Open full term page

Analytics learning-path-anchor Databricks table A governed Databricks data object, commonly managed, external, or foreign, queried through Unity Catalog and optimized for analytics. Databricks fundamentals 4 commands Aliases: Unity Catalog table, Delta table in Databricks, Databricks managed table Quick peek Open full term page

AI and Machine Learning command-rich Data source in AI Search Data source in AI Search is documented by Microsoft as part of the Azure AI Search area in Azure. Azure AI Search intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Databases complete SQL transparent data encryption Microsoft Learn describes transparent data encryption for Azure SQL as encryption at rest for databases, backups, and transaction logs. It is enabled by default for Azure SQL Database, uses a service-managed protector unless customer-managed keys are configured, and stays transparent to applications. Azure SQL security intermediate 5 commands Aliases: SQL TDE, Azure SQL TDE, transparent data encryption, TDE for Azure SQL Quick peek Open full term page

Analytics premium Change data capture in Data Factory A Data Factory capability for processing changed data from supported sources. Data integration intermediate 10 commands Aliases: CDC Quick peek Open full term page

Analytics premium Databricks job A scheduled or triggered Databricks workflow that runs one or more tasks using configured compute, parameters, retries, notifications, and access controls. Azure Databricks fundamentals 7 commands Aliases: Databricks workflow job, Lakeflow Job, Databricks Jobs Quick peek Open full term page

Analytics premium Data Factory Azure’s managed data integration service for creating pipelines that move, transform, schedule, and orchestrate data across cloud, SaaS, and hybrid stores. Data integration and orchestration Intermediate 6 commands Aliases: Data Factory, Data Factory, data factory Quick peek Open full term page

Storage premium Data Lake analytics workload A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric. Data Lake Storage Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake bronze layer The raw ingestion layer in a lakehouse or medallion architecture where source data first lands with minimal transformation and strong traceability. Data Lake Storage Gen2 Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake curated zone The governed, consumer-ready area of a data lake where cleaned, conformed, and documented datasets are served for reporting, analytics, AI, or downstream applications. Data Lake Storage Gen2 Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Databricks access connector A first-party Azure resource that gives Azure Databricks a managed identity for Unity Catalog storage credentials and other governed service access. Azure Databricks intermediate 6 commands Aliases: Access Connector for Azure Databricks, Azure Databricks access connector, Databricks managed identity connector Quick peek Open full term page

Analytics premium Databricks catalog The top-level Unity Catalog namespace that organizes schemas, tables, views, volumes, models, functions, permissions, lineage, and governed data ownership. Azure Databricks fundamentals 6 commands Aliases: Unity Catalog catalog, Azure Databricks catalog, catalog object Quick peek Open full term page

Analytics premium Databricks cluster A Databricks compute resource that runs notebooks, jobs, libraries, Spark workloads, and data processing tasks using configured runtime, workers, policies, and access controls. Azure Databricks fundamentals 6 commands Aliases: Databricks compute, Azure Databricks compute cluster, classic cluster Quick peek Open full term page

Analytics premium Databricks cluster policy A Databricks governance object that limits which cluster settings users can choose, helping control cost, security, runtime consistency, and workload standards. Azure Databricks intermediate 6 commands Aliases: Databricks compute policy, cluster policy, compute policy Quick peek Open full term page