Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,981 matching terms. Narrow the search to reduce the list.
Compute
premium
Gallery image version
Gallery image version is a specific published version of a gallery image that virtual machines and scale sets can use as their source. Teams use it to roll out tested OS and application baselines with version numbers, regional replication, retirement dates, and rollback options. In daily Azure work, it appears when engineers promote a golden image, deploy identical VMs across regions, retire vulnerable builds, or troubleshoot why a new VM used the wrong baseline. It is not the image family definition, a live VM, an operating system patch job, or proof that every deployed VM remains compliant after boot.
Disks and images
intermediate
6 commands
Aliases: Azure Compute Gallery image version, SIG image version, image version
Quick peek
Open full term page
Compute
premium
Gallery image definition
Gallery image definition is the Azure Compute Gallery record that defines an image family before individual image versions are published. Teams use it to standardize OS type, generation, publisher, offer, SKU, architecture, and image state so teams deploy consistent virtual machine builds. In daily Azure work, it appears when engineers create hardened Windows or Linux baselines, separate application images, control VM generation compatibility, or publish reusable images across regions. It is not the actual disk snapshot, a VM instance, an image version, a patching process, or proof that every VM deployed from it is secure.
Disks and images
intermediate
5 commands
Aliases: Azure Compute Gallery image definition, SIG image definition, image definition
Quick peek
Open full term page
Compute
premium
Azure Compute Gallery
A service for organizing, versioning, replicating, and sharing VM images and application packages across Azure subscriptions, tenants, and regions.
Disks and images
intermediate
4 commands
Aliases: Shared Image Gallery
Quick peek
Open full term page
Compute
premium
Generalized image
Generalized image is a virtual machine image whose machine-specific identity has been removed so many new VMs can be created safely from the same source. Teams use it to publish reusable Windows or Linux baselines to Azure Compute Gallery without cloning host names, security identifiers, SSH host keys, or machine-specific state. In daily Azure work, it appears when engineers capture a golden image, prepare VM scale set images, build hardened server templates, or explain why a source VM cannot be reused after generalization.
Disks and images
intermediate
4 commands
Aliases: generalized VM image, sysprepped image, deprovisioned image
Quick peek
Open full term page
Compute
premium
LUN
A LUN, or logical unit number, identifies a data disk attachment on an Azure virtual machine. Azure records the LUN with each attached data disk so the VM, operating system, automation, and operators can distinguish disks and keep mount or application mappings consistent.
Disks and images
intermediate
4 commands
Aliases: disk LUN, logical unit number
Quick peek
Open full term page
Compute
verified
Replica region
A replica region is a target region where an Azure Compute Gallery image version is copied for regional VM deployment.
Disks and images
intermediate
6 commands
Aliases: Compute Gallery target region, image replica region, target region
Quick peek
Open full term page
Compute
field-manual-complete
Premium SSD disk
A Premium SSD disk is a faster Azure managed disk for virtual machines that need steadier storage performance than standard disks.
Disks and images
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Compute
field-manual-complete
VM host caching
VM host caching controls whether an attached VM disk uses Azure host-side cache for read-only, read/write, or no caching behavior.
Disks and images
intermediate
5 commands
Aliases: Azure disk host caching, disk caching, VM disk caching, ReadOnly caching, ReadWrite caching
Quick peek
Open full term page
Compute
field-manual-complete
VM image offer
A VM image offer is the Marketplace product-family value in a VM image URN, positioned between publisher and SKU.
Disks and images
intermediate
5 commands
Aliases: image offer, Marketplace image offer, Azure VM offer, imageReference offer, VM offer
Quick peek
Open full term page
Compute
field-manual-complete
VM image publisher
A VM image publisher is the vendor or organization named first in an Azure Marketplace VM image URN before offer, SKU, and version.
Disks and images
intermediate
5 commands
Aliases: image publisher, Marketplace image publisher, VM publisher, imageReference publisher, Azure VM publisher
Quick peek
Open full term page
Compute
field-manual-complete
VM image SKU
A VM image SKU is the edition, generation, or variant inside an Azure Marketplace image offer.
Disks and images
intermediate
5 commands
Aliases: image SKU, VM SKU in image reference, Marketplace image SKU, imageReference sku, Azure VM image SKU
Quick peek
Open full term page
Compute
field-manual-complete
VM image version
A VM image version is the exact build of a VM image used to create a virtual machine or scale set.
Disks and images
intermediate
5 commands
Aliases: image version, VM image build, Marketplace image version, imageReference version, Compute Gallery image version
Quick peek
Open full term page
Compute
complete
Shared disk
A managed disk configured for simultaneous attachment to multiple VMs so supported clustered applications can use shared block storage.
Disks and images
intermediate
5 commands
Aliases: Azure shared disk, shared managed disk, shared data disk, managed disk maxShares
Quick peek
Open full term page
Compute
complete
Specialized image
Microsoft Learn describes a specialized image in Azure Compute Gallery as an image from a VM that has not been generalized. It retains machine-specific information and accounts, can boot faster, and creates VMs with limitations such as no osProfile. in practice.
Disks and images
intermediate
5 commands
Aliases: Azure Compute Gallery specialized image, stateful VM image, specialized VM image, non-generalized image
Quick peek
Open full term page
Compute
complete
Standard HDD disk
Microsoft Learn lists Standard HDD as an Azure managed disk type that uses hard disk storage and is available for Azure VMs. It is designed for cost-sensitive, low-IO workloads, with more variable performance than SSD-backed disks, and can often be converted when workload needs change.
Disks and images
intermediate
5 commands
Aliases: standard-hdd-disk, Standard HDD disk, Azure Standard HDD, Standard_LRS disk, HDD managed disk, standard hard disk
Quick peek
Open full term page
Compute
complete
Standard SSD disk
Microsoft Learn lists Standard SSD as an Azure managed disk type that uses solid-state storage for general-purpose VM disks. It sits between Standard HDD and Premium SSD, giving better consistency than HDD for many workloads while keeping cost lower than premium disks for moderate IO requirements.
Disks and images
intermediate
5 commands
Aliases: standard-ssd-disk, Standard SSD disk, Azure Standard SSD, StandardSSD_LRS disk, SSD managed disk, standard solid-state disk
Quick peek
Open full term page
Compute
premium field-manual
Managed disk SKU
A managed disk SKU is the selected disk type and performance tier for a managed disk, such as Standard HDD, Standard SSD, Premium SSD, Premium SSD v2, or Ultra Disk. Teams use it when a VM workload needs the right balance of latency, IOPS, throughput, durability options, and cost. In plain English, it gives operators a named control for right-sized storage performance without paying for unnecessary disk capability instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear.
Azure Disk Storage
intermediate
3 commands
Aliases: Managed disk SKU, Azure Disk Storage
Quick peek
Open full term page
Integration
verified
Receive and delete
Receive and delete is an Azure Service Bus receive mode where the broker considers a message settled as soon as it sends the message to the receiver. If transfer or processing fails afterward, the message is lost instead of being redelivered.
Azure Service Bus
intermediate
5 commands
Aliases: ReceiveAndDelete, receive-and-delete mode, destructive read, at-most-once receive
Quick peek
Open full term page
Integration
verified
Receive-and-delete mode
A integration pattern or service capability in Messaging that helps teams connect services reliably without tightly coupling every component with clearer ownership, safety, and operational context.
Messaging
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Compute
premium
Disk encryption set
A disk encryption set is an Azure resource that connects managed disks, snapshots, or images to a customer-managed key used for server-side encryption.
Managed disk encryption
intermediate
4 commands
Aliases: DES, managed disk encryption set, disk CMK set, customer-managed key disk encryption set
Quick peek
Open full term page
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
Storage
learning-path-anchor
Data Lake storage account
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
advanced
19 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
field-manual-complete
Blob Storage
Blob Storage is Azure object storage for massive amounts of unstructured data such as documents, images, video, backups, logs, and application files.
Storage
advanced
5 commands
Aliases: Blob Storage, blob-storage, blob, blob-container, blob-access-tier, blob-soft-delete, blob-versioning, storage-account, account-sas, private-endpoint-for-storage, azure-files, data-lake-storage-gen2, queue-storage
Quick peek
Open full term page
Storage
verified
Page blob
An Azure page blob is a blob made of 512-byte pages and optimized for frequent random read and write operations. It can grow up to 8 TiB and is commonly associated with virtual hard disks and disk-like storage workloads. and recovery planning.
Blob storage types
intermediate
5 commands
Aliases: Azure page blob, random access blob, VHD page blob, disk-backed blob
Quick peek
Open full term page
Compute
field-manual-complete
Virtual machine
An Azure compute resource that runs a full guest operating system for workloads needing server-level control.
Azure Virtual Machines
beginner
5 commands
Aliases: Azure VM, VM, cloud virtual server, IaaS virtual machine, virtual machine
Quick peek
Open full term page
AI and Machine Learning
premium
Computer Vision
the Azure AI capability that helps applications understand images, read text, detect visual features, and return structured insights from pictures or screenshots
Azure AI services
fundamentals
12 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Spark pool
A Synapse Spark pool is the workspace compute definition Azure Synapse uses to start Apache Spark sessions. It records node size, node count, autoscale behavior, runtime version, packages, and idle timeout so notebooks, Spark jobs, and pipelines get repeatable distributed processing.
Synapse Analytics
fundamentals
8 commands
Aliases: Apache Spark pool, Spark pool, Synapse Apache Spark pool, serverless Spark pool
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace managed identity
A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service...
Synapse Analytics
intermediate
8 commands
Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity
Quick peek
Open full term page
Management and Governance
premium
Bicep private registry
A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules.
Bicep
fundamentals
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium
Databricks managed resource group
The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources.
Azure Databricks
intermediate
6 commands
Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group
Quick peek
Open full term page
AI and Machine Learning
premium
Face API
The Face API is an Azure AI service API that provides face detection, recognition, verification, identification, grouping, and related face analysis capabilities. Teams use it to build applications that detect faces in images, compare faces, verify identity scenarios, support liveness workflows, or organize face-related image data under approved responsible AI controls. It is not a general computer vision labeler, proof of identity by itself, a surveillance policy, or permission to use biometric capabilities without legal, privacy, and access review.
Azure AI services
intermediate
6 commands
Aliases: Azure AI Face, Azure Face API, Face service
Quick peek
Open full term page
AI and Machine Learning
premium
Face service
Face service is an Azure AI service that provides APIs for face detection, face analysis, verification, identification, grouping, and liveness-related workflows under approved access controls. Teams use it to build applications that detect faces in images, compare face evidence, verify approved identity scenarios, support liveness checks, or manage face lists within privacy and responsible AI controls. It is not a general image classification service, legal approval to process biometric data, a replacement for human identity review, or a guarantee that every face decision is correct.
Azure AI services
intermediate
6 commands
Aliases: Azure AI Face, Azure AI Face service, Azure Face service, Face API, Azure AI services Face
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
ACR build
ACR build lets Azure Container Registry build an image in the cloud from source context or a Dockerfile. It is handy when you do not want a local Docker engine or want a pipeline to build and push directly in Azure.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR geo-replication
ACR geo-replication keeps container images closer to workloads in multiple regions. Developers push to one registry, and Azure replicates content so regional clusters can pull faster and more reliably, assuming the registry uses the Premium tier.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR import
ACR import is a server-side image copy. Instead of pulling an image to your machine and pushing it back, Azure copies it into your registry directly. It is useful for migration, mirroring, controlled base images, and pipeline cleanup.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
ACR Task
An ACR Task is automation inside Azure Container Registry for building, testing, patching, or maintaining container images. Instead of relying only on a developer laptop or separate build server, the registry can run a build from source, a.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry Task, ACR Tasks, registry task
Quick peek
Open full term page
Containers
premium
AKS managed identity
An AKS managed identity is a Microsoft Entra identity that an AKS cluster uses to manage Azure resources without stored service principal secrets.
AKS identity
Intermediate
5 commands
Aliases: Azure Kubernetes Service managed identity, aks managed identity
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Storage
premium
Azure file share
An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover.
Files, queues, and tables
fundamentals
5 commands
Aliases: Azure Files share
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Azure Virtual Desktop
Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control.
Virtual desktops
fundamentals
5 commands
Aliases: AVD
Quick peek
Open full term page
Storage
premium
Backup item
A backup item is a protected data source or backup instance in Azure Backup that is associated with a vault, policy, retention settings, and recoverable restore points.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Migration
premium
Backup vault
A Backup vault is an Azure Backup storage and management entity that stores backups, recovery points, and backup policies for supported newer workloads.
Backup and recovery
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
Blob trigger
Microsoft Learn describes the Blob Storage trigger for Azure Functions as a binding that starts a function when a new or updated blob is detected. The blob content is passed to code, letting serverless workloads react to files, documents, images, data feeds, or storage events.
Azure Functions
intermediate
5 commands
Aliases: Blob trigger, trigger, blob trigger
Quick peek
Open full term page
Containers
premium
Connected registry
an Azure Container Registry capability that keeps container images available in remote, edge, or intermittently connected environments by syncing with a parent registry
Azure Container Registry
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
DevOps
premium
Container image build
the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry
Deployment workflows
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Document analysis operation
A document analysis operation is an asynchronous Document Intelligence request that analyzes a document with a model and returns extracted content, layout, and fields when polling completes.
Document Intelligence
intermediate
5 commands
Aliases: Analyze operation, analyze document operation, Document Intelligence analysis request, async analysis operation
Quick peek
Open full term page
Containers
premium
Image pull secret
Image pull secret is a Kubernetes secret that stores registry credentials so pods can pull private container images at deployment time.
Azure Container Registry
intermediate
5 commands
Aliases: Image pull secret, image pull secret, image-pull-secret
Quick peek
Open full term page
Containers
premium
Kubelet identity
Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
AKS identity
Intermediate
5 commands
Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search