Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 149 matching terms. Narrow the search to reduce the list.
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
DevOps
premium
Infrastructure deployment script
Infrastructure deployment script controls how deployment teams run imperative setup, validation, or bridge logic inside an otherwise declarative Azure infrastructure deployment. Teams see it in bicep files, arm templates. It is not a local shell script, a DevOps pipeline task, a custom script extension, or normal template declarative resource creation; confusing them can create hung deployments, leaked script output. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Infrastructure as Code
Intermediate
5 commands
Aliases: deployment script, ARM deployment script, Bicep deployment script, deploymentScripts resource, scripted IaC step
Quick peek
Open full term page
Storage
premium
Infrastructure encryption for storage
Infrastructure encryption for storage controls how Azure Storage applies optional double encryption to blobs, files, queues, or tables depending on account and scope configuration. Teams see it in storage account creation, encryption blade. It is not blob immutability, soft delete, encryption in transit, customer-managed key rotation, or disabling shared key authorization; confusing them can create storage accounts that cannot meet compliance, rebuild-only remediation. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Storage Security
Intermediate
5 commands
Aliases: storage infrastructure encryption, storage account double encryption, require infrastructure encryption, double encryption for Azure Storage
Quick peek
Open full term page
Monitoring and Observability
premium
Distributed tracing
Distributed tracing follows a request across services, dependencies, and process boundaries so teams can understand latency, failures, and call relationships in a distributed application.
Application telemetry
intermediate
4 commands
Aliases: end-to-end tracing, OpenTelemetry tracing, application distributed trace, transaction trace
Quick peek
Open full term page
Analytics
premium
Hash-distributed table
Hash-distributed table is a dedicated SQL pool table whose rows are assigned to distributions using a hash value calculated from one or more distribution columns.
Synapse dedicated SQL pool
intermediate
4 commands
Aliases: hash distributed table, Synapse HASH table, Hash-distributed table, hash-distributed-table
Quick peek
Open full term page
Security
field-manual-complete
Infrastructure encryption
Infrastructure encryption controls whether supported Azure services apply an extra platform encryption layer for workloads that require stronger data-at-rest protection. Teams see it in storage accounts, encryption scopes. It is not customer-managed keys, transparent data encryption, transport encryption, or a backup retention policy; confusing them can create noncompliant storage designs, irreversible creation-time gaps. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Data Protection
Intermediate
5 commands
Aliases: double encryption, platform infrastructure encryption, second encryption layer, infrastructure-level encryption
Quick peek
Open full term page
Databases
complete
SQL managed instance distributed transaction
Microsoft Learn describes DTC for Azure SQL Managed Instance as support for distributed transactions in mixed environments, including managed instances, SQL Server, other relational databases, custom applications, and transaction participants that can establish network connectivity to Azure and coordinate transaction outcomes safely.
SQL Managed Instance
intermediate
5 commands
Aliases: SQL MI distributed transaction, managed instance DTC, Azure SQL MI DTC, distributed transaction coordinator
Quick peek
Open full term page
Storage
complete
Storage account infrastructure encryption
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage infrastructure encryption, Azure Storage double encryption, double encryption for storage, infrastructure-level encryption
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Spark pool
A Synapse Spark pool is the workspace compute definition Azure Synapse uses to start Apache Spark sessions. It records node size, node count, autoscale behavior, runtime version, packages, and idle timeout so notebooks, Spark jobs, and pipelines get repeatable distributed processing.
Synapse Analytics
fundamentals
8 commands
Aliases: Apache Spark pool, Spark pool, Synapse Apache Spark pool, serverless Spark pool
Quick peek
Open full term page
Monitoring
premium
Application Insights
Application Insights is the application performance monitoring capability in Azure Monitor. It collects OpenTelemetry or SDK telemetry such as requests, dependencies, exceptions, traces, metrics, and availability results so teams can continuously understand live application health, performance, failures, and user-impacting behavior.
Application observability
fundamentals
4 commands
Aliases: Azure Application Insights, App Insights, Azure Monitor Application Insights, application performance monitoring, APM
Quick peek
Open full term page
Monitoring and Observability
learning-path-anchor
Telemetry events
Telemetry events are breadcrumbs that say something meaningful happened in an application. They are different from raw logs because they usually have a clear event name and structured properties. A checkout completed, a document uploaded, a feature flag changed, or a device registered can all be telemetry events. In Azure Monitor Application Insights, these events help teams understand behavior, investigate incidents, and measure product outcomes. Good events are intentional, consistently named, and tied to the que
Application data
advanced
5 commands
Aliases: event telemetry, custom events, Application Insights events, Azure Monitor events
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Template spec
A template spec stores an ARM template or Bicep deployment artifact as a versioned Azure resource.
Infrastructure as code
fundamentals
5 commands
Aliases: Template spec, template spec, Azure Template spec, ARM Template spec, Azure template spec, Microsoft.Resources/templateSpecs
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Template spec version
A template spec version is a specific immutable version of a template spec.
ARM deployments
fundamentals
5 commands
Aliases: Template spec version, template spec version, Azure Template spec version, ARM Template spec version, template spec versions, Microsoft.Resources/templateSpecs/versions
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Tenant deployment
A tenant deployment is a Resource Manager deployment executed at Microsoft Entra tenant scope.
ARM deployments
intermediate
5 commands
Aliases: Tenant deployment, tenant deployment, Azure Tenant deployment, tenant scope deployment, az deployment tenant, ARM tenant deployment
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for Apache Cassandra
Azure Cosmos DB for Apache Cassandra is a managed NoSQL database service that supports Cassandra workloads using CQL, drivers, and compatible tooling.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
command-rich
Cosmos DB for PostgreSQL
Azure Cosmos DB for PostgreSQL is a managed PostgreSQL service with Citus distributed tables, currently on a retirement path and not recommended for new projects.
Data platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Azure subscription
An Azure subscription is a management, billing, and scale unit for Azure resources.
Azure scope
fundamentals
7 commands
Aliases: subscription
Quick peek
Open full term page
Developer Tools
premium
Azure Developer CLI
An open-source developer command-line tool that accelerates provisioning, deployment, pipeline setup, and monitoring for application resources on Azure.
Developer workflow
fundamentals
6 commands
Aliases: azd
Quick peek
Open full term page
Databases
premium
Azure Managed Redis
Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios.
Managed cache
intermediate
6 commands
Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise
Quick peek
Open full term page
Management and Governance
premium
Bicep private registry
A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules.
Bicep
fundamentals
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium
Databricks cluster policy
A Databricks governance object that limits which cluster settings users can choose, helping control cost, security, runtime consistency, and workload standards.
Azure Databricks
intermediate
6 commands
Aliases: Databricks compute policy, cluster policy, compute policy
Quick peek
Open full term page
Analytics
premium
Databricks managed resource group
The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources.
Azure Databricks
intermediate
6 commands
Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group
Quick peek
Open full term page
Networking
premium
DDoS Protection
Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities.
Network security
intermediate
6 commands
Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection
Quick peek
Open full term page
Compute
premium
Fault domain
A Fault domain is a logical group of Azure infrastructure that shares a common failure boundary, such as power, cooling, or network equipment, used to spread related virtual machines. Teams use it to reduce the chance that one physical infrastructure problem takes down every instance of the same application tier at the same time. It is not an availability zone, backup copy, application health probe, exact rack identifier exposed to customers, or guarantee that every dependency is isolated from every other dependency.
Virtual Machines
intermediate
6 commands
Aliases: Azure fault domain, platform fault domain, availability set fault domain, VM fault domain
Quick peek
Open full term page
Databases
premium
PostgreSQL connection string
Application configuration that identifies the PostgreSQL server, database, port, authentication method, and TLS path used by a workload.
Data platform
intermediate
6 commands
Aliases: PostgreSQL connection string, postgresql connection string, connection string, Azure Database for PostgreSQL connection string, FQDN, port 5432, port 6432
Quick peek
Open full term page
Databases
premium
PostgreSQL high availability
PostgreSQL high availability means Azure keeps a standby flexible server ready so the database can continue after certain failures or planned failover events. Instead of relying on one server instance, the primary and standby are kept in sync. Depending on the design, the standby can be in the same availability zone or a different zone. This reduces downtime risk, but it does not remove every responsibility. Applications still need retry logic, connection handling, monitoring, tested failover procedures, and a cost owner because high availability adds real infrastructure.
PostgreSQL flexible server
intermediate
6 commands
Aliases: PostgreSQL high availability, postgresql high availability, Azure Database for PostgreSQL flexible server
Quick peek
Open full term page
Containers
premium
AKS maintenance window
An AKS maintenance window is a planned maintenance configuration that controls when AKS starts certain cluster and node image upgrade operations. It helps teams align automatic upgrades and maintenance-sensitive changes with approved business windows, while Azure platform maintenance for underlying infrastructure remains separate.
AKS operations
Intermediate
5 commands
Aliases: Azure Kubernetes Service maintenance window, aks maintenance window
Quick peek
Open full term page
Analytics
premium
Azure integration runtime
Azure integration runtime is the compute infrastructure used by Azure Data Factory and Synapse pipelines to move data, dispatch activities, and connect across network environments.
Data integration compute
intermediate
5 commands
Aliases: Integration Runtime, IR, ADF integration runtime
Quick peek
Open full term page
Databases
premium
Azure SQL active geo-replication
Azure SQL active geo-replication creates readable secondary databases in other regions for database-level disaster recovery and failover.
Azure SQL Database
intermediate
5 commands
Aliases: Azure SQL active geo-replication, SQL geo-replication, active geo-replication, geo-secondary database
Quick peek
Open full term page
Databases
premium
Azure SQL geo-restore
Azure SQL geo-restore uses geo-replicated backups to restore a database to any logical server in any Azure region when primary-region access is unavailable.
Azure SQL Database
fundamentals
5 commands
Aliases: Azure SQL geo-restore, SQL geo restore, geo-replicated backup restore, geo-restore, regional backup restore
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Azure Virtual Desktop
Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control.
Virtual desktops
fundamentals
5 commands
Aliases: AVD
Quick peek
Open full term page
Storage
premium
Backup item
A backup item is a protected data source or backup instance in Azure Backup that is associated with a vault, policy, retention settings, and recoverable restore points.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Backup job
A backup job is an Azure Backup operation record for work such as protecting, backing up, restoring, stopping protection, or validating recovery activity in a vault.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Bicep
Bicep is a domain-specific language for declaratively deploying Azure resources through Azure Resource Manager.
Infrastructure as code
fundamentals
5 commands
Aliases: Azure Bicep
Quick peek
Open full term page
Management and Governance
premium
Bicep build
Bicep build is the Bicep CLI command that compiles a Bicep file into an Azure Resource Manager JSON template, optionally writing output to a file or stdout.
Bicep
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Bicep config
Bicep config is the optional bicepconfig.json file that customizes Bicep behavior such as analyzers, linter rules, module aliases, and registry credentials.
Bicep
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Bicep decompile
Bicep decompile converts Azure Resource Manager JSON templates into Bicep files that can be reviewed, refactored, and redeployed.
Bicep
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps
A serverless Azure service for running containerized apps and jobs without directly operating Kubernetes clusters.
Serverless containers
fundamentals
5 commands
Aliases: Azure Container Apps
Quick peek
Open full term page
Databases
premium
Cosmos DB account
Design the account boundary for a global application before choosing databases, containers, regions, consistency, and backup mode.; Separate regulated, tenant-specific, or production workloads into dedicated Cosmos DB ac
Database
intermediate
5 commands
Aliases: Cosmos DB account, cosmos db account
Quick peek
Open full term page
Databases
premium
Cosmos DB throughput
Choose container-level throughput for a critical workload that must not be slowed by noisy neighboring containers.; Use autoscale for predictable daily traffic spikes where manual RU changes create operational risk.
Azure Cosmos DB
intermediate
5 commands
Aliases: RU/s, Cosmos DB throughput
Quick peek
Open full term page
Management and Governance
premium
Deployment scope
Microsoft Learn describes Azure Resource Manager and Bicep deployments as running at a specific scope: resource group, subscription, management group, or tenant. The selected scope determines which resources can be declared directly, where deployment history is recorded, and what permissions the deployment principal needs.
ARM deployments
fundamentals
5 commands
Aliases: ARM deployment scope, Bicep targetScope, deployment boundary
Quick peek
Open full term page
Management and Governance
premium
Drift detection
Drift detection identifies differences between the expected configuration baseline and the actual state of resources, policies, workloads, or managed infrastructure.
Operational compliance
intermediate
5 commands
Aliases: configuration drift detection, resource drift detection, drift monitoring, infrastructure drift detection
Quick peek
Open full term page
Integration
premium
Event Hubs offset
An Event Hubs offset is metadata that identifies an event position within a partition of an event hub. Teams use it to describe the exact location of an event in a partition so readers can reason about ordering, replay, and processing position. It is not a timestamp alone, a sequence number alone, a global event hub position, or confirmation that a consumer completed downstream work. In production, confirm the namespace, event hub, partitions, identity, network path, consumer groups, checkpoints, metrics, owner, and rollback plan before treating the stream design as healthy.
Event Hubs
intermediate
5 commands
Aliases: event offset, partition offset, stream offset
Quick peek
Open full term page
Integration
premium
Event offset
An event offset is position metadata that identifies where an event sits within an ordered partition or stream. Teams use it to describe where a specific event was read from so teams can resume, replay, investigate gaps, and compare processing progress. It is not a global event ID, timestamp-only bookmark, consumer group, checkpoint file, or guarantee that business processing completed successfully. In production, confirm the namespace, event hub, partitions, identity, network path, consumer groups, checkpoints, metrics, owner, and rollback plan before treating the stream design as healthy.
Event Hubs
intermediate
5 commands
Aliases: offset, stream offset, partition offset
Quick peek
Open full term page
Integration
premium
Event ordering policy
An event ordering policy is an architectural rule that defines how producers and consumers preserve required event order, usually by using stable partition keys and partition-scoped processing. Teams use it to decide which events must stay in order and how partition keys, consumers, retries, and downstream writes will preserve that order. It is not a single Azure Event Hubs setting, global ordering across all partitions, a timestamp sort, or a replacement for idempotent processing. In production, confirm the namespace, event hub, partitions, identity, network path, consumer groups, checkpoints, metrics, owner, and rollback plan before treating the stream design as healthy.
Event Hubs
intermediate
5 commands
Aliases: ordering policy, event order strategy, partition ordering rule
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Host pool
A host pool is a collection of Azure Virtual Desktop session hosts that deliver desktops or RemoteApp applications to assigned users.
Azure Virtual Desktop
fundamentals
5 commands
Aliases: Host pool, host pool
Quick peek
Open full term page
Security
premium
Incident
Incident is a security or operational case that groups alerts, entities, evidence, investigation notes, and response actions around a potential issue.
SIEM and SOAR
fundamentals
5 commands
Aliases: Incident, incident
Quick peek
Open full term page
Monitoring and Observability
premium
Instrumentation key
Instrumentation key controls which Application Insights component receives telemetry and how older application configurations identify the target monitoring resource. Teams see it in application insights resource properties, app settings. It is not a secret access key, API key, SAS token, Log Analytics workspace ID, or managed identity credential; confusing them can create missing telemetry, cross-environment data pollution. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Application Insights
Fundamentals
5 commands
Aliases: ikey, Application Insights instrumentation key, AI instrumentation key, telemetry instrumentation key
Quick peek
Open full term page
Monitoring and Observability
premium
KQL
KQL controls how operators search telemetry, detect incidents, investigate performance, build dashboards, create alerts, and summarize operational evidence across Azure services. Teams see it in log analytics workspaces, azure monitor logs. It is not SQL, PromQL, OData filters, ARM template expressions, Azure Data Factory expression language, or application code; confusing them can create missed incidents, expensive queries. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Query language
Fundamentals
5 commands
Aliases: Kusto Query Language, Kusto query, Azure Monitor query language, Sentinel query language
Quick peek
Open full term page
Analytics
premium
Kusto cluster
Kusto cluster is the Azure Data Explorer compute resource that hosts databases, ingestion, query processing, scale settings, networking, and monitoring for Kusto workloads.
Azure Data Explorer infrastructure
Intermediate
5 commands
Aliases: Azure Data Explorer cluster, ADX cluster, Microsoft.Kusto cluster
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search