Search Azure terms

Management and Governance premium Governance baseline A governance baseline is the minimum set of policies, access controls, tags, logging, security, and compliance requirements that Azure environments must meet before workloads are trusted for production. Governance operations intermediate 4 commands Aliases: Azure governance baseline, cloud governance baseline, landing zone governance baseline Quick peek Open full term page

Management and Governance field-manual-complete Landing zone governance Landing zone governance is the policy, identity, subscription, tagging, cost, security, and compliance control model used to keep Azure landing zones consistent as workloads grow. It uses Azure Policy, RBAC, Cost Management, management groups, and review processes to audit, enforce, and update platform guardrails. Governance operations fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance learning-path-anchor Tenant scope Tenant scope is the highest Azure Resource Manager deployment and governance context tied to a Microsoft Entra tenant. Management scopes fundamentals 5 commands Aliases: Tenant scope, tenant scope, Azure Tenant scope, tenant level scope, ARM tenant scope, targetScope tenant Quick peek Open full term page

Management and Governance premium Platform baseline A platform baseline is the minimum set of governance, security, identity, networking, monitoring, and cost controls an Azure environment should inherit before workloads deploy. It sets standard expectations for subscriptions, landing zones, policy assignments, RBAC, logging, tags, and operational ownership across the estate. Governance operations fundamentals 5 commands Aliases: Azure platform baseline, governance baseline, enterprise platform baseline Quick peek Open full term page

Management and Governance premium Platform landing zone A platform landing zone is the shared Azure foundation that hosts common services for workload landing zones. It commonly includes connectivity, identity integration, management groups, policy, security monitoring, private DNS, logging, and automation so application teams can build on consistent enterprise guardrails. Governance operations fundamentals 5 commands Aliases: Azure platform landing zone, shared platform landing zone, enterprise-scale platform landing zone Quick peek Open full term page

DevOps premium Policy as Code Policy as Code means treating Azure guardrails like application code. Instead of clicking policies into existence one subscription at a time, teams write policy definitions, initiatives, assignments, parameters, and exemptions in files, review them in pull requests, test them in lower environments, and deploy them through pipelines. It makes governance repeatable and traceable. A learner should think of it as the difference between a shared checklist and an automated rulebook that can be versioned, approved, rolled back, and proven during audits. Governance operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Application landing zone An application landing zone is one or more governed Azure subscriptions for a workload environment, placed under management groups so it inherits platform policies and shared services. Landing zones fundamentals 4 commands Aliases: application landing zone Quick peek Open full term page

Management and Governance premium Application tag An application tag is a resource tag key-value pair that identifies the application, product, workload, or service associated with an Azure resource. Tags and naming fundamentals 4 commands Aliases: application tag Quick peek Open full term page

Management and Governance premium Azure Advisor Azure Advisor is the Azure recommendation service that reviews resource configuration and usage signals, then suggests best-practice actions for healthier cloud deployments. In Azure, teams encounter it when platform teams need a prioritized backlog for cost savings, reliability fixes, security hardening, performance improvements, and operational excellence. The useful question is what behavior it proves, who Optimization fundamentals 4 commands Aliases: Advisor, Azure Advisor recommendations, Advisor score Quick peek Open full term page

Monitoring and Observability premium Diagnostic settings policy A diagnostic settings policy is an Azure Policy definition or initiative that audits, denies, or deploys diagnostic settings at scale so supported resources send logs and metrics to approved destinations. Governance operations intermediate 4 commands Aliases: Azure Policy for diagnostic settings, diagnostic settings Azure Policy, policy-based diagnostic settings, deploy diagnostic settings policy Quick peek Open full term page

Management and Governance field-manual-complete Subscription vending Subscription vending is the factory process for giving teams a ready-to-use Azure subscription. Instead of asking platform engineers to create subscriptions by hand, a request triggers automation that creates or selects a subscription, places it in the right management group, applies policy, creates baseline resource groups, sets budgets, wires networking, and assigns access. The goal is not just speed. It is a safe handoff: every new subscription starts with the same guardrails, evidence, ownership, and platform integration before workloads arrive. Governance operations advanced 5 commands Aliases: subscription factory, landing zone vending, application landing zone vending Quick peek Open full term page

Identity premium Identity Governance Identity Governance is a Microsoft Entra set of capabilities for managing identity lifecycle, access lifecycle, access reviews, entitlement management, and privileged access. Identity operations intermediate 4 commands Aliases: Entra ID Governance, identity governance, Identity Governance, Microsoft Entra Identity Governance Quick peek Open full term page

Management and Governance premium Governance scope Governance scope is the Azure boundary where governance controls such as policy assignments, initiatives, locks, role assignments, tags, or exemptions apply and are inherited. Management scopes intermediate 4 commands Aliases: Azure governance scope, policy scope, control scope Quick peek Open full term page

Management and Governance learning-path-anchor Template function A template function is a built-in helper used by ARM templates or Bicep to calculate values. ARM deployments fundamentals 5 commands Aliases: Template function, template function, Azure Template function, ARM Template function, ARM functions, deployment functions Quick peek Open full term page

Management and Governance learning-path-anchor Tenant deployment A tenant deployment is a Resource Manager deployment executed at Microsoft Entra tenant scope. ARM deployments intermediate 5 commands Aliases: Tenant deployment, tenant deployment, Azure Tenant deployment, tenant scope deployment, az deployment tenant, ARM tenant deployment Quick peek Open full term page

Identity learning-path-anchor Tenant ID A tenant ID is the globally unique identifier for a Microsoft Entra tenant. Microsoft Entra fundamentals 4 commands Aliases: Tenant ID, tenant id, Azure Tenant ID, Microsoft Entra tenant ID, directory ID, tenantId Quick peek Open full term page

Management and Governance learning-path-anchor Tenant root group The tenant root group is the highest management group scope associated with a Microsoft Entra tenant. Management groups fundamentals 4 commands Aliases: Tenant root group, tenant root group, Azure Tenant root group, root management group, root group Quick peek Open full term page

Monitoring and Observability learning-path-anchor Throughput Throughput is the amount of work a system completes over time, such as requests, messages, bytes, events, or transactions per second. In Azure, teams measure it with service metrics, logs, and capacity settings to judge whether an app, database, storage account, or messaging pipeline can sustain demand. Performance intermediate 4 commands Aliases: Throughput, throughput, Azure Throughput, Microsoft Learn Throughput, requests per second, events per second, transactions per second, bytes per second, work completed over time Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI resource An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context. Azure OpenAI fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Explicit dependency An Explicit dependency is a manually declared deployment ordering relationship, commonly expressed with dependsOn in ARM templates or Bicep. Teams use it to force one Azure resource, module, or deployment step to wait for another when implicit dependency detection is not enough. It is not a runtime application dependency, a network dependency, a policy assignment, or a reason to serialize every resource deployment unnecessarily. In production, confirm resource or module names, dependsOn entries, implicit references, parent-child declarations, deployment operations, failed operation timestamps, what-if output, and whether ordering is truly required before treating the design as healthy or ready for release. ARM deployments advanced 6 commands Aliases: dependsOn dependency, manual deployment dependency, Bicep explicit dependency Quick peek Open full term page

Identity premium Access package An access package bundles resources someone may need for a job or project. Instead of asking separately for groups, apps, or sites, a user requests the package, and Entra applies approval, duration, review, and removal rules. Identity operations fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure AI Foundry Create a governed project boundary where AI teams can build agents, evaluations, files, and model deployments without unmanaged sprawl.; Compare, evaluate, and approve model deployments before a generative AI feature is AI platform fundamentals 5 commands Aliases: AI Foundry, Microsoft Foundry, Foundry resource, Foundry project, Azure AI Foundry, azure ai foundry Quick peek Open full term page

Management and Governance premium Azure Lighthouse Azure Lighthouse enables secure delegated management of Azure resources across customer tenants, supporting service providers and central teams with scalable cross-tenant governance. Delegated resource management advanced 5 commands Aliases: Lighthouse, delegated resource management, Microsoft Managed Services delegation Quick peek Open full term page

Virtual Desktop Infrastructure premium Azure Virtual Desktop Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control. Virtual desktops fundamentals 5 commands Aliases: AVD Quick peek Open full term page

DevOps premium Container image build the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry Deployment workflows intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Policy remediation Policy remediation is Azure Policy’s controlled repair job for resources that already exist. A deny policy can stop a bad new deployment, but it cannot automatically fix old resources. Remediation is for policies with modify or deployIfNotExists effects, such as adding required tags or deploying missing diagnostic settings. You create a remediation task, Azure finds the affected resources, and the assignment’s managed identity performs the configured change. It is governance automation, but it still needs careful scope, permission, and result review. Azure Policy intermediate 5 commands Aliases: Policy remediation, policy-remediation Quick peek Open full term page

Management and Governance premium Policy state Policy state is the evidence record behind an Azure Policy compliance result. It answers practical questions such as which resource was evaluated, which policy assignment applied, whether the resource was compliant, and when Azure last knew that result. The portal summarizes these states, but operators often query them directly through Azure CLI, REST, or Resource Graph when they need proof. Policy state is especially useful when a dashboard says “non-compliant” and the team needs to locate the exact resource, policy, scope, and reason. Azure Policy intermediate 5 commands Aliases: Policy state, policy-state Quick peek Open full term page

Management and Governance premium Quota Microsoft Learn describes Azure quotas as adjustable limits applied to Azure resources and services within a subscription, region, or provider scope. Each subscription receives default quota values, and teams can review usage or request increases before planned scale, migration, or recovery work consumes available capacity. Capacity management fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource group A resource group is an Azure Resource Manager container that holds related resources for a solution. Azure scope fundamentals 5 commands Aliases: RG, Azure resource group Quick peek Open full term page

Management and Governance premium Resource group scope Resource group scope means the command, deployment, policy, or role assignment targets one resource group. It is narrower than subscription scope and broader than a single resource, making it a common boundary for application environments and team ownership. Management scopes intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource provider Microsoft Learn defines an Azure resource provider as a set of REST operations that supports functionality for a specific Azure service. The provider namespace, such as Microsoft.Storage or Microsoft.Compute, owns resource types, API versions, supported locations, operations, and registration state used by Azure Resource Manager. Azure Resource Manager fundamentals 5 commands Aliases: Azure resource provider, provider namespace, ARM provider Quick peek Open full term page

Monitoring and Observability premium Service Health alert A Service Health alert is an Azure Monitor activity log alert that watches ServiceHealth events for selected subscriptions, regions, and services. It routes incident, planned maintenance, security, or health advisory notifications to action groups so teams learn about platform issues before users report symptoms. Operational hygiene intermediate 5 commands Aliases: Azure Service Health alert, Service Health alert, ServiceHealth activity log alert, platform health alert, service health alert, service-health-alert Quick peek Open full term page

Web premium App Service Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it. App Service intermediate 4 commands Aliases: App Service, app service Quick peek Open full term page

Monitoring premium Application Insights Application Insights is the application performance monitoring capability in Azure Monitor. It collects OpenTelemetry or SDK telemetry such as requests, dependencies, exceptions, traces, metrics, and availability results so teams can continuously understand live application health, performance, failures, and user-impacting behavior. Application observability fundamentals 4 commands Aliases: Azure Application Insights, App Insights, Azure Monitor Application Insights, application performance monitoring, APM Quick peek Open full term page

AI and Machine Learning premium Azure AI Foundry hub Azure AI Foundry hub is the classic Foundry hub resource used to group AI projects that share common security, data access, connections, and platform settings. In Azure, teams encounter it when teams need hub-based projects for selected Foundry and Azure Machine Learning scenarios such as fine-tuning, shared connections, and custom ML work. The useful question AI platform advanced 4 commands Aliases: AI Hub, Foundry AI Hub, hub-based project, Azure AI hub Quick peek Open full term page

Hybrid and Multicloud premium Azure Arc A hybrid and multicloud management platform that extends Azure governance, security, operations, and services to resources running outside Azure. Hybrid management fundamentals 4 commands Aliases: Arc, Arc-enabled infrastructure, Azure Arc hybrid management Quick peek Open full term page

Hybrid and Multicloud premium Azure Arc-enabled Kubernetes An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations. Hybrid management fundamentals 4 commands Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster Quick peek Open full term page

Hybrid and Multicloud premium Azure Arc-enabled server A Windows or Linux physical server or virtual machine outside Azure that is connected to Azure Arc and managed as an Azure resource. Hybrid management fundamentals 4 commands Aliases: Arc-enabled server, Azure Arc server, connected machine, hybrid machine Quick peek Open full term page

Management and Governance premium Azure control plane The Azure control plane is the part of Azure you use to manage resources rather than consume the application or data inside them. Microsoft Learn anchors this term in Azure control plane and data plane, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, the Azure control plane is handled by. Azure Resource Manager intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Azure data plane The Azure data plane is the part of Azure you use after a resource exists, when you interact with the capability that resource provides. Microsoft Learn anchors this term in Azure control plane and data plane, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, data-plane operations are service-specific operations against. Azure Resource Manager fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium CanNotDelete lock A CanNotDelete lock is an Azure Resource Manager management lock that prevents a resource, resource group, or subscription from being deleted while still allowing many read and update operations. Management locks intermediate 4 commands Aliases: delete lock Quick peek Open full term page

Security premium Data classification tag A tag or catalog label that marks the sensitivity, owner, regulatory handling, or business classification of an Azure resource or dataset. Data protection and governance Intermediate 4 commands Aliases: classification tag, sensitivity tag, data sensitivity tag, confidentiality tag Quick peek Open full term page

Monitoring and Observability premium Database diagnostic settings Azure Monitor routing rules that export database logs and metrics to Log Analytics, Storage, Event Hubs, or partner destinations for investigation and governance. Azure Monitor intermediate 4 commands Aliases: SQL diagnostic settings, database diagnostics export, Azure Monitor diagnostic settings for databases Quick peek Open full term page

Management and Governance premium DenyAction effect The DenyAction effect is an Azure Policy effect that blocks specific intended actions on matched resources, commonly used to prevent deletion of critical resources. Azure Policy advanced 4 commands Aliases: denyAction, Azure Policy DenyAction, policy deny action, delete protection policy effect Quick peek Open full term page

Management and Governance premium Deployment correlation ID A deployment correlation ID is the GUID recorded for an Azure Resource Manager deployment and related control-plane operations so teams can trace events, failures, and support evidence across logs. ARM deployments fundamentals 4 commands Aliases: ARM deployment correlation ID, correlationId for deployment, deployment tracking GUID, Azure deployment correlationId Quick peek Open full term page

Management and Governance premium Deployment history Deployment history is the Azure Resource Manager record of template, Bicep, and deployment operations at a scope, used to review past deployments, outputs, errors, and resources affected. Azure Resource Manager fundamentals 4 commands Aliases: ARM deployment history, Azure deployment history, resource group deployment history, template deployment history Quick peek Open full term page

Management and Governance premium Deployment history record A deployment history record is one named Azure Resource Manager deployment entry that captures status, parameters, outputs, correlation ID, timestamps, and operations for a specific deployment run. ARM deployments fundamentals 4 commands Aliases: deployment record, ARM deployment record, Azure deployment record, template deployment record Quick peek Open full term page

Management and Governance premium Deployment name A deployment name is the label Azure uses for one ARM or Bicep rollout. It is not the resource name. It helps you find the right deployment history, check status, inspect failed operations, and connect automation logs to the change that actually ran. ARM deployments fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Deployment stack deny settings Deployment stack deny settings define how stack-managed resources are protected from unauthorized control-plane operations, including deny modes, excluded actions, excluded principals, and child-scope behavior. ARM deployments advanced 4 commands Aliases: deploymentStacks denySettings, stack deny settings, deployment stack deny assignments, deny settings mode Quick peek Open full term page

Identity premium Eligible assignment An eligible assignment grants a user or principal the ability to activate a privileged Microsoft Entra or Azure RBAC role when needed instead of holding it permanently. Privileged access intermediate 4 commands Aliases: PIM eligible assignment, eligible role assignment Quick peek Open full term page