Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 103 matching terms. Narrow the search to reduce the list.
Networking
premium
Hybrid Connection
A Hybrid Connection lets an Azure App Service app reach a specific TCP host and port in another network through Azure Relay.
Azure App Service and Azure Relay
fundamentals
5 commands
Aliases: Hybrid Connection, hybrid connection
Quick peek
Open full term page
Networking
premium
ExpressRoute
ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before.
Hybrid connectivity
intermediate
6 commands
Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity
Quick peek
Open full term page
Networking
premium
CIDR block
A CIDR block expresses an IP address range with an address and prefix length, such as 10.0.0.0/16, for virtual network address space, subnets, and routes.
IP addressing
fundamentals
3 commands
Aliases: CIDR
Quick peek
Open full term page
Networking
verified
VPN Gateway
VPN Gateway is an Azure virtual network gateway that creates encrypted VPN tunnels between an Azure virtual network and on-premises networks, remote clients, or other VNets, using configurations such as site-to-site, point-to-site, and VNet-to-VNet connections. for hybrid networks.
Hybrid connectivity
fundamentals
6 commands
Aliases: Azure VPN Gateway, virtual network gateway for VPN, site-to-site VPN gateway, point-to-site VPN gateway
Quick peek
Open full term page
Web
premium
App Service Hybrid Connections
App Service Hybrid Connections let an App Service app make outbound TCP connections to a specific host and port in another network through Azure Relay.
App Service networking
intermediate
5 commands
Aliases: Azure App Service Hybrid Connections, app service hybrid connections
Quick peek
Open full term page
AI and Machine Learning
premium
Hybrid search
Hybrid search in Azure AI Search combines vector search and keyword or full-text search in a single request and merges the results.
Azure AI Search
advanced
5 commands
Aliases: Hybrid search, hybrid search
Quick peek
Open full term page
Databases
premium
Hybrid search in Cosmos DB
Hybrid search in Cosmos DB is a Cosmos DB for NoSQL capability that combines vector search with full-text search scoring, then merges results with Reciprocal Rank Fusion.
Azure Cosmos DB
advanced
4 commands
Aliases: Cosmos DB hybrid search, Cosmos DB RRF search, Hybrid search in Azure Cosmos DB, hybrid search in cosmos db, Hybrid search in Cosmos DB
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc
A hybrid and multicloud management platform that extends Azure governance, security, operations, and services to resources running outside Azure.
Hybrid management
fundamentals
4 commands
Aliases: Arc, Arc-enabled infrastructure, Azure Arc hybrid management
Quick peek
Open full term page
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
Databases
premium
Azure SQL logical server
An Azure SQL logical server is a logical administrative construct for Azure SQL Database and related SQL resources. Microsoft Learn describes it as the central point for managing a collection of databases, including logins, firewall rules, auditing, threat detection policies, and failover groups.
Azure SQL Database
fundamentals
16 commands
Aliases: No aliases yet
Quick peek
Open full term page
Databases
complete
SQL managed instance distributed transaction
Microsoft Learn describes DTC for Azure SQL Managed Instance as support for distributed transactions in mixed environments, including managed instances, SQL Server, other relational databases, custom applications, and transaction participants that can establish network connectivity to Azure and coordinate transaction outcomes safely.
SQL Managed Instance
intermediate
5 commands
Aliases: SQL MI distributed transaction, managed instance DTC, Azure SQL MI DTC, distributed transaction coordinator
Quick peek
Open full term page
Databases
complete
SQL managed instance link
Microsoft Learn describes the Managed Instance link as near real-time data replication between SQL Server and Azure SQL Managed Instance, enabling hybrid flexibility, database mobility, read-only workload offload, analytics in Azure, disaster recovery patterns, and migrations with planned or forced failover.
SQL Managed Instance
intermediate
5 commands
Aliases: Managed Instance link, SQL MI link, Azure SQL MI link, MI link
Quick peek
Open full term page
AI and Machine Learning
premium
Scoring profile
A scoring profile is an Azure AI Search index setting that boosts ranking for matches that meet business rules. It can weight text fields or apply functions for freshness, distance, magnitude, or tags, and a query chooses one profile to influence returned order.
Azure AI Search
fundamentals
8 commands
Aliases: Azure AI Search scoring profile, search relevance profile, relevance scoring profile, scoringProfiles, boosting profile
Quick peek
Open full term page
Databases
premium
Cosmos DB vector index
Cosmos DB vector index is an indexing-policy configuration that improves vector-search latency and RU efficiency for embeddings in Cosmos DB for NoSQL. It helps Cosmos DB find similar vectors without comparing every embedding in a container one by one. You see it when queries use VectorDistance, hybrid search combines text and vectors, or teams tune flat, quantized flat, and DiskANN-style index choices. The production check is whether the index type, vector path, dimensions, filters, and recall target fit the workload. Document the decision in code, templates, metrics, and runbooks.
Azure Cosmos DB
intermediate
7 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium
Synapse SQL
Synapse SQL is the T-SQL analytics capability in Azure Synapse Analytics. It includes dedicated SQL pools for provisioned warehousing and serverless SQL pools for on-demand lake queries, letting teams analyze structured and semi-structured data through familiar SQL endpoints inside a Synapse workspace.
Synapse Analytics
intermediate
7 commands
Aliases: Synapse SQL engine, Azure Synapse SQL, Synapse serverless and dedicated SQL, SQL analytics in Synapse
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
Analytics
premium
Data Factory
Azure’s managed data integration service for creating pipelines that move, transform, schedule, and orchestrate data across cloud, SaaS, and hybrid stores.
Data integration and orchestration
Intermediate
6 commands
Aliases: Data Factory, Data Factory, data factory
Quick peek
Open full term page
AI and Machine Learning
premium
Exhaustive KNN
Exhaustive KNN is a vector search algorithm that calculates distances across all candidate vectors to return the exact nearest neighbors for a query. Teams use it to test vector relevance, produce exact nearest-neighbor baselines, or serve smaller vector workloads where accuracy matters more than approximate search speed. It is not HNSW approximate search, semantic ranking, a text analyzer, an embedding model, or a fix for poor chunking and low-quality vectors. In production, confirm index schema, vector dimensions, algorithm configuration, vector profile, query k value, exhaustive flag, latency, throttling, relevance test set, and comparison with HNSW results before treating the design.
Azure AI Search
advanced
6 commands
Aliases: exhaustive k-nearest neighbors, brute-force vector search, exhaustive vector search
Quick peek
Open full term page
Databases
premium
PostgreSQL flexible server
The managed Azure PostgreSQL server resource that owns compute, storage, backups, networking, high availability, parameters, and databases.
PostgreSQL flexible server
fundamentals
6 commands
Aliases: PostgreSQL flexible server, postgresql flexible server, Azure Database for PostgreSQL flexible server, managed PostgreSQL, backup retention, high availability, private access
Quick peek
Open full term page
Containers
premium
AKS private cluster
Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation.
AKS networking
advanced
5 commands
Aliases: Azure Kubernetes Service private cluster, aks private cluster
Quick peek
Open full term page
Web
premium
App Service connection string
A named connection string stored in App Service configuration and exposed to application code for supported database or service connectivity. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
5 commands
Aliases: app service connection string, connection string
Quick peek
Open full term page
Web
premium
App Service VNet integration
Microsoft Learn describes App Service virtual network integration as the feature that lets an App Service app access resources in or through an Azure virtual network. It affects outbound traffic from the app; inbound private access uses other controls, such as private endpoints and access restrictions.
App Service Networking
intermediate
5 commands
Aliases: App Service virtual network integration, regional VNet integration, Web App VNet integration
Quick peek
Open full term page
Analytics
premium
Azure-SSIS integration runtime
Azure-SSIS integration runtime is Azure Data Factory or Azure Synapse compute that lets organizations deploy, run, and manage SQL Server Integration Services packages in Azure.
Data Factory
intermediate
5 commands
Aliases: Azure SSIS integration runtime, Azure-SSIS IR
Quick peek
Open full term page
Containers
premium
Connected registry
an Azure Container Registry capability that keeps container images available in remote, edge, or intermittently connected environments by syncing with a parent registry
Azure Container Registry
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium
Databricks workspace Private Link
Databricks workspace Private Link is the Azure Private Link configuration that provides private connectivity paths to Azure Databricks workspace resources and related Databricks services without exposing traffic to the public internet.
Azure Databricks
advanced
5 commands
Aliases: Azure Databricks Private Link, Databricks private endpoint, workspace private endpoint, front-end Private Link
Quick peek
Open full term page
Analytics
premium
Databricks workspace VNet injection
Databricks workspace VNet injection is the deployment model that places Azure Databricks compute resources into customer-managed virtual network subnets so network security, routing, and private connectivity controls can be applied.
Databricks
advanced
5 commands
Aliases: VNet-injected Databricks workspace, customer-managed VNet workspace, Databricks VNet injection, workspace in customer VNet
Quick peek
Open full term page
AI and Machine Learning
premium
Integrated vectorization
Integrated vectorization controls how Azure AI Search creates and uses embeddings inside indexing and query pipelines so applications can run vector or hybrid search without external embedding glue code. Teams see it in azure ai search indexes, skillsets. It is not manual offline embedding generation, plain keyword search, semantic ranking alone, a vector index without a vectorizer, or a model fine-tuning job; confusing them can create dimension mismatches, failed indexer runs. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure AI Search
Advanced
5 commands
Aliases: Azure AI Search integrated vectorization, query-time vectorization, indexer vectorization, vectorizer, embedding skill
Quick peek
Open full term page
Integration
premium
Integration service environment
Integration service environment controls how older Logic Apps workloads used a dedicated isolated runtime and VNet connectivity, and how teams identify remaining dependencies during migration. Teams see it in legacy logic apps ise resources, vnet integration. It is not Logic Apps Standard, App Service Environment, integration account, private endpoint, or a normal Consumption Logic App workflow; confusing them can create unsupported legacy integrations, missed retirement planning. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Logic Apps
Advanced
5 commands
Aliases: Logic Apps ISE, ISE, Integration Service Environment, dedicated Logic Apps environment
Quick peek
Open full term page
Networking
premium
Internet egress
Internet egress controls how workloads reach public endpoints for updates, APIs, package feeds, SaaS services, telemetry, and other internet-reachable dependencies. Teams see it in virtual networks, nat gateways. It is not inbound internet traffic, private endpoint traffic, ExpressRoute private peering, internal ingress, or Azure service-to-service traffic over private routes; confusing them can create data exfiltration paths, blocked updates. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Outbound connectivity
Intermediate
5 commands
Aliases: outbound internet traffic, egress to internet, public egress, internet-bound traffic
Quick peek
Open full term page
AI and Machine Learning
premium
Knowledge source
Knowledge source controls which indexed or remote content an agentic retrieval workflow can query before ranking and returning grounding material to an AI application. Teams see it in knowledge base definitions, azure ai search services. It is not a search index, data source connection, knowledge store, vectorizer, skillset, or generic document library; confusing them can create ungrounded answers, wrong content source. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure AI Search
Intermediate
5 commands
Aliases: Azure AI Search knowledge source, agentic retrieval knowledge source, indexed knowledge source, remote knowledge source
Quick peek
Open full term page
Networking
premium
NAT Gateway
NAT Gateway means a managed Azure networking service that provides outbound internet connectivity for private resources in associated subnets. You see it when teams let virtual machines, containers, or private application workloads reach updates, APIs, package feeds, or external services. Think of it as an outbound source address and SNAT boundary, not a firewall for all network traffic. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path.
Outbound connectivity
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Platform landing zone
A platform landing zone is the shared Azure foundation that hosts common services for workload landing zones. It commonly includes connectivity, identity integration, management groups, policy, security monitoring, private DNS, logging, and automation so application teams can build on consistent enterprise guardrails.
Governance operations
fundamentals
5 commands
Aliases: Azure platform landing zone, shared platform landing zone, enterprise-scale platform landing zone
Quick peek
Open full term page
AI and Machine Learning
premium
Search relevance
Search relevance in Azure AI Search is the process of ranking matching documents so the most useful results appear first. Relevance can depend on BM25 keyword scoring, analyzers, filters, scoring profiles, vector retrieval, semantic ranking, application query design, and production feedback.
Search
intermediate
5 commands
Aliases: Azure AI Search relevance, search ranking, result relevance, BM25 relevance, semantic relevance, ranking quality
Quick peek
Open full term page
AI and Machine Learning
premium
Search vectorizer
A search vectorizer is an Azure AI Search index configuration that converts text or images into vectors at query time. It references an embedding model, connects through a vector profile, and should match the model used to create indexed vector content.
Search
advanced
5 commands
Aliases: vectorizer, search vectorizer, Azure AI Search vectorizer, query-time vectorization, integrated vectorization
Quick peek
Open full term page
AI and Machine Learning
premium
Semantic ranker
Semantic ranker is an Azure AI Search capability that applies language understanding to an initial result set and reranks the most relevant matches. It can improve keyword, vector, or hybrid search results and supports semantic captions, answers, and reranker scores when the index and query are configured correctly.
Azure AI Search semantic ranking
fundamentals
5 commands
Aliases: semantic reranker, Azure AI Search semantic ranker, semantic ranking, semantic search ranking
Quick peek
Open full term page
Storage
premium
Server endpoint
A server endpoint in Azure File Sync represents a registered Windows Server path that participates in a sync group. It connects local files to an Azure file share through a cloud endpoint and can use settings such as cloud tiering, free-space policy, and offline sync behavior.
Azure File Sync
intermediate
5 commands
Aliases: Azure File Sync server endpoint, file sync server endpoint, storage sync server endpoint, sync group server endpoint
Quick peek
Open full term page
Networking
premium
Service endpoint
A service endpoint is a subnet-level Azure Virtual Network capability that provides direct connectivity to supported Azure services over the Microsoft backbone. It extends the subnet identity to the service so the service can allow traffic from selected virtual networks without requiring a public IP address on the client workload.
Private access
fundamentals
5 commands
Aliases: Service endpoint, VNet service endpoint, service endpoint, service-endpoint, subnet service endpoint, virtual network service endpoint
Quick peek
Open full term page
Integration
premium
API Management self-hosted gateway
An API Management self-hosted gateway is a containerized copy of the API Management gateway that runs where your APIs live, such as on-premises, another cloud, or an Azure Kubernetes environment. Azure API Management remains the place where teams define APIs, products, policies, and observability..
Application delivery and API edge
intermediate
4 commands
Aliases: APIM self-hosted gateway, self-hosted API gateway
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search
Azure AI Search is a managed retrieval service for full-text, vector, hybrid, and semantic search across application and enterprise content. It provides search services, indexes, indexers, skillsets, ranking features, security controls, and APIs used by apps, copilots, and knowledge portals.
Search
fundamentals
4 commands
Aliases: Azure AI Search, AI Search, Azure Cognitive Search, enterprise search, vector search, hybrid search, semantic search, Search service
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI services account
An Azure resource that provides endpoints, keys, identity, networking, billing, and monitoring for one or more Azure AI service capabilities.
Azure AI services
fundamentals
4 commands
Aliases: AI services account, Azure AI multi-service resource, Foundry resource, Microsoft.CognitiveServices account
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled Kubernetes
An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled server
A Windows or Linux physical server or virtual machine outside Azure that is connected to Azure Arc and managed as an Azure resource.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled server, Azure Arc server, connected machine, hybrid machine
Quick peek
Open full term page
Networking
premium
Azure Bastion
A fully managed Azure service that provides secure RDP and SSH access to virtual machines without exposing VM public IP addresses.
Remote access
fundamentals
4 commands
Aliases: Azure Bastion host, Bastion, RDP SSH over Bastion, managed jump box
Quick peek
Open full term page
Databases
premium
Azure Cosmos DB
Azure Cosmos DB is a fully managed database service for NoSQL, relational, and vector workloads. It supports global distribution, elastic scale, multiple APIs, request-unit capacity, backup, and high availability so modern applications can store and query data without operating database servers.
Azure Cosmos DB
fundamentals
4 commands
Aliases: Azure Cosmos DB, Cosmos DB, Azure Cosmos DB for NoSQL, Cosmos database, global NoSQL database, request-unit database
Quick peek
Open full term page
Storage
premium
Azure File Sync
Azure File Sync syncs Azure file shares with Windows Server file servers so users keep familiar local access while data is centralized in Azure Files. It helps infrastructure teams modernize branch and data center file services without forcing every user and application to change paths on day one. You see it when Windows file server migrations, branch caching, cloud tiering, disaster recovery staging, or phased moves to Azure Files. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
Hybrid file services
intermediate
4 commands
Aliases: File Sync, Storage Sync Service
Quick peek
Open full term page
Storage
premium
Azure Files private endpoint
Azure Files private endpoint connects Azure file share traffic to a storage account through a private IP address in a virtual network. It helps network, security, and storage teams keep SMB or NFS access on private network paths without exposing file access directly over public endpoints. You see it when regulated workloads need private access, branch users connect through VPN, or applications must mount shares without public storage exposure. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge.
Private connectivity
intermediate
4 commands
Aliases: Private endpoint for Azure Files, Azure Files Private Link
Quick peek
Open full term page
Databases
premium
Azure SQL vCore model
The Azure SQL vCore purchasing model lets customers independently choose compute, storage, service tier, and hardware configuration for Azure SQL Database workloads.
Azure SQL Database
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Filter expression
Filter expression is an OData Boolean expression used by Azure AI Search to include or exclude documents based on filterable field values in Azure.
Azure AI Search
intermediate
4 commands
Aliases: Filter expression, filter expression
Quick peek
Open full term page
Networking
premium
Firewall rule
A firewall rule is a gatekeeping setting that decides which network sources can reach a protected Azure service. For Azure SQL, it often means allowing one public IP range to connect to a logical server or a specific database. For storage, MySQL, Cosmos DB, and other services, similar network rules limit where requests can come from. A firewall rule is not user authorization; it only answers whether the network path is allowed. Users or applications still need valid identity, credentials, and permissions after traffic gets through.
Network security
intermediate
4 commands
Aliases: Azure firewall rule, IP firewall rule, server firewall rule, network access rule
Quick peek
Open full term page
Databases
premium
Full-text search in Cosmos DB
Full-text search in Cosmos DB is the Azure Cosmos DB for NoSQL capability that lets selected text fields be indexed and queried by meaningfully matching words instead of only exact values. Teams use it to build search features inside a Cosmos DB application when text relevance, hybrid retrieval, or document search must stay close to transactional data. In daily Azure work, it shows up when engineers design product search, rank support articles, combine text and vector retrieval, tune index policy, or investigate why a query misses expected documents.
Azure Cosmos DB
advanced
4 commands
Aliases: Cosmos DB full-text search, full text search for NoSQL, Cosmos DB text search
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search