Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 92 matching terms. Narrow the search to reduce the list.
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
AI and Machine Learning
premium
Computer Vision
the Azure AI capability that helps applications understand images, read text, detect visual features, and return structured insights from pictures or screenshots
Azure AI services
fundamentals
12 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Bicep private registry
A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules.
Bicep
fundamentals
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Face API
The Face API is an Azure AI service API that provides face detection, recognition, verification, identification, grouping, and related face analysis capabilities. Teams use it to build applications that detect faces in images, compare faces, verify identity scenarios, support liveness workflows, or organize face-related image data under approved responsible AI controls. It is not a general computer vision labeler, proof of identity by itself, a surveillance policy, or permission to use biometric capabilities without legal, privacy, and access review.
Azure AI services
intermediate
6 commands
Aliases: Azure AI Face, Azure Face API, Face service
Quick peek
Open full term page
AI and Machine Learning
premium
Face service
Face service is an Azure AI service that provides APIs for face detection, face analysis, verification, identification, grouping, and liveness-related workflows under approved access controls. Teams use it to build applications that detect faces in images, compare face evidence, verify approved identity scenarios, support liveness checks, or manage face lists within privacy and responsible AI controls. It is not a general image classification service, legal approval to process biometric data, a replacement for human identity review, or a guarantee that every face decision is correct.
Azure AI services
intermediate
6 commands
Aliases: Azure AI Face, Azure AI Face service, Azure Face service, Face API, Azure AI services Face
Quick peek
Open full term page
Compute
premium
Gallery image version
Gallery image version is a specific published version of a gallery image that virtual machines and scale sets can use as their source. Teams use it to roll out tested OS and application baselines with version numbers, regional replication, retirement dates, and rollback options. In daily Azure work, it appears when engineers promote a golden image, deploy identical VMs across regions, retire vulnerable builds, or troubleshoot why a new VM used the wrong baseline. It is not the image family definition, a live VM, an operating system patch job, or proof that every deployed VM remains compliant after boot.
Disks and images
intermediate
6 commands
Aliases: Azure Compute Gallery image version, SIG image version, image version
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
ACR build
ACR build lets Azure Container Registry build an image in the cloud from source context or a Dockerfile. It is handy when you do not want a local Docker engine or want a pipeline to build and push directly in Azure.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR geo-replication
ACR geo-replication keeps container images closer to workloads in multiple regions. Developers push to one registry, and Azure replicates content so regional clusters can pull faster and more reliably, assuming the registry uses the Premium tier.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR import
ACR import is a server-side image copy. Instead of pulling an image to your machine and pushing it back, Azure copies it into your registry directly. It is useful for migration, mirroring, controlled base images, and pipeline cleanup.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR quarantine policy
ACR quarantine policy is a safety gate for images. Newly pushed images can be hidden from normal users until security scanning or approval clears them, reducing the chance that unreviewed images are pulled into workloads.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
ACR Task
An ACR Task is automation inside Azure Container Registry for building, testing, patching, or maintaining container images. Instead of relying only on a developer laptop or separate build server, the registry can run a build from source, a.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry Task, ACR Tasks, registry task
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Azure Virtual Desktop
Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control.
Virtual desktops
fundamentals
5 commands
Aliases: AVD
Quick peek
Open full term page
Web
premium
Blob trigger
Microsoft Learn describes the Blob Storage trigger for Azure Functions as a binding that starts a function when a new or updated blob is detected. The blob content is passed to code, letting serverless workloads react to files, documents, images, data feeds, or storage events.
Azure Functions
intermediate
5 commands
Aliases: Blob trigger, trigger, blob trigger
Quick peek
Open full term page
Containers
premium
Connected registry
an Azure Container Registry capability that keeps container images available in remote, edge, or intermittently connected environments by syncing with a parent registry
Azure Container Registry
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
DevOps
premium
Container image build
the build step that turns source, Dockerfile instructions, dependencies, and metadata into a container image stored in a registry
Deployment workflows
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Document analysis operation
A document analysis operation is an asynchronous Document Intelligence request that analyzes a document with a model and returns extracted content, layout, and fields when polling completes.
Document Intelligence
intermediate
5 commands
Aliases: Analyze operation, analyze document operation, Document Intelligence analysis request, async analysis operation
Quick peek
Open full term page
Compute
premium
Gallery image definition
Gallery image definition is the Azure Compute Gallery record that defines an image family before individual image versions are published. Teams use it to standardize OS type, generation, publisher, offer, SKU, architecture, and image state so teams deploy consistent virtual machine builds. In daily Azure work, it appears when engineers create hardened Windows or Linux baselines, separate application images, control VM generation compatibility, or publish reusable images across regions. It is not the actual disk snapshot, a VM instance, an image version, a patching process, or proof that every VM deployed from it is secure.
Disks and images
intermediate
5 commands
Aliases: Azure Compute Gallery image definition, SIG image definition, image definition
Quick peek
Open full term page
Containers
premium
Image pull secret
Image pull secret is a Kubernetes secret that stores registry credentials so pods can pull private container images at deployment time.
Azure Container Registry
intermediate
5 commands
Aliases: Image pull secret, image pull secret, image-pull-secret
Quick peek
Open full term page
Containers
premium
Kubelet identity
Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
AKS identity
Intermediate
5 commands
Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity
Quick peek
Open full term page
AI and Machine Learning
premium
Search skillset
A search skillset is a reusable Azure AI Search object attached to an indexer. It groups one or more skills that transform raw source content during indexing, producing searchable text, vectors, structure, or custom enrichments before output mappings populate the target index.
Azure AI Search
fundamentals
5 commands
Aliases: Azure AI Search skillset, AI enrichment pipeline, cognitive skillset, indexer skillset, search enrichment pipeline
Quick peek
Open full term page
AI and Machine Learning
premium
Search vectorizer
A search vectorizer is an Azure AI Search index configuration that converts text or images into vectors at query time. It references an embedding model, connects through a vector profile, and should match the model used to create indexed vector content.
Search
advanced
5 commands
Aliases: vectorizer, search vectorizer, Azure AI Search vectorizer, query-time vectorization, integrated vectorization
Quick peek
Open full term page
Security
premium
Secret
A secret is sensitive data that Azure Key Vault stores and controls, such as a password, API key, token, or connection string. Secrets have names, values, versions, metadata, and access controls, and Key Vault encrypts them at rest through audited operations.
Secrets and keys
fundamentals
5 commands
Aliases: Azure secret, Key Vault secret, secret value, application secret, stored credential
Quick peek
Open full term page
Analytics
premium
Auto Loader
Auto Loader is the Azure Databricks feature that watches cloud storage and brings in new files without forcing engineers to rescan everything manually. In plain terms, it is a safer ingestion pattern for folders that keep receiving CSV, JSON, Parquet, images, or other data files. It can process existing files, then continue with new.
Analytics platform
intermediate
4 commands
Aliases: Databricks Auto Loader, cloudFiles, Auto Loader cloud files, Lakeflow Auto Loader
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Vision
The Azure vision service that analyzes images and visual content for tasks such as OCR, object information, captions, tags, and image understanding.
AI services
intermediate
4 commands
Aliases: Azure Vision, Computer Vision, Image Analysis, Vision in Foundry Tools
Quick peek
Open full term page
Compute
premium
Azure Compute Gallery
A service for organizing, versioning, replicating, and sharing VM images and application packages across Azure subscriptions, tenants, and regions.
Disks and images
intermediate
4 commands
Aliases: Shared Image Gallery
Quick peek
Open full term page
AI and Machine Learning
premium
Batch inference
Batch inference is the process of generating predictions over larger sets of input data asynchronously, often using Azure Machine Learning batch endpoints and deployments.
Azure OpenAI
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Custom Vision
an Azure AI service for building, training, publishing, and improving custom image classification models from labeled images.
Azure AI Vision
fundamentals
4 commands
Aliases: Azure AI Custom Vision, Custom Vision Service, custom image classifier
Quick peek
Open full term page
Containers
premium
Defender for Containers
Microsoft Defender for Containers is a Defender for Cloud plan that provides security posture, vulnerability assessment, and threat protection for containerized assets such as Kubernetes clusters, workloads, registries, and images.
Azure Kubernetes Service
intermediate
4 commands
Aliases: Microsoft Defender for Containers, container protection plan, Defender container security
Quick peek
Open full term page
Compute
premium
Disk encryption set
A disk encryption set is an Azure resource that connects managed disks, snapshots, or images to a customer-managed key used for server-side encryption.
Managed disk encryption
intermediate
4 commands
Aliases: DES, managed disk encryption set, disk CMK set, customer-managed key disk encryption set
Quick peek
Open full term page
Networking
premium
Front Door cache purge
A Front Door cache purge removes selected cached content from Azure Front Door edge locations so future requests retrieve fresh content from the origin.
Application delivery and API edge
intermediate
4 commands
Aliases: Azure Front Door cache purge, AFD cache purge, Front Door purge content
Quick peek
Open full term page
Compute
premium
Generalized image
Generalized image is a virtual machine image whose machine-specific identity has been removed so many new VMs can be created safely from the same source. Teams use it to publish reusable Windows or Linux baselines to Azure Compute Gallery without cloning host names, security identifiers, SSH host keys, or machine-specific state. In daily Azure work, it appears when engineers capture a golden image, prepare VM scale set images, build hardened server templates, or explain why a source VM cannot be reused after generalization.
Disks and images
intermediate
4 commands
Aliases: generalized VM image, sysprepped image, deprovisioned image
Quick peek
Open full term page
AI and Machine Learning
premium
HNSW
HNSW is a graph-based approximate nearest neighbor method used by vector search systems to find similar embeddings quickly at query time.
Azure AI Search vector search
advanced
4 commands
Aliases: Hierarchical Navigable Small World, HNSW vector search, HNSW
Quick peek
Open full term page
Compute
premium
Image
Image is a captured virtual machine operating system and configuration used to create new Azure virtual machines or image versions.
Images
beginner
4 commands
Aliases: Azure VM image, image, Image, virtual machine image, VM image
Quick peek
Open full term page
AI and Machine Learning
premium
Image Analysis
Image Analysis is an Azure AI Vision capability that uses pretrained models to extract visual features, text, people, objects, tags, and captions from images.
Azure AI Vision
intermediate
4 commands
Aliases: Analyze Image, Azure AI Vision Image Analysis, Computer Vision Image Analysis, image analysis, Image Analysis
Quick peek
Open full term page
AI and Machine Learning
premium
Image generation model
Image generation model is an Azure OpenAI or Foundry model deployment that creates images from prompts, commonly using the current gpt-image model family.
Azure OpenAI
intermediate
4 commands
Aliases: Azure OpenAI image model, gpt-image model, image generation model, Image generation model, text-to-image model
Quick peek
Open full term page
Compute
premium
LUN
A LUN, or logical unit number, identifies a data disk attachment on an Azure virtual machine. Azure records the LUN with each attached data disk so the VM, operating system, automation, and operators can distinguish disks and keep mount or application mappings consistent.
Disks and images
intermediate
4 commands
Aliases: disk LUN, logical unit number
Quick peek
Open full term page
AI and Machine Learning
premium
Machine Learning environment
A Machine Learning environment defines the software context for Azure Machine Learning training or inferencing. It captures packages, variables, Docker images, conda settings, and other runtime details so jobs can run reproducibly across compute targets. That context supports safer operational decisions.
Machine learning
intermediate
4 commands
Aliases: Azure ML environment, ML environment
Quick peek
Open full term page
AI and Machine Learning
premium
ML batch endpoint
ML batch endpoint is an Azure Machine Learning endpoint designed to run batch scoring jobs against larger datasets instead of serving real-time requests. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Azure Machine Learning
intermediate
4 commands
Aliases: AML batch endpoint, Azure ML batch endpoint, batch inference endpoint, batch scoring endpoint
Quick peek
Open full term page
Containers
premium
AKS cluster upgrade
An AKS cluster upgrade moves an AKS cluster and its node pools to a newer supported Kubernetes version or updates node images after checking available versions, planning surge capacity, and validating workload readiness.
Azure Kubernetes Service
intermediate
3 commands
Aliases: AKS upgrade, Kubernetes version upgrade, AKS node upgrade, cluster version upgrade
Quick peek
Open full term page
Containers
premium
AKS Windows node pool
An AKS Windows node pool is a group of Windows Server worker nodes in an AKS cluster, used to run Windows container workloads while Linux pools continue to host core Kubernetes system components.
AKS
intermediate
3 commands
Aliases: Windows node pool, Windows Server node pool, AKS Windows containers
Quick peek
Open full term page
Storage
premium
Block blob
A block blob is an Azure Blob Storage object type optimized for uploading and storing large amounts of text or binary data as independently uploaded blocks.
Blob Storage
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
Cold start
A slower first request after an app starts, restarts, scales, or wakes from idle.
App Service
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container image digest
the immutable sha256 reference that identifies the exact container image manifest Azure pulls during deployment
Container images
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container image tag
the human-readable label teams use to version, promote, and find container images in a registry
Container images
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Content Safety
the Azure AI service used to detect harmful text and image content before it reaches users or workflows
Responsible AI
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Content Understanding
Content Understanding is documented by Microsoft as part of the Azure AI services area in Azure.
Azure AI services
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Monitoring and Observability
premium
Cumulative Layout Shift
a web performance metric that measures how much visible page content unexpectedly moves while a user is trying to read or interact.
Web performance
advanced
3 commands
Aliases: CLS, Core Web Vitals CLS, layout shift metric
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search