Search Azure terms

Security premium Customer-managed key rotation Customer-managed key rotation is the planned creation and adoption of new versions of a customer-managed encryption key while Azure services keep accessing protected data safely. Key management advanced 4 commands Aliases: Customer-managed key rotation Quick peek Open full term page

Web premium field-manual Master key A master key is a database-level symmetric key used to protect certificates, private keys, and credentials inside SQL databases. Teams use it when SQL objects need encrypted secrets or credentials for secure database operations. In plain English, it gives operators a named control for structured key protection, credential security, and auditable database encryption dependencies instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure Functions access keys intermediate 4 commands Aliases: Master key, _master key, Azure Functions master key, Functions admin key, Functions master key, admin host key, Azure Functions, Azure Functions access keys Quick peek Open full term page

Databases premium Azure SQL transparent data encryption Azure SQL Transparent Data Encryption helps protect Azure SQL Database data, log files, and backups at rest by encrypting and decrypting database pages without requiring application changes. Azure SQL Database fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Security premium field-manual Managed HSM Managed HSM is a fully managed, single-tenant hardware security module service for storing and using cryptographic keys. Teams use it when regulated workloads require hardware-backed keys, strong isolation, controlled key operations, and auditable administration. In plain English, it gives operators a named control for stronger key governance, compliance evidence, and separation of duties for cryptographic operations instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Key management intermediate 3 commands Aliases: Managed HSM, Azure Key Vault Managed HSM, Key management Quick peek Open full term page

Security premium Key Vault access policy Key Vault access policy controls which identities can read, write, list, delete, recover, sign, unwrap, or manage Key Vault objects when the vault uses policy-based access. Teams see it in key vault access policies blade, secret permissions. It is not Azure RBAC for Key Vault, a network firewall rule, a secret value, a certificate policy, or an application setting; confusing them can create overprivileged identities, broken secret retrieval. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Secrets and keys Intermediate 5 commands Aliases: access policy, vault access policy, Key Vault policy permissions, data-plane access policy Quick peek Open full term page

Databases learning-path-anchor Synthetic partition key A synthetic partition key is a partition key value you create because no single natural field distributes Cosmos DB data well enough. For example, tenantId alone may create one huge tenant partition, while date alone may concentrate today's traffic. A synthetic key might combine tenant, region, and date bucket into one stored value that... Cosmos DB intermediate 5 commands Aliases: generated partition key, composite partition key value, calculated partition key, synthetic key Quick peek Open full term page

Databases verified Redis access key A single primary or secondary secret used by Redis clients when key-based authentication is enabled for an Azure Redis cache. Cache intermediate 7 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning command-rich Search admin key A search admin key is one of the generated API keys for an Azure AI Search service that allows full read-write data-plane access. It can create, update, or delete indexes, indexers, data sources, and documents, so it must be protected, rotated, and replaced with role-based access when possible. Azure AI Search fundamentals 5 commands Aliases: Azure AI Search admin key, search service admin key, Azure Search API admin key, primary admin key, secondary admin key Quick peek Open full term page

Storage command-rich Table partition key A Table partition key is the value that groups related entities in Azure Table Storage. Think of it as the first address line for a record. Entities with the same PartitionKey sit in the same logical partition and can be queried together more efficiently. The PartitionKey combines with RowKey to uniquely identify one entity. Choosing it well is a design decision, not just a... Storage platform intermediate 5 commands Aliases: Azure Table PartitionKey, Table Storage PartitionKey, Table partition key value, PartitionKey property Quick peek Open full term page

Storage command-rich Table row key A Table row key is the unique name of an entity inside one Azure Table partition. PartitionKey gets you to the right group; RowKey identifies the exact record in that group. Together they form the entity primary key. RowKey design often carries an order ID, device ID, timestamp pattern, sequence number, or composite value. It matters because point reads, updates, deletes, duplicate detection, and... Storage platform intermediate 5 commands Aliases: Azure Table RowKey, Table Storage RowKey, Table row key value, RowKey property Quick peek Open full term page

Integration field-manual-complete Subscription key A subscription key is an API Management credential that lets a caller access APIs tied to a subscription. It is not the same as an Azure subscription, even though the name is easy to confuse. The key is usually issued to a developer, app, partner, or product subscriber and sent with requests to APIM. It helps the gateway identify and allow callers, apply product rules, and support rotation. Treat it like a secret because anyone with the key can call the protected API until it is revoked or changed. API gateway fundamentals 5 commands Aliases: APIM subscription key, API Management subscription key, Ocp-Apim-Subscription-Key, API gateway key Quick peek Open full term page

Integration field-manual-complete API Management Azure API Management is a hybrid, multicloud API management platform with a gateway, management plane, and developer portal for the full API lifecycle. API Management intermediate 3 commands Aliases: APIM Quick peek Open full term page

Integration strict-validated API Management named value An API Management named value is a reusable name/value pair for policies, supporting plain values, encrypted secrets, policy expressions, and Key Vault references. API Management policies intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Synapse workspace key A Synapse workspace key is the customer-managed encryption key that a Synapse workspace uses when an organization does not want to rely only on Microsoft-managed encryption. The key is stored in Azure Key Vault, and the workspace references it by name and key identifier. For operators, this is not just a checkbox. The key... Synapse Analytics fundamentals 8 commands Aliases: Synapse customer-managed key, Synapse CMK, workspace encryption key, Synapse workspace customer-managed key Quick peek Open full term page

Databases premium Foreign key A foreign key is a column or set of columns that links rows in one table to key values in another table and helps enforce referential integrity. Teams use it to keep child records such as orders, invoices, payments, devices, or claim lines tied to valid parent records instead of allowing orphaned data to silently enter the database. It is not an index by itself, a security boundary, a substitute for business validation, or an enforced guarantee in every Azure analytics engine that can store a declared relationship. Relational database intermediate 6 commands Aliases: FK, foreign key constraint, referential constraint, SQL foreign key Quick peek Open full term page

Databases premium Cosmos DB partition key value Cosmos DB partition key value means the actual value stored on an item for the configured partition key path in Azure Cosmos DB. In plain English, it is the thing developers and operators check when they need to understand how data access really works. It connects the application model to routing items into logical partitions, enabling efficient point reads, transactional scope, and balanced throughput. For a production team, it turns vague database talk into a specific thing to inspect in the portal, SDK code, templates, metrics, and incident notes. Azure Cosmos DB intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Event Hubs partition key An Event Hubs partition key is a value supplied by a producer that determines which partition receives related events, helping preserve order for events with the same key. Teams use it to route related events to the same partition when applications need ordered processing for a tenant, device, account, route, or business entity. It is not a database primary key, a Cosmos DB partition key, a security boundary, or a guarantee that the selected partition will never become hot. Event Hubs intermediate 5 commands Aliases: partition key, event partition key, producer partition key Quick peek Open full term page

Web premium Function key Microsoft Learn describes Azure Functions access keys as secret values used to make function endpoints harder to call without authorization. A function key is scoped to a specific function, while host, system, and master keys serve broader runtime or administrative access needs for a function app. Azure Functions security intermediate 5 commands Aliases: Azure Functions access key, Function access key, x-functions-key Quick peek Open full term page

Monitoring and Observability premium Instrumentation key Instrumentation key controls which Application Insights component receives telemetry and how older application configurations identify the target monitoring resource. Teams see it in application insights resource properties, app settings. It is not a secret access key, API key, SAS token, Log Analytics workspace ID, or managed identity credential; confusing them can create missing telemetry, cross-environment data pollution. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Application Insights Fundamentals 5 commands Aliases: ikey, Application Insights instrumentation key, AI instrumentation key, telemetry instrumentation key Quick peek Open full term page

Security premium Key Key controls how protected workloads use cryptographic material for encryption, signing, key wrapping, customer-managed keys, and regulated data protection. Teams see it in key vault keys, managed hsm keys. It is not a password, secret value, certificate, storage account key, shared access signature, or application configuration setting; confusing them can create failed encryption operations, accidental key deletion. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Secrets and cryptography Fundamentals 5 commands Aliases: Azure Key Vault key, cryptographic key, key object, encryption key Quick peek Open full term page

AI and Machine Learning premium Key phrase extraction Key phrase extraction controls how text-mining workloads turn comments, claims, documents, and support tickets into searchable phrases for search, analytics, routing, and review. Teams see it in azure ai language resources, azure ai search skillsets. It is not keyword search, entity recognition, sentiment analysis, embeddings, semantic ranking, or manually authored metadata tags; confusing them can create missing important topics, noisy tags. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Language and search enrichment Intermediate 5 commands Aliases: Azure Language key phrase extraction, key phrase skill, KeyPhraseExtractionSkill, key phrases Quick peek Open full term page

Security premium Key Vault Azure Key Vault is a cloud service for storing and controlling access to secrets, keys, and certificates. It helps applications, administrators, and automation protect sensitive values with encryption, access control, logging, purge protection, private networking, and managed integration across Azure workloads. Secrets and keys Fundamentals 5 commands Aliases: Key Vault, Azure Key Vault, vault, secrets store, certificate vault, secure secrets store, key vault resource Quick peek Open full term page

Management and Governance premium Management group Microsoft Learn describes management groups as governance containers above subscriptions that let organizations organize subscriptions into a hierarchy. They support unified policy, access management, and governance controls across many subscriptions instead of repeating the same assignments subscription by subscription at enterprise scale. Azure governance fundamentals 5 commands Aliases: Azure management group, Management group hierarchy, MG scope Quick peek Open full term page

Management and Governance premium Parent management group A parent management group is the branch above a child management group or subscription. Rules assigned at the parent can flow downward, so changing the parent is a broad governance decision, not just a local label change. Management groups fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Root management group The root management group is the top of the Azure governance tree for a tenant. Because everything sits beneath it, policies or access assigned there can have very wide impact. Treat root-scope changes as enterprise-level decisions. Management groups intermediate 5 commands Aliases: tenant root group Quick peek Open full term page

AI and Machine Learning premium Search query key A search query key is an Azure AI Search API key that permits read-only document queries against indexes. It is intended for client applications that need search results but should not manage indexes, data sources, indexers, skillsets, or service configuration. Search fundamentals 5 commands Aliases: Azure AI Search query key, search API query key, read-only search key, query API key, Azure Search query key Quick peek Open full term page

AI and Machine Learning premium Admin key Admin key is an Azure AI Search API key with administrative access to the search service data plane. In everyday Azure work, teams use it to create, update, or delete indexes, indexers, data sources, skillsets, synonym maps, and query data when key-based access is enabled. The useful evidence is primary or secondary key, service name, Azure AI Search intermediate 4 commands Aliases: Azure AI Search admin key, Search service admin key, search admin API key Quick peek Open full term page

Integration premium API Management backend An API Management backend is the HTTP service that implements a frontend API and its operations behind the API Management gateway. API Management intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium API Management gateway The API Management gateway is the component that receives API requests, applies policies, routes traffic to backends, and returns responses to callers. API Management intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium API Management operation An API Management operation is one callable action inside an API, such as GET /orders or POST /claims. It tells Azure API Management which HTTP method, URL template, parameters, and display name should be exposed to consumers. The operation can map to a backend route, return a mock response, accept. Application delivery and API edge intermediate 4 commands Aliases: APIM operation, API operation in API Management Quick peek Open full term page

Integration premium API Management revision An API Management revision is a safe working copy of an API for changes that should not break consumers. You create a revision, adjust operations, descriptions, policies, or backend settings, test the changes, and then make that revision current when it is ready. Existing consumers keep using the. Application delivery and API edge intermediate 4 commands Aliases: APIM revision, API revision Quick peek Open full term page

Integration premium API Management self-hosted gateway An API Management self-hosted gateway is a containerized copy of the API Management gateway that runs where your APIs live, such as on-premises, another cloud, or an Azure Kubernetes environment. Azure API Management remains the place where teams define APIs, products, policies, and observability.. Application delivery and API edge intermediate 4 commands Aliases: APIM self-hosted gateway, self-hosted API gateway Quick peek Open full term page

Integration premium API Management version An API Management version is a separate version of an API that helps teams handle breaking changes. Clients can keep using an older version while newer clients adopt the new version when ready. Versions can be identified through a path, header, or query parameter, depending on the versioning. Application delivery and API edge intermediate 4 commands Aliases: APIM version, API version in API Management Quick peek Open full term page

Management and Governance premium Child management group A child management group is a branch under a parent management group. It helps organize subscriptions into smaller governance areas, while still inheriting broad rules from above. Use it when one tenant needs different policy or access boundaries for teams, business units, or environments. Management groups fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Cosmos DB partition key A Cosmos DB partition key is the field on each item that decides how Cosmos DB groups and spreads data. In a customer profile container it might be /tenantId; in an order system it might be /customerId or /orderDateBucket. The value becomes part of every point read and many queries. A good key keeps data and requests distributed. A poor key creates hot partitions, throttling, awkward queries, and painful migrations because you cannot simply edit the partition key for an existing container. Azure Cosmos DB intermediate 4 commands Aliases: Azure Cosmos DB partition key, cosmos db partition key Quick peek Open full term page

Storage premium Disable Shared Key authorization Disable Shared Key authorization is a storage account setting that prevents requests from being authorized with account keys and pushes supported access toward Microsoft Entra authorization. Storage security intermediate 4 commands Aliases: disallow Shared Key, AllowSharedKeyAccess false, prevent Shared Key access, disable storage account key access Quick peek Open full term page

Identity premium Entitlement management Entitlement management uses access packages to govern access to groups, applications, SharePoint sites, and other resources for internal and external identities. Identity Governance intermediate 4 commands Aliases: Microsoft Entra entitlement management, Entra entitlement management, access package governance Quick peek Open full term page

Compute premium Host key Host key is an Azure Functions access key scoped to the function app host that can authorize requests to multiple HTTP-triggered functions. Azure Functions beginner 4 commands Aliases: Azure Functions host key, function app host key, Host key, host-key Quick peek Open full term page

Management and Governance premium Management group hierarchy A management group hierarchy is the tree that organizes an Azure estate. Subscriptions can sit under management groups, management groups can sit under parents, and broad policy or access settings can flow down from higher branches to lower ones. Management groups intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Management group ID A management group ID is the stable name Azure tools use for a management group. The display name can be friendly, but the ID is what CLI commands, resource IDs, and policy assignments need when they target that governance scope. Management groups fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Management group scope Management group scope means the operation targets a branch of the Azure hierarchy, not just one subscription. It is useful for organization-wide policy, access, and landing-zone governance, but mistakes can affect many subscriptions at once. Management scopes intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Microsoft-managed key for storage Microsoft-managed key for Storage means the default Azure Storage encryption approach where Microsoft manages the keys that protect stored data at rest. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Storage encryption advanced 4 commands Aliases: platform-managed key for storage, PMK for storage, Microsoft managed storage encryption key Quick peek Open full term page

AI and Machine Learning premium AI service key An AI service key is a secret access key for an Azure AI service resource. Clients pass it, commonly with the Ocp-Apim-Subscription-Key header, to authenticate API requests when key-based authentication is used. Azure AI services fundamentals 3 commands Aliases: Azure AI service key, Cognitive Services key, Ocp-Apim-Subscription-Key, resource key Quick peek Open full term page

AI and Machine Learning premium AI services account key An AI services account key is a secret key for a multi-service Azure AI or Microsoft Foundry resource. It can authenticate requests for supported services tied to that resource, making storage, rotation, and access control especially important. Azure AI services intermediate 3 commands Aliases: multi-service account key, Foundry resource key, AIServices account key, Cognitive Services account key Quick peek Open full term page

AI and Machine Learning premium Cognitive services account key A key used to authenticate to an Azure AI services resource. AI platform and search intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Management-plane operation A management-plane operation is an Azure control action. It is what you do when you create a virtual machine, update a storage account setting, assign a role, list resources, validate a deployment, or delete a resource group. Microsoft Learn anchors this term in What is Azure Resource Manager?, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use. Azure Resource Manager fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Storage complete Storage account access key A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Storage accounts advanced 10 commands Aliases: storage access key, account key, shared key, storage key Quick peek Open full term page

Databases verified Redis access keys The primary and secondary key pair used for key-based authentication to an Azure Redis cache when that mode is enabled. Cache and in-memory data fundamentals 7 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Lifecycle management rule Microsoft Learn describes lifecycle policy rules as named definitions with filters and actions. A rule selects blobs by type, prefix, or index tags, then transitions or deletes current versions, previous versions, or snapshots according to age and lifecycle conditions. Azure Storage intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases verified Partition key In Azure Cosmos DB, a partition key is the item property and path used to distribute data and request units across logical and physical partitions. Good keys spread storage and throughput evenly, keep common queries efficient, and cannot be changed in place after container creation. Cosmos DB intermediate 5 commands Aliases: Cosmos DB partition key, logical partition key, partition key path, partition key value, container partition key Quick peek Open full term page