Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 265 matching terms. Narrow the search to reduce the list.
Containers
field-manual-complete
Kubernetes Service
Microsoft Learn explains that Kubernetes Services in AKS expose applications through service types such as ClusterIP, NodePort, LoadBalancer, and ExternalName. LoadBalancer Services can create Azure load balancer resources, while internal load balancers use private IP addresses for restricted access. in production AKS clusters.
Kubernetes networking
intermediate
5 commands
Aliases: Kubernetes Service, aks-cluster, aks-ingress-controller, aks-network-policy, azure-kubernetes-service, ingress, kubernetes service, kubernetes-deployment, kubernetes-namespace, kubernetes-service, load-balancer, load-balancer-backend-pool, node-pool
Quick peek
Open full term page
Containers
premium
AKS network policy
An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network policy, aks network policy
Quick peek
Open full term page
Containers
premium
Azure CNI
An AKS networking approach where CNI plugins assign pod addresses, route pod traffic, and integrate Kubernetes networking with Azure virtual networks.
Kubernetes networking
fundamentals
4 commands
Aliases: Azure Container Networking Interface
Quick peek
Open full term page
Containers
field-manual-complete
AKS network plugin
An AKS network plugin is the networking choice that decides how Kubernetes pods get IP addresses and how traffic moves inside an Azure Kubernetes Service cluster.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network plugin, aks network plugin
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Containers
premium
Kubernetes DaemonSet
A Kubernetes DaemonSet is a workload controller that ensures a copy of a pod runs on selected nodes, commonly for logging agents, monitoring collectors, security agents, and node-level services.
Kubernetes workloads
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Compute
premium
Accelerated networking for VM
Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads.
Virtual Machines
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Persistent Volume
A Kubernetes Persistent Volume is cluster storage provisioned for pods and bound through persistent volume claims so data can outlive individual pod restarts, rescheduling, or replacements.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StatefulSet
A Kubernetes StatefulSet is a workload controller for stateful applications that require stable network identities, ordered deployment or scaling, and persistent storage per replica.
Kubernetes workloads
Advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StorageClass
A Kubernetes StorageClass defines how persistent storage is dynamically provisioned for persistent volume claims, including the driver, performance tier, reclaim policy, and binding behavior.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Version
Kubernetes Version is the control plane and node version level that determines supported Kubernetes APIs, feature availability, security patches, and upgrade requirements for a cluster.
AKS lifecycle
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled Kubernetes
An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster
Quick peek
Open full term page
Containers
field-manual-complete
Kubernetes Namespace
A Kubernetes Namespace is a logical boundary used to organize namespaced resources, separate teams or environments, and apply scoped policy, access, and quota controls inside a cluster.
Kubernetes organization
Beginner
5 commands
Aliases: Kubernetes Namespace, kubernetes-namespace, azure-kubernetes-service, kubernetes-deployment, kubernetes-service, aks-network-policy, rbac, image-pull-secret, pod, kubeconfig, node-pool, resource-group, aks-cluster
Quick peek
Open full term page
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
Containers
premium
AKS cluster
Microsoft Learn describes Azure Kubernetes Service as a managed Kubernetes service for deploying and managing containerized applications. An AKS cluster provides the managed Kubernetes control plane, node pools, networking, identity, scaling, and Azure integration points for running containers in Azure production environments.
Azure Kubernetes Service
fundamentals
5 commands
Aliases: Azure Kubernetes cluster, AKS managed cluster, Kubernetes cluster in Azure
Quick peek
Open full term page
Containers
premium
AKS ingress controller
Microsoft Learn explains AKS ingress through Kubernetes ingress resources and controllers that route HTTP or HTTPS traffic to services in a cluster. AKS application routing options can configure ingress controllers, DNS integration, TLS handling, and related networking components for production applications.
AKS networking
intermediate
5 commands
Aliases: AKS ingress, Ingress controller for AKS, Kubernetes ingress controller
Quick peek
Open full term page
Containers
premium
AKS private cluster
Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation.
AKS networking
advanced
5 commands
Aliases: Azure Kubernetes Service private cluster, aks private cluster
Quick peek
Open full term page
Networking
premium
Ingress
Ingress controls how users, APIs, partners, and internal services can reach a workload and which network controls protect that entry point. Teams see it in container apps ingress settings, kubernetes ingress controllers. It is not egress, a firewall rule alone, a load balancer backend pool, or an application route inside code; confusing them can create public exposure, unreachable apps. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Application Networking
Fundamentals
5 commands
Aliases: incoming application traffic, inbound app traffic, Container Apps ingress, external ingress, internal ingress
Quick peek
Open full term page
Containers
premium
Kubenet
Kubenet is an AKS network plugin where nodes receive virtual network IP addresses and pods receive IP addresses from a separate pod CIDR, with routing handled through user-defined routes.
AKS networking
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service
Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
4 commands
Aliases: App Service, app service
Quick peek
Open full term page
Containers
premium
Azure CNI Overlay
An AKS networking mode that assigns pods private overlay CIDR addresses while nodes use VNet IPs, conserving subnet address space.
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS overlay networking
Quick peek
Open full term page
Containers
premium
AKS add-on
An AKS add-on is a Microsoft-supported capability that can be enabled on an Azure Kubernetes Service cluster to add functionality such as monitoring, policy, ingress, or security integration, with installation and lifecycle managed through AKS.
Azure Kubernetes Service
fundamentals
3 commands
Aliases: AKS addon, Azure Kubernetes Service add-on, managed AKS integration, AKS integration
Quick peek
Open full term page
Containers
premium
AKS Azure Policy add-on
The AKS Azure Policy add-on integrates Azure Policy with an AKS cluster so policy assignments can audit or enforce Kubernetes rules through in-cluster policy components and report compliance back to Azure Policy.
Azure Kubernetes Service
intermediate
3 commands
Aliases: Azure Policy add-on for AKS, AKS policy add-on, Gatekeeper add-on, Azure Policy for Kubernetes
Quick peek
Open full term page
Containers
premium
AKS cluster upgrade
An AKS cluster upgrade moves an AKS cluster and its node pools to a newer supported Kubernetes version or updates node images after checking available versions, planning surge capacity, and validating workload readiness.
Azure Kubernetes Service
intermediate
3 commands
Aliases: AKS upgrade, Kubernetes version upgrade, AKS node upgrade, cluster version upgrade
Quick peek
Open full term page
AI and Machine Learning
learning-path-anchor
Text to speech
Text to speech in Azure AI Speech converts written text or SSML into synthesized audio using neural voices, custom voice options, language support, and APIs. Teams use it to add spoken responses to apps, contact centers, accessibility tools, devices, and media workflows while governing region, keys, networking, and quota.
Azure AI services
fundamentals
4 commands
Aliases: Text to speech, text to speech, Azure Text to speech, Microsoft Learn Text to speech, TTS, speech synthesis, Azure AI Speech synthesis, neural voices, SSML speech
Quick peek
Open full term page
Containers
field-manual-complete
Container App environment
Microsoft Learn describes a Container Apps environment as a secure boundary around one or more container apps and jobs. The runtime manages the environment by handling OS upgrades, scale operations, failover procedures, resource balancing, shared networking, and observability settings for the workloads that run inside it.
Serverless containers
fundamentals
5 commands
Aliases: Container App environment, app-service-plan, azure-kubernetes-service, azure-monitor, container app environment, container-app-environment, container-apps, container-apps-ingress, container-apps-managed-environment, container-apps-revision, container-apps-secret, container-apps-workload-profile, managed-identity
Quick peek
Open full term page
Containers
strict-validated
AKS service mesh
AKS service mesh is a service-to-service traffic layer for AKS workloads, commonly delivered through the Istio-based add-on for traffic management, mTLS, and telemetry.
AKS networking
Advanced
5 commands
Aliases: Azure Kubernetes Service service mesh, aks service mesh
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI resource
An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context.
Azure OpenAI
fundamentals
12 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
template-specs-upgraded
Scheduled job
Microsoft Learn explains that an Azure Container Apps scheduled job is a job resource with trigger type Schedule and a cron expression. It starts containerized work at planned times, then uses job settings such as replica timeout, retry limit, parallelism, and completion count to control execution.
Azure Container Apps
intermediate
4 commands
Aliases: Container Apps scheduled job, ACA scheduled job, scheduled container job, cron job in Container Apps, Schedule trigger type
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI Service
Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls.
Generative AI
fundamentals
11 commands
Aliases: Azure OpenAI
Quick peek
Open full term page
Containers
field-manual-complete
AKS egress
AKS egress is outbound network traffic from AKS nodes or workloads to destinations outside the pod or cluster network. AKS egress behavior is shaped by outbound type choices such as load balancer, NAT Gateway, or user-defined routes.
Azure Kubernetes Service networking
intermediate
3 commands
Aliases: AKS outbound traffic, cluster egress, AKS outbound type, pod egress
Quick peek
Open full term page
Containers
strict-validated
AKS control plane
The AKS control plane is the Azure-managed Kubernetes API and orchestration layer that coordinates cluster state, authentication, upgrades, and communication with worker nodes.
Azure Kubernetes Service
fundamentals
3 commands
Aliases: Kubernetes control plane, AKS managed control plane, AKS API server, managed Kubernetes API
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI
Azure OpenAI provides OpenAI model capabilities through Azure resources, deployments, identity, networking, quota, and monitoring controls.
Azure OpenAI
intermediate
8 commands
Aliases: Azure OpenAI Service
Quick peek
Open full term page
Web
premium
App Service private endpoint
An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access.
App Service Networking
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Compute
premium
Azure Functions
Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers.
Serverless compute
intermediate
6 commands
Aliases: Functions, Function App, serverless functions
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
Management and Governance
premium
Bicep private registry
A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules.
Bicep
fundamentals
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Networking
premium
DDoS Protection
Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities.
Network security
intermediate
6 commands
Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection
Quick peek
Open full term page
Containers
premium
Event-driven job
An Event-driven job in Azure Container Apps starts job executions when a configured scale rule detects work from an event source. Teams use it to run finite container work such as queue processing, batch enrichment, report generation, or cleanup only when events or messages are waiting. It is not a continuously running container app, an AKS deployment, a scheduled job, or a guarantee that every event is processed exactly once. In production, confirm job trigger type, scale rule, minimum and maximum executions, polling interval, image version, secret references, managed identity, execution status, logs, retries, and queue depth before treating the.
Azure Container Apps
intermediate
6 commands
Aliases: Container Apps event-driven job, KEDA job, event-triggered container job
Quick peek
Open full term page
Containers
premium
Event-driven scale rule
An Event-driven scale rule is a Container Apps scaling configuration that uses event-source metrics to decide how many replicas or job executions to run. Teams use it to connect queue length, event backlog, HTTP load, Kafka lag, or other scaler metadata to automatic scaling decisions. It is not the event source itself, a Kubernetes HPA object, a fixed replica count, or a complete guarantee that the application processes events correctly. In production, confirm scaler type, metadata names, authentication method, min and max replicas, polling interval, cooldown behavior, event source metrics, container revision, and downstream capacity before treating the design as.
Azure Container Apps
intermediate
6 commands
Aliases: KEDA scale rule, Container Apps event scale rule, custom scale rule
Quick peek
Open full term page
Networking
premium
ExpressRoute
ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before.
Hybrid connectivity
intermediate
6 commands
Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity
Quick peek
Open full term page
Identity
premium
Federated credential
A Federated credential is a Microsoft Entra trust configuration that allows a workload to exchange a token from an external identity provider for an Entra access token without using a stored secret. Teams use it to let approved external workloads such as pipelines, automation systems, or Kubernetes workloads authenticate to Azure using signed tokens instead of long-lived client secrets. It is not a user password, general RBAC grant, certificate, managed identity by itself, or permission to access Azure resources without matching issuer, subject, audience, and role assignment controls.
Workload identity
intermediate
6 commands
Aliases: workload federated credential, OIDC credential, external identity federation credential, federated trust credential
Quick peek
Open full term page
Databases
premium
Flexible server
A flexible server is the Azure Database deployment model for managed PostgreSQL or MySQL servers with configurable compute, storage, availability, maintenance, backup, and networking options. Teams use it to host managed relational databases with more control over maintenance windows, compute tiers, backup retention, high availability, private networking, stop-start behavior, and performance settings. It is not a self-managed VM database, a single-server compatibility promise, a free unlimited database tier, or proof that schema design, indexes, failover, and application connection pooling are correct.
Azure managed databases
intermediate
6 commands
Aliases: Azure Database flexible server, PostgreSQL flexible server, MySQL flexible server, managed flexible database server
Quick peek
Open full term page
Containers
premium
Flux extension
The Flux extension is the microsoft.flux Kubernetes cluster extension for Azure Kubernetes Service or Azure Arc-enabled Kubernetes that installs Flux v2 controllers for GitOps reconciliation. Teams use it to sync Git, OCI, Helm, or Kustomize sources to Kubernetes clusters so desired configuration is versioned, reconciled, audited, and applied consistently across AKS and Arc-enabled environments. It is not a CI pipeline by itself, a replacement for cluster security, a guarantee that every manifest is safe, or a reason to let unreviewed repository changes modify production clusters.
Kubernetes GitOps
intermediate
6 commands
Aliases: microsoft.flux extension, GitOps Flux extension, AKS Flux extension, Azure Arc Flux extension
Quick peek
Open full term page
Databases
premium
PostgreSQL connection string
Application configuration that identifies the PostgreSQL server, database, port, authentication method, and TLS path used by a workload.
Data platform
intermediate
6 commands
Aliases: PostgreSQL connection string, postgresql connection string, connection string, Azure Database for PostgreSQL connection string, FQDN, port 5432, port 6432
Quick peek
Open full term page
Databases
premium
PostgreSQL flexible server
The managed Azure PostgreSQL server resource that owns compute, storage, backups, networking, high availability, parameters, and databases.
PostgreSQL flexible server
fundamentals
6 commands
Aliases: PostgreSQL flexible server, postgresql flexible server, Azure Database for PostgreSQL flexible server, managed PostgreSQL, backup retention, high availability, private access
Quick peek
Open full term page
DevOps
premium
Service connection
Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely.
CI/CD
fundamentals
6 commands
Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection
Quick peek
Open full term page
Web
premium
Web App
A Web App is an Azure App Service application for hosting web applications, REST APIs, or mobile back ends without managing servers. It runs on an App Service plan, supports common language stacks or containers, and integrates with deployment, scaling, networking, identity, and monitoring features.
App Service
intermediate
6 commands
Aliases: Azure Web App, App Service Web App, Microsoft.Web/sites, App Service app
Quick peek
Open full term page
Networking
premium
Web Application Firewall
Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting.
Application security
fundamentals
6 commands
Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search