Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 152 matching terms. Narrow the search to reduce the list.
Containers
field-manual-complete
Kubernetes Namespace
A Kubernetes Namespace is a logical boundary used to organize namespaced resources, separate teams or environments, and apply scoped policy, access, and quota controls inside a cluster.
Kubernetes organization
Beginner
5 commands
Aliases: Kubernetes Namespace, kubernetes-namespace, azure-kubernetes-service, kubernetes-deployment, kubernetes-service, aks-network-policy, rbac, image-pull-secret, pod, kubeconfig, node-pool, resource-group, aks-cluster
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
DevOps
premium
Azure DevOps organization
The top-level Azure DevOps Services container that connects related projects, users, repositories, pipelines, artifacts, permissions, and organization settings.
Azure DevOps
fundamentals
5 commands
Aliases: Azure DevOps org
Quick peek
Open full term page
Containers
premium
Kubernetes DaemonSet
A Kubernetes DaemonSet is a workload controller that ensures a copy of a pod runs on selected nodes, commonly for logging agents, monitoring collectors, security agents, and node-level services.
Kubernetes workloads
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Persistent Volume
A Kubernetes Persistent Volume is cluster storage provisioned for pods and bound through persistent volume claims so data can outlive individual pod restarts, rescheduling, or replacements.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StatefulSet
A Kubernetes StatefulSet is a workload controller for stateful applications that require stable network identities, ordered deployment or scaling, and persistent storage per replica.
Kubernetes workloads
Advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StorageClass
A Kubernetes StorageClass defines how persistent storage is dynamically provisioned for persistent volume claims, including the driver, performance tier, reclaim policy, and binding behavior.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Version
Kubernetes Version is the control plane and node version level that determines supported Kubernetes APIs, feature availability, security patches, and upgrade requirements for a cluster.
AKS lifecycle
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled Kubernetes
An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster
Quick peek
Open full term page
Containers
field-manual-complete
Kubernetes Service
Microsoft Learn explains that Kubernetes Services in AKS expose applications through service types such as ClusterIP, NodePort, LoadBalancer, and ExternalName. LoadBalancer Services can create Azure load balancer resources, while internal load balancers use private IP addresses for restricted access. in production AKS clusters.
Kubernetes networking
intermediate
5 commands
Aliases: Kubernetes Service, aks-cluster, aks-ingress-controller, aks-network-policy, azure-kubernetes-service, ingress, kubernetes service, kubernetes-deployment, kubernetes-namespace, kubernetes-service, load-balancer, load-balancer-backend-pool, node-pool
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
DevOps
premium
Service connection
Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely.
CI/CD
fundamentals
6 commands
Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection
Quick peek
Open full term page
Containers
premium
Node label
A node label is a key-value marker placed on Kubernetes nodes. In AKS, labels are commonly applied at the node pool level so every node in that pool carries the same scheduling signal. Applications can then ask Kubernetes to run certain pods on nodes with matching labels. Plainly,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS node label, Kubernetes node label, node selector label
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc
A hybrid and multicloud management platform that extends Azure governance, security, operations, and services to resources running outside Azure.
Hybrid management
fundamentals
4 commands
Aliases: Arc, Arc-enabled infrastructure, Azure Arc hybrid management
Quick peek
Open full term page
DevOps
premium
Environment in Azure DevOps
An Azure DevOps environment is a logical collection of resources that a pipeline can target for deployments, approvals, checks, and deployment history.
Azure Pipelines
fundamentals
4 commands
Aliases: environment in azure devops
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Tenant deployment
A tenant deployment is a Resource Manager deployment executed at Microsoft Entra tenant scope.
ARM deployments
intermediate
5 commands
Aliases: Tenant deployment, tenant deployment, Azure Tenant deployment, tenant scope deployment, az deployment tenant, ARM tenant deployment
Quick peek
Open full term page
Containers
premium
AKS Azure Policy add-on
The AKS Azure Policy add-on integrates Azure Policy with an AKS cluster so policy assignments can audit or enforce Kubernetes rules through in-cluster policy components and report compliance back to Azure Policy.
Azure Kubernetes Service
intermediate
3 commands
Aliases: Azure Policy add-on for AKS, AKS policy add-on, Gatekeeper add-on, Azure Policy for Kubernetes
Quick peek
Open full term page
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
Identity
learning-path-anchor
Tenant ID
A tenant ID is the globally unique identifier for a Microsoft Entra tenant.
Microsoft Entra
fundamentals
4 commands
Aliases: Tenant ID, tenant id, Azure Tenant ID, Microsoft Entra tenant ID, directory ID, tenantId
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Tenant root group
The tenant root group is the highest management group scope associated with a Microsoft Entra tenant.
Management groups
fundamentals
4 commands
Aliases: Tenant root group, tenant root group, Azure Tenant root group, root management group, root group
Quick peek
Open full term page
Analytics
premium
Synapse workspace key
A Synapse workspace key is the customer-managed encryption key that a Synapse workspace uses when an organization does not want to rely only on Microsoft-managed encryption. The key is stored in Azure Key Vault, and the workspace references it by name and key identifier. For operators, this is not just a checkbox. The key...
Synapse Analytics
fundamentals
8 commands
Aliases: Synapse customer-managed key, Synapse CMK, workspace encryption key, Synapse workspace customer-managed key
Quick peek
Open full term page
Management and Governance
premium
Azure Policy
Azure Policy is a governance service for creating, assigning, and managing rules that evaluate Azure resources.
Azure Policy
fundamentals
7 commands
Aliases: Policy
Quick peek
Open full term page
Developer Tools
premium
Azure PowerShell
Azure PowerShell is Microsoft’s Az module collection for managing Azure resources from PowerShell.
Command line
fundamentals
7 commands
Aliases: Az PowerShell module, Az module, Azure PowerShell, Azure PowerShell cmdlets, PowerShell for Azure
Quick peek
Open full term page
Management and Governance
premium
Azure subscription
An Azure subscription is a management, billing, and scale unit for Azure resources.
Azure scope
fundamentals
7 commands
Aliases: subscription
Quick peek
Open full term page
Analytics
premium
Azure Synapse Analytics
Azure Synapse Analytics is Microsoft’s integrated analytics service for enterprise data warehousing, big data, data integration, and exploratory analytics.
Synapse Analytics
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Bicep private registry
A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules.
Bicep
fundamentals
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Event-driven job
An Event-driven job in Azure Container Apps starts job executions when a configured scale rule detects work from an event source. Teams use it to run finite container work such as queue processing, batch enrichment, report generation, or cleanup only when events or messages are waiting. It is not a continuously running container app, an AKS deployment, a scheduled job, or a guarantee that every event is processed exactly once. In production, confirm job trigger type, scale rule, minimum and maximum executions, polling interval, image version, secret references, managed identity, execution status, logs, retries, and queue depth before treating the.
Azure Container Apps
intermediate
6 commands
Aliases: Container Apps event-driven job, KEDA job, event-triggered container job
Quick peek
Open full term page
Containers
premium
Event-driven scale rule
An Event-driven scale rule is a Container Apps scaling configuration that uses event-source metrics to decide how many replicas or job executions to run. Teams use it to connect queue length, event backlog, HTTP load, Kafka lag, or other scaler metadata to automatic scaling decisions. It is not the event source itself, a Kubernetes HPA object, a fixed replica count, or a complete guarantee that the application processes events correctly. In production, confirm scaler type, metadata names, authentication method, min and max replicas, polling interval, cooldown behavior, event source metrics, container revision, and downstream capacity before treating the design as.
Azure Container Apps
intermediate
6 commands
Aliases: KEDA scale rule, Container Apps event scale rule, custom scale rule
Quick peek
Open full term page
Networking
premium
ExpressRoute
ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before.
Hybrid connectivity
intermediate
6 commands
Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity
Quick peek
Open full term page
Identity
premium
Federated credential
A Federated credential is a Microsoft Entra trust configuration that allows a workload to exchange a token from an external identity provider for an Entra access token without using a stored secret. Teams use it to let approved external workloads such as pipelines, automation systems, or Kubernetes workloads authenticate to Azure using signed tokens instead of long-lived client secrets. It is not a user password, general RBAC grant, certificate, managed identity by itself, or permission to access Azure resources without matching issuer, subject, audience, and role assignment controls.
Workload identity
intermediate
6 commands
Aliases: workload federated credential, OIDC credential, external identity federation credential, federated trust credential
Quick peek
Open full term page
Containers
premium
Flux extension
The Flux extension is the microsoft.flux Kubernetes cluster extension for Azure Kubernetes Service or Azure Arc-enabled Kubernetes that installs Flux v2 controllers for GitOps reconciliation. Teams use it to sync Git, OCI, Helm, or Kustomize sources to Kubernetes clusters so desired configuration is versioned, reconciled, audited, and applied consistently across AKS and Arc-enabled environments. It is not a CI pipeline by itself, a replacement for cluster security, a guarantee that every manifest is safe, or a reason to let unreviewed repository changes modify production clusters.
Kubernetes GitOps
intermediate
6 commands
Aliases: microsoft.flux extension, GitOps Flux extension, AKS Flux extension, Azure Arc Flux extension
Quick peek
Open full term page
Identity
premium
Access review
An access review is a governance check asking, “Should this access still exist?” It lets owners, managers, users, or admins review access to groups, apps, access packages, and privileged roles, then keep or remove access based on decisions and recommendations.
Governance
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
ACR manifest
An ACR manifest is the record behind an image tag. It describes the image layers and configuration, and its digest is the exact content identity. Tags can move, but a manifest digest is what proves the precise image version.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
AKS cluster
Microsoft Learn describes Azure Kubernetes Service as a managed Kubernetes service for deploying and managing containerized applications. An AKS cluster provides the managed Kubernetes control plane, node pools, networking, identity, scaling, and Azure integration points for running containers in Azure production environments.
Azure Kubernetes Service
fundamentals
5 commands
Aliases: Azure Kubernetes cluster, AKS managed cluster, Kubernetes cluster in Azure
Quick peek
Open full term page
Containers
premium
AKS ingress controller
Microsoft Learn explains AKS ingress through Kubernetes ingress resources and controllers that route HTTP or HTTPS traffic to services in a cluster. AKS application routing options can configure ingress controllers, DNS integration, TLS handling, and related networking components for production applications.
AKS networking
intermediate
5 commands
Aliases: AKS ingress, Ingress controller for AKS, Kubernetes ingress controller
Quick peek
Open full term page
Containers
premium
AKS Linux node pool
An AKS Linux node pool is a group of Linux-based nodes with shared configuration that runs Kubernetes workloads in an AKS cluster. Node pools let teams separate system components, application workloads, VM sizes, zones, scaling behavior, taints, labels, and upgrade settings.
AKS compute
Intermediate
5 commands
Aliases: Azure Kubernetes Service Linux node pool, aks linux node pool
Quick peek
Open full term page
Containers
premium
AKS maintenance window
An AKS maintenance window is a planned maintenance configuration that controls when AKS starts certain cluster and node image upgrade operations. It helps teams align automatic upgrades and maintenance-sensitive changes with approved business windows, while Azure platform maintenance for underlying infrastructure remains separate.
AKS operations
Intermediate
5 commands
Aliases: Azure Kubernetes Service maintenance window, aks maintenance window
Quick peek
Open full term page
Containers
premium
AKS managed identity
An AKS managed identity is a Microsoft Entra identity that an AKS cluster uses to manage Azure resources without stored service principal secrets.
AKS identity
Intermediate
5 commands
Aliases: Azure Kubernetes Service managed identity, aks managed identity
Quick peek
Open full term page
Containers
premium
AKS network policy
An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network policy, aks network policy
Quick peek
Open full term page
Containers
premium
AKS node
Microsoft Learn explains that AKS nodes are the virtual machines that run your containerized applications, grouped into node pools with the same configuration. System node pools host core cluster pods, while user node pools typically host application workloads and can differ by size, operating system, taints, or purpose.
AKS compute
intermediate
5 commands
Aliases: AKS cluster node, Kubernetes node in AKS, AKS VM node
Quick peek
Open full term page
Containers
premium
AKS private cluster
Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation.
AKS networking
advanced
5 commands
Aliases: Azure Kubernetes Service private cluster, aks private cluster
Quick peek
Open full term page
Containers
premium
API server authorized IP ranges
API server authorized IP ranges are an AKS security setting that limits who can reach the Kubernetes control-plane endpoint. Instead of letting any public IP attempt a connection to the API server, the cluster allows only specified public CIDR ranges, such as corporate VPN, jump-host, automation,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS API server authorized IP ranges, authorized API server IP ranges
Quick peek
Open full term page
Web
premium
App Service Environment v3
App Service Environment v3 is the current App Service Environment generation for single-tenant, dedicated App Service hosting with simplified networking and high-scale isolated workloads.
App Service isolation
intermediate
5 commands
Aliases: Azure App Service Environment v3, app service environment v3
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Analytics
premium
Azure Databricks
A unified, open analytics platform on Azure for building, deploying, sharing, and maintaining enterprise data, analytics, and AI solutions at scale.
Data engineering and AI
intermediate
5 commands
Aliases: Databricks on Azure
Quick peek
Open full term page
Analytics
premium
Azure Databricks Unity Catalog
A unified governance layer in Azure Databricks for data and AI assets, including catalogs, schemas, tables, volumes, models, privileges, and lineage.
Data governance
intermediate
5 commands
Aliases: Unity Catalog
Quick peek
Open full term page
DevOps
premium
Azure DevOps project
A workspace inside Azure DevOps for a team to plan, track, code, build, test, deploy, and collaborate on software delivery.
Azure DevOps
fundamentals
5 commands
Aliases: ADO project
Quick peek
Open full term page
Migration
premium
Azure Migrate
Azure Migrate helps organizations discover, assess, plan, and migrate servers, databases, web apps, virtual desktops, and other workloads to Azure with reduced risk.
Migration planning
intermediate
5 commands
Aliases: Migrate, Azure Migrate hub, migration assessment
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search