Search Azure terms

Management and Governance premium Platform landing zone A platform landing zone is the shared Azure foundation that hosts common services for workload landing zones. It commonly includes connectivity, identity integration, management groups, policy, security monitoring, private DNS, logging, and automation so application teams can build on consistent enterprise guardrails. Governance operations fundamentals 5 commands Aliases: Azure platform landing zone, shared platform landing zone, enterprise-scale platform landing zone Quick peek Open full term page

Management and Governance premium Application landing zone An application landing zone is one or more governed Azure subscriptions for a workload environment, placed under management groups so it inherits platform policies and shared services. Landing zones fundamentals 4 commands Aliases: application landing zone Quick peek Open full term page

Management and Governance field-manual-complete Landing zone governance Landing zone governance is the policy, identity, subscription, tagging, cost, security, and compliance control model used to keep Azure landing zones consistent as workloads grow. It uses Azure Policy, RBAC, Cost Management, management groups, and review processes to audit, enforce, and update platform guardrails. Governance operations fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Azure Policy Azure Policy is a governance service for creating, assigning, and managing rules that evaluate Azure resources. Azure Policy fundamentals 7 commands Aliases: Policy Quick peek Open full term page

Identity premium Azure tenant An Azure tenant is the Microsoft Entra directory that provides identity and access management for users, groups, applications, service principals, devices, and Azure resources associated with an organization. Azure identity fundamentals 5 commands Aliases: tenant, Microsoft Entra tenant, tenant ID Quick peek Open full term page

Analytics premium Incremental copy Incremental copy is the Azure concept that controls how data platforms move changes without reprocessing every source row or file. Teams see it when working with data factory pipelines, copy activity. It is not a full reload, a one-time migration, a backup job, or a blind append into a lake; that distinction matters because bad assumptions create duplicate records, missed changes. Use the term when reviewing ownership, access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same resource, setting, or behavior. Azure Data Factory Intermediate 5 commands Aliases: incremental load, delta copy, watermark copy, CDC copy, last modified copy Quick peek Open full term page

Management and Governance premium Platform baseline A platform baseline is the minimum set of governance, security, identity, networking, monitoring, and cost controls an Azure environment should inherit before workloads deploy. It sets standard expectations for subscriptions, landing zones, policy assignments, RBAC, logging, tags, and operational ownership across the estate. Governance operations fundamentals 5 commands Aliases: Azure platform baseline, governance baseline, enterprise platform baseline Quick peek Open full term page

Storage premium General-purpose v2 account General-purpose v2 account is the modern general Azure Storage account kind used for most blob, file, queue, table, and Data Lake storage scenarios. Teams use it to create one storage boundary with modern features such as access tiers, lifecycle management, redundancy choices, encryption, private endpoints, and diagnostic settings. In daily Azure work, it appears when engineers create new application storage, upgrade older accounts, standardize landing zones, enable lifecycle rules, or compare account kinds during architecture review. Storage accounts beginner 4 commands Aliases: GPv2 account, StorageV2 account, general purpose v2 storage Quick peek Open full term page

Storage field-manual-complete Blob Storage Blob Storage is Azure object storage for massive amounts of unstructured data such as documents, images, video, backups, logs, and application files. Storage advanced 5 commands Aliases: Blob Storage, blob-storage, blob, blob-container, blob-access-tier, blob-soft-delete, blob-versioning, storage-account, account-sas, private-endpoint-for-storage, azure-files, data-lake-storage-gen2, queue-storage Quick peek Open full term page

Storage field-manual-complete Premium block blob account A premium block blob account is a special Azure Storage account for blob workloads that care more about low latency and high transaction rates than the lowest storage price. Storage accounts fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance field-manual-complete Subscription deployment A subscription deployment is an ARM or Bicep deployment that targets an Azure subscription instead of one resource group. It is useful when the thing you are creating or assigning lives at subscription scope, such as resource groups, policy assignments, role assignments, budgets, deployment stacks, or shared governance settings. The deployment still stores metadata in a region, but the resources it affects can organize the entire subscription. It is a common building block for landing zones, subscription vending, and consistent environment setup. It is a platform move, not a workload-only deployment. ARM deployments intermediate 5 commands Aliases: ARM subscription deployment, Bicep subscription scope, subscription-scope deployment, az deployment sub Quick peek Open full term page

Management and Governance field-manual-complete Subscription vending Subscription vending is the factory process for giving teams a ready-to-use Azure subscription. Instead of asking platform engineers to create subscriptions by hand, a request triggers automation that creates or selects a subscription, places it in the right management group, applies policy, creates baseline resource groups, sets budgets, wires networking, and assigns access. The goal is not just speed. It is a safe handoff: every new subscription starts with the same guardrails, evidence, ownership, and platform integration before workloads arrive. Governance operations advanced 5 commands Aliases: subscription factory, landing zone vending, application landing zone vending Quick peek Open full term page

Storage complete Standard storage account Microsoft Learn describes a standard general-purpose v2 storage account as the recommended account type for most Azure Storage scenarios. It provides a namespace for blobs, Azure Files, queues, tables, and Data Lake Storage capabilities, with standard redundancy choices such as LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS. Storage accounts intermediate 5 commands Aliases: standard-storage-account, Standard storage account, standard general-purpose v2 storage account, standard GPv2 storage account, Azure Storage standard account, StorageV2 standard account Quick peek Open full term page

Management and Governance field-manual-complete Provider registration state Provider registration state is the subscription-level status for a resource provider namespace, such as Registered, Registering, or NotRegistered. Microsoft Learn explains that registration enables Azure Resource Manager to use that provider’s resource types, locations, and operations without waiting for every region to finish. Resource providers intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium AKS Linux node pool An AKS Linux node pool is a group of Linux-based nodes with shared configuration that runs Kubernetes workloads in an AKS cluster. Node pools let teams separate system components, application workloads, VM sizes, zones, scaling behavior, taints, labels, and upgrade settings. AKS compute Intermediate 5 commands Aliases: Azure Kubernetes Service Linux node pool, aks linux node pool Quick peek Open full term page

Databases premium Cosmos DB spatial index Cosmos DB spatial index is an indexing-policy entry that helps Cosmos DB for NoSQL query valid GeoJSON points, lines, polygons, and multipolygons efficiently. It makes location-aware queries practical without scanning every item in a container. You see it when applications store coordinates, service areas, delivery zones, device positions, or map features in JSON items. The production check is whether GeoJSON shape, indexed path, query function, and partition strategy all line up. Document the decision in code, templates, metrics, and runbooks. Azure Cosmos DB intermediate 7 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Azure Synapse Analytics Azure Synapse Analytics is Microsoft’s integrated analytics service for enterprise data warehousing, big data, data integration, and exploratory analytics. Synapse Analytics intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake analytics workload A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric. Data Lake Storage Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake bronze layer The raw ingestion layer in a lakehouse or medallion architecture where source data first lands with minimal transformation and strong traceability. Data Lake Storage Gen2 Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake ingestion zone A Data Lake ingestion zone is the controlled landing area where source data first arrives before validation, transformation, enrichment, or publication. Data Lake Storage Gen2 fundamentals 5 commands Aliases: landing zone, raw ingestion zone, lake landing area, ingest zone Quick peek Open full term page

Management and Governance premium Deployment scope Microsoft Learn describes Azure Resource Manager and Bicep deployments as running at a specific scope: resource group, subscription, management group, or tenant. The selected scope determines which resources can be declared directly, where deployment history is recorded, and what permissions the deployment principal needs. ARM deployments fundamentals 5 commands Aliases: ARM deployment scope, Bicep targetScope, deployment boundary Quick peek Open full term page

Storage premium General-purpose v2 storage account General-purpose v2 storage account is an Azure Storage account resource using the StorageV2 kind to host common storage services under one managed namespace. Teams use it to provide durable storage for applications while centralizing endpoints, redundancy, encryption, lifecycle management, networking, monitoring, and access control. In daily Azure work, it appears when engineers provision blob containers, file shares, queues, tables, static websites, backups, application artifacts, or Data Lake Gen2-enabled storage in a landing zone. It is not a specific blob container, an unlimited performance guarantee, an identity provider, or a safe design unless access, networking, and data protection are configured. Storage accounts beginner 5 commands Aliases: Azure general-purpose v2 storage account, GPv2 storage account, StorageV2 storage account Quick peek Open full term page

Storage premium Hot access tier The hot access tier is an Azure Blob Storage tier optimized for data that is actively used and read frequently. Azure Blob Storage fundamentals 5 commands Aliases: Hot access tier, hot access tier Quick peek Open full term page

Analytics premium Kusto continuous export Kusto continuous export periodically runs a Kusto query and writes results to an external table destination such as Azure Storage for downstream processing or archiving. Azure Data Explorer export Advanced 5 commands Aliases: ADX continuous export, Kusto export policy, continuous data export Quick peek Open full term page

Management and Governance premium Management group Microsoft Learn describes management groups as governance containers above subscriptions that let organizations organize subscriptions into a hierarchy. They support unified policy, access management, and governance controls across many subscriptions instead of repeating the same assignments subscription by subscription at enterprise scale. Azure governance fundamentals 5 commands Aliases: Azure management group, Management group hierarchy, MG scope Quick peek Open full term page

Storage premium SFTP for Blob Storage SFTP for Blob Storage is the storage-account feature that exposes blob containers to SFTP clients after hierarchical namespace is enabled. Administrators configure local users, authentication methods, home directories, and permission scopes so external or internal clients can transfer files without custom SFTP infrastructure. Blob Storage advanced 5 commands Aliases: Blob Storage SFTP, SFTP for Blob Storage, SFTP landing zone, storage SFTP local user, SFTP-enabled storage account Quick peek Open full term page

Management and Governance premium What-if deployment A what-if deployment is a preview of changes Azure Resource Manager predicts from an ARM template or Bicep file before deployment. It shows which resources would be created, modified, ignored, or deleted without applying changes, helping teams review infrastructure impact before execution. Infrastructure as code fundamentals 5 commands Aliases: ARM what-if deployment, Bicep what-if deployment, deployment preview Quick peek Open full term page

Storage premium Zone-redundant storage Zone-redundant storage (ZRS) is an Azure Storage redundancy option that copies data synchronously across three or more availability zones in the primary region. It keeps storage resources available for reads and writes if a zone becomes unavailable, while staying within the region for governance-sensitive workloads. Azure Storage intermediate 5 commands Aliases: ZRS, ZRS storage, Azure Storage ZRS, zonal storage redundancy Quick peek Open full term page

Storage premium ZRS redundancy ZRS redundancy is the storage-account redundancy setting that enables zone-redundant storage. It synchronously replicates data across availability zones in the primary Azure region, so blobs, files, queues, and tables can remain accessible during a zonal outage without relying on asynchronous secondary-region replication. Storage accounts fundamentals 5 commands Aliases: Standard_ZRS, Premium_ZRS, ZRS SKU, zonal redundancy, zone redundant SKU Quick peek Open full term page

Compute premium Availability set Availability set is a placement group for Azure virtual machines that spreads instances across separate fault and update domains inside one datacenter. In Azure, teams encounter it when architects deploy two or more classic VM instances for an application tier that still needs datacenter-level hardware separation. The useful question is what behavior it proves, who Availability fundamentals 4 commands Aliases: VM availability set, fault domain set, update domain set Quick peek Open full term page

Compute premium Availability zone Availability zone is a physically separate zone inside an Azure region with independent datacenter infrastructure such as power, cooling, and networking. In Azure, teams encounter it when architects choose whether a workload should pin resources to one zone or spread service instances across multiple zones. The useful question is what behavior it proves, who owns Availability fundamentals 4 commands Aliases: Azure availability zone, zone, zone-redundant deployment, zonal deployment Quick peek Open full term page

Compute premium Availability zone strategy An availability zone strategy answers a practical question: if part of a region has a problem, what keeps the workload alive? Azure availability zones are separate groups of datacenters inside a supported region, and they are designed with independent power, cooling, and networking. That does not mean every resource automatically becomes zone-resilient. Microsoft Learn anchors this term in What are Azure availability zones?, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the. Operational hygiene fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium Azure Firewall Azure Firewall is a managed, stateful network firewall service for filtering traffic to and from Azure virtual network resources. It helps network security and platform teams centralize traffic control, logging, and threat protection across workloads without deploying self-managed firewall appliances for every landing zone. You see it when hub-spoke networks need egress control, applications require segmentation, regulated workloads need inspection, or teams need consistent firewall policy logging. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Network security intermediate 4 commands Aliases: Azure network firewall Quick peek Open full term page

Databases premium Azure SQL zone redundancy Azure SQL zone redundancy places database replicas or storage across multiple availability zones in a supported region to improve resilience against datacenter-level failures. Azure SQL Database intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Web premium Custom domain an organization-controlled DNS name bound to an Azure-hosted endpoint instead of the default service hostname. Domains and TLS fundamentals 4 commands Aliases: custom hostname, custom DNS name, application custom domain Quick peek Open full term page

Networking premium DNS zone A DNS zone is an Azure DNS container for record sets that answer names under a domain. Public zones publish internet-resolvable records after registrar delegation, while private zones resolve only for linked virtual networks and support private endpoint and internal naming patterns. DNS fundamentals 4 commands Aliases: Azure DNS zone, DNS zone, public DNS zone, private DNS zone, hosted zone Quick peek Open full term page

Storage premium Filesystem in Data Lake Storage Filesystem in Data Lake Storage is the top-level container-like namespace in Azure Data Lake Storage Gen2 that holds directories and files in Azure. Data Lake Storage Gen2 intermediate 4 commands Aliases: Filesystem in Data Lake Storage, filesystem in data lake storage Quick peek Open full term page

Management and Governance premium Governance baseline A governance baseline is the minimum set of policies, access controls, tags, logging, security, and compliance requirements that Azure environments must meet before workloads are trusted for production. Governance operations intermediate 4 commands Aliases: Azure governance baseline, cloud governance baseline, landing zone governance baseline Quick peek Open full term page

Storage premium GRS redundancy GRS redundancy is an Azure Storage replication option that stores data in the primary region and asynchronously replicates it to a paired secondary region for regional disaster protection. Storage accounts intermediate 4 commands Aliases: geo-redundant storage, Standard_GRS, GRS Quick peek Open full term page

Storage premium GZRS redundancy GZRS redundancy is an Azure Storage replication option that synchronously replicates data across availability zones in the primary region and asynchronously replicates it to a secondary region. Storage accounts intermediate 4 commands Aliases: geo-zone-redundant storage, Standard_GZRS, GZRS Quick peek Open full term page

Management and Governance premium Management group scope Management group scope means the operation targets a branch of the Azure hierarchy, not just one subscription. It is useful for organization-wide policy, access, and landing-zone governance, but mistakes can affect many subscriptions at once. Management scopes intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Migration premium Migration project Migration project is a project container that organizes Azure Migrate discovery, assessment, dependency analysis, and migration tracking for a group of workloads. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Azure Migrate fundamentals 4 commands Aliases: Azure Migrate project, migration workspace, Migrate project Quick peek Open full term page

Management and Governance premium Cloud resource hygiene Cloud resource hygiene is an operational governance practice for keeping Azure resources organized, tagged, owned, secured, monitored, costed, and retired when no longer needed. Operational hygiene intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Get Metadata activity Get Metadata activity is a pipeline step in Azure Data Factory or Synapse that reads information about data instead of copying or transforming the data itself. Teams use it to check whether files exist, list folders, inspect file size or structure, and decide what later pipeline activities should do. In daily Azure work, it shows up when engineers build metadata-driven ingestion, validate landing-zone files, branch with If Condition, loop over child items, or troubleshoot why a copy activity found no input. Data Factory beginner 3 commands Aliases: ADF Get Metadata, Synapse Get Metadata, metadata activity Quick peek Open full term page

Migration premium Assessment An assessment is the structured review that estimates whether a workload is ready to move to Azure, what it might cost, and what target configuration makes sense. In Azure Migrate, assessments help teams compare current servers, databases, applications, and dependencies against Azure options before migration begins. It is not a final migration plan by. Migration planning fundamentals 2 commands Aliases: Azure Migrate assessment, Migration assessment, Server assessment, Application assessment Quick peek Open full term page

Storage field-manual-complete Data Lake Storage Gen2 Data Lake Storage Gen2 is Azure Blob Storage with a hierarchical namespace enabled for analytics workloads. Microsoft Learn describes it as combining file-system style directories, ACLs, and large-scale throughput with Blob Storage durability, security, lifecycle, tiering, and ecosystem compatibility for big data scenarios. Analytics storage fundamentals 8 commands Aliases: ADLS Gen2 Quick peek Open full term page

Analytics field-manual-complete Synapse Link A analytics platform concept in Synapse Analytics that helps teams move, transform, query, and govern data at scale with clearer ownership, safety, and operational context. Synapse Analytics advanced 7 commands Aliases: Azure Synapse Link, Synapse Link, Synapse Link for SQL, link connection, near real-time analytics, synapse Link, synapse link, synapse-link Quick peek Open full term page

Storage verified Recursive ACL update An Azure Data Lake Storage Gen2 operation that changes ACL entries across a directory tree instead of one path at a time. Azure Storage intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance verified Required tag policy A required tag policy uses Azure Policy to enforce tagging rules so resources are created with expected organizational tags. Depending on the definition and effect, it can deny noncompliant deployments, audit missing tags, modify requests, or remediate existing resources with standardized tag values. Azure Policy intermediate 6 commands Aliases: require tag policy, mandatory tag policy, Azure Policy tag enforcement, tag governance policy, required tag and value policy Quick peek Open full term page

Management and Governance verified Resource abbreviation Resource abbreviation recommendations in the Cloud Adoption Framework provide short examples mapped to Azure resource types and provider namespaces. Teams use them in naming conventions to keep names readable, consistent, and within resource length limits while still showing what each resource is. Tags and naming fundamentals 6 commands Aliases: Azure resource abbreviation, CAF resource abbreviation, naming abbreviation, resource type prefix, Azure naming prefix Quick peek Open full term page