Search Azure terms

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Containers premium AKS cluster Microsoft Learn describes Azure Kubernetes Service as a managed Kubernetes service for deploying and managing containerized applications. An AKS cluster provides the managed Kubernetes control plane, node pools, networking, identity, scaling, and Azure integration points for running containers in Azure production environments. Azure Kubernetes Service fundamentals 5 commands Aliases: Azure Kubernetes cluster, AKS managed cluster, Kubernetes cluster in Azure Quick peek Open full term page

Containers strict-validated AKS control plane The AKS control plane is the Azure-managed Kubernetes API and orchestration layer that coordinates cluster state, authentication, upgrades, and communication with worker nodes. Azure Kubernetes Service fundamentals 3 commands Aliases: Kubernetes control plane, AKS managed control plane, AKS API server, managed Kubernetes API Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace managed identity A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service... Synapse Analytics intermediate 8 commands Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity Quick peek Open full term page

Containers premium AKS managed identity An AKS managed identity is a Microsoft Entra identity that an AKS cluster uses to manage Azure resources without stored service principal secrets. AKS identity Intermediate 5 commands Aliases: Azure Kubernetes Service managed identity, aks managed identity Quick peek Open full term page

Containers premium Kubernetes Persistent Volume A Kubernetes Persistent Volume is cluster storage provisioned for pods and bound through persistent volume claims so data can outlive individual pod restarts, rescheduling, or replacements. Kubernetes storage Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Kubernetes StorageClass A Kubernetes StorageClass defines how persistent storage is dynamically provisioned for persistent volume claims, including the driver, performance tier, reclaim policy, and binding behavior. Kubernetes storage Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Identity learning-path-anchor System-assigned managed identity A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request... Managed identities intermediate 4 commands Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity Quick peek Open full term page

Containers field-manual-complete Kubernetes Namespace A Kubernetes Namespace is a logical boundary used to organize namespaced resources, separate teams or environments, and apply scoped policy, access, and quota controls inside a cluster. Kubernetes organization Beginner 5 commands Aliases: Kubernetes Namespace, kubernetes-namespace, azure-kubernetes-service, kubernetes-deployment, kubernetes-service, aks-network-policy, rbac, image-pull-secret, pod, kubeconfig, node-pool, resource-group, aks-cluster Quick peek Open full term page

Databases premium Azure Managed Redis Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios. Managed cache intermediate 6 commands Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise Quick peek Open full term page

Analytics premium Databricks managed resource group The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources. Azure Databricks intermediate 6 commands Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group Quick peek Open full term page

Containers premium Kubernetes Deployment A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications. Kubernetes workloads Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Azure Managed Lustre Azure Managed Lustre is a managed parallel file system for high-performance computing and AI workloads that need scalable, low-latency file storage in Azure. Parallel file systems advanced 5 commands Aliases: Managed Lustre, Azure Managed Lustre File System, AMLFS Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI managed identity Azure OpenAI managed identity uses Microsoft Entra identities so Azure workloads can call model endpoints without stored keys. Azure OpenAI intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Event Grid managed identity delivery Event Grid managed identity delivery is the pattern where Event Grid uses a managed identity on a topic, domain, or system topic to authenticate event delivery to supported destinations. In Azure, it shows up when teams want to deliver events to Azure destinations without storing destination keys or embedding secrets in event subscription configuration. Teams use it to review system-assigned or user-assigned identity, Event Grid topic or domain identity settings, destination RBAC role assignments, delivery identity settings, dead-letter identity settings, and monitoring before changing production behavior. Event routing advanced 5 commands Aliases: Event Grid managed identity event delivery, managed identity delivery for Event Grid Quick peek Open full term page

Containers premium Kubernetes DaemonSet A Kubernetes DaemonSet is a workload controller that ensures a copy of a pod runs on selected nodes, commonly for logging agents, monitoring collectors, security agents, and node-level services. Kubernetes workloads Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Kubernetes StatefulSet A Kubernetes StatefulSet is a workload controller for stateful applications that require stable network identities, ordered deployment or scaling, and persistent storage per replica. Kubernetes workloads Advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Kubernetes Version Kubernetes Version is the control plane and node version level that determines supported Kubernetes APIs, feature availability, security patches, and upgrade requirements for a cluster. AKS lifecycle Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Service Bus managed identity Service Bus managed identity means using Microsoft Entra managed identities so Azure-hosted applications can access Service Bus without stored credentials. Applications receive RBAC roles such as Data Sender or Data Receiver, while Service Bus namespace identities may also be assigned for service-managed scenarios such as encryption configuration. Service Bus fundamentals 5 commands Aliases: Service Bus identity-based access, Service Bus Entra authentication, managed identity for Service Bus, Service Bus secretless authentication, Service Bus RBAC identity Quick peek Open full term page

Hybrid and Multicloud premium Azure Arc-enabled Kubernetes An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations. Hybrid management fundamentals 4 commands Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster Quick peek Open full term page

Security premium Customer-managed key rotation Customer-managed key rotation is the planned creation and adoption of new versions of a customer-managed encryption key while Azure services keep accessing protected data safely. Key management advanced 4 commands Aliases: Customer-managed key rotation Quick peek Open full term page

Analytics premium Data Factory managed identity The Microsoft Entra identity assigned to a Data Factory so pipelines and linked services can access Azure resources without embedded passwords. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed identity, ADF managed identity, data factory managed identity Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Web premium Function app managed identity Function app managed identity is a Microsoft Entra identity assigned to a function app so its code and supported bindings can access Azure resources without storing passwords or connection strings. Teams use it to replace secrets in app settings with identity-based access to services such as Storage, Service Bus, Key Vault, Event Hubs, SQL, or monitoring resources. In daily Azure work, it shows up when engineers grant a function app data-plane permissions, remove leaked connection strings, configure identity-based bindings, or investigate why a trigger cannot reach its dependency. Azure Functions intermediate 4 commands Aliases: Azure Functions managed identity, managed identity for Functions, function app identity Quick peek Open full term page

Integration premium Logic Apps managed identity A Logic Apps managed identity is the Microsoft Entra identity assigned to a Logic Apps workflow or Standard logic app resource so the workflow can authenticate to supported Azure resources without storing passwords, shared keys, or long-lived secrets in governed production environments. Azure Logic Apps intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Web premium Managed certificate A managed certificate in Azure App Service is a platform-created TLS certificate for a supported custom domain. Azure can issue and renew it for basic HTTPS protection, but it has limitations compared with uploaded, Key Vault, or purchased certificates. That context supports safer operational decisions. TLS fundamentals 4 commands Aliases: App Service managed certificate, free managed certificate Quick peek Open full term page

Storage premium Microsoft-managed key for storage Microsoft-managed key for Storage means the default Azure Storage encryption approach where Microsoft manages the keys that protect stored data at rest. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Storage encryption advanced 4 commands Aliases: platform-managed key for storage, PMK for storage, Microsoft managed storage encryption key Quick peek Open full term page

Identity premium Managed identity A managed identity is an automatically managed Microsoft Entra identity assigned to a supported Azure resource. It lets workloads authenticate to services that support Microsoft Entra authentication without storing passwords, certificates, or client secrets in code, configuration, or deployment pipelines. Microsoft Entra workload identity intermediate 3 commands Aliases: Managed identity, system-assigned managed identity, user-assigned managed identity, Azure workload identity, secretless authentication, system-assigned identity, user-assigned identity, Microsoft Entra ID, Microsoft Entra workload identity Quick peek Open full term page

Security premium Managed identity for data access Managed identity for data access is the pattern of using a managed identity to let a workload read or write data without embedded secrets. Teams use it when pipelines, applications, jobs, or analytics services need secure access to storage, databases, or other data services. In plain English, it gives operators a named control for least-privilege data access, reduced secret exposure, and cleaner audit trails instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data access security intermediate 3 commands Aliases: Managed identity for data access, Microsoft Entra ID, Data access security Quick peek Open full term page

Databases premium Managed instance database A managed instance database is a database hosted inside Azure SQL Managed Instance with managed platform operations and SQL Server compatibility features. Teams use it when a workload needs managed SQL operations while keeping instance-level features closer to SQL Server. In plain English, it gives operators a named control for database-level ownership, backup evidence, restore planning, and migration clarity within a managed instance instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure SQL Managed Instance intermediate 3 commands Aliases: Managed instance database, Azure SQL Managed Instance Quick peek Open full term page

Databases premium Managed Instance failover group Managed Instance failover group is a disaster-recovery relationship that lets databases in a SQL Managed Instance fail over to a paired managed instance. Teams use it when business-critical databases need cross-region continuity and a managed failover path. In plain English, it gives operators a named control for planned or emergency recovery with clearer listener, replication, and ownership evidence instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure SQL Managed Instance intermediate 3 commands Aliases: Managed Instance failover group, Azure SQL Managed Instance Quick peek Open full term page

Identity premium Assignment managed identity Assignment managed identity is the identity Azure Policy uses when a policy assignment must change resources during remediation. It matters most for effects such as modify and deployIfNotExists, where Policy is not just reporting non-compliance but attempting to fix or deploy something. The identity needs Azure RBAC permissions at the right scope. Without those. Azure Policy intermediate 2 commands Aliases: Policy assignment identity, Azure Policy managed identity, policy remediation identity, assignment identity Quick peek Open full term page

App Hosting field-manual-complete App Service managed certificate An App Service managed certificate is a free certificate that Azure App Service can issue for an eligible custom domain on a web app or function app. App Service TLS Intermediate 5 commands Aliases: Azure App Service managed certificate, app service managed certificate Quick peek Open full term page

Containers field-manual-complete Container Apps managed environment A Container Apps managed environment is the shared home where one or more Azure Container Apps and jobs run. It is not your container image or one app instance; it is the boundary around the runtime, networking, logging, certificates, Dapr settings, and workload profile capacity that those apps use. Teams choose an environment before creating. Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers field-manual-complete Kubernetes Service Microsoft Learn explains that Kubernetes Services in AKS expose applications through service types such as ClusterIP, NodePort, LoadBalancer, and ExternalName. LoadBalancer Services can create Azure load balancer resources, while internal load balancers use private IP addresses for restricted access. in production AKS clusters. Kubernetes networking intermediate 5 commands Aliases: Kubernetes Service, aks-cluster, aks-ingress-controller, aks-network-policy, azure-kubernetes-service, ingress, kubernetes service, kubernetes-deployment, kubernetes-namespace, kubernetes-service, load-balancer, load-balancer-backend-pool, node-pool Quick peek Open full term page

Storage field-manual-complete Storage customer-managed key A storage customer-managed key is a key in Azure Key Vault or Managed HSM that a customer controls for Azure Storage encryption at rest. Azure Storage still performs encryption, but the customer manages key ownership, access, rotation, purge protection, and lifecycle accountability. Storage encryption fundamentals 5 commands Aliases: Azure Storage customer-managed key, storage CMK, customer-managed key for storage Quick peek Open full term page

Analytics field-manual-complete Synapse managed private endpoint A Synapse managed private endpoint is a private endpoint that Azure Synapse creates inside a workspace managed virtual network to reach a specific Azure resource over Private Link. It supports approved, resource-scoped connectivity for storage, databases, Cosmos DB, and other targets without opening public network paths. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed private endpoint, Synapse MPE, managed private endpoint in Synapse, Synapse Private Link endpoint Quick peek Open full term page

Analytics field-manual-complete Synapse managed virtual network A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet Quick peek Open full term page

Identity field-manual-complete User-assigned managed identity A standalone managed identity that can be attached to one or more Azure resources. Managed identities fundamentals 5 commands Aliases: UAMI, user managed identity, reusable managed identity Quick peek Open full term page

Databases complete SQL Agent on Managed Instance Microsoft Learn explains that SQL Server Agent executes SQL Agent jobs for task automation in Azure SQL Managed Instance. A job is a specified series of T-SQL scripts against a database, used to run administrative tasks one or more times and monitor success or failure. Azure SQL Managed Instance intermediate 5 commands Aliases: SQL Agent on Managed Instance, sql agent on managed instance, sql-agent-on-managed-instance Quick peek Open full term page

Databases complete SQL Managed Instance Microsoft Learn describes Azure SQL Managed Instance as a fully managed PaaS database engine with near complete SQL Server compatibility, native virtual network deployment, automated patching and backups, and instance-scoped features that help teams lift and shift SQL Server workloads with fewer application or database changes. Azure SQL fundamentals 5 commands Aliases: SQL MI, Azure SQL MI, Azure SQL Managed Instance, managed SQL instance Quick peek Open full term page

Databases complete SQL managed instance backup retention Microsoft Learn explains that automated backups for Azure SQL Managed Instance let teams restore a managed database to a specific point in time within the configured retention period, up to 35 days, while long-term retention policies can preserve selected backups for years when compliance requires it. SQL Managed Instance intermediate 5 commands Aliases: SQL MI backup retention, managed instance PITR retention, MI short-term retention, SQL MI restore window Quick peek Open full term page

Databases complete SQL managed instance distributed transaction Microsoft Learn describes DTC for Azure SQL Managed Instance as support for distributed transactions in mixed environments, including managed instances, SQL Server, other relational databases, custom applications, and transaction participants that can establish network connectivity to Azure and coordinate transaction outcomes safely. SQL Managed Instance intermediate 5 commands Aliases: SQL MI distributed transaction, managed instance DTC, Azure SQL MI DTC, distributed transaction coordinator Quick peek Open full term page

Databases complete SQL managed instance failover group Microsoft Learn describes failover groups for Azure SQL Managed Instance as a way to manage geo-replication and coordinated failover of all user databases from one managed instance to another managed instance in a different Azure region, with stable listener endpoints for application connectivity. SQL Managed Instance intermediate 5 commands Aliases: SQL MI failover group, managed instance failover group, instance failover group, SQL Managed Instance FOG Quick peek Open full term page

Databases complete SQL managed instance link Microsoft Learn describes the Managed Instance link as near real-time data replication between SQL Server and Azure SQL Managed Instance, enabling hybrid flexibility, database mobility, read-only workload offload, analytics in Azure, disaster recovery patterns, and migrations with planned or forced failover. SQL Managed Instance intermediate 5 commands Aliases: Managed Instance link, SQL MI link, Azure SQL MI link, MI link Quick peek Open full term page

Databases complete SQL Managed Instance maintenance window Microsoft Learn describes the maintenance window as a configurable schedule for Azure SQL Managed Instance maintenance events, helping teams make impactful platform updates more predictable and less disruptive by aligning them with approved operational windows instead of surprise business-hour interruptions. SQL Managed Instance intermediate 5 commands Aliases: SQL MI maintenance window, Azure SQL MI maintenance schedule, managed instance maintenance configuration Quick peek Open full term page

Databases complete SQL Managed Instance private endpoint Microsoft Learn describes private endpoints for Azure SQL Managed Instance as private IP-based connections that use Azure Private Link to provide secure, isolated client connectivity from virtual networks without exposing the managed instance network infrastructure to broader public paths. Properly. and DNS. SQL Managed Instance intermediate 5 commands Aliases: SQL MI private endpoint, Azure SQL MI Private Link, managed instance Private Link endpoint Quick peek Open full term page

Databases complete SQL Managed Instance public endpoint Microsoft Learn explains that Azure SQL Managed Instance can provide user connectivity through a public endpoint, but the configuration must be secured with network controls, port 3342 access rules, strong authentication, and careful operational review before production use. Always. Carefully. under explicit governance. SQL Managed Instance intermediate 5 commands Aliases: SQL MI public endpoint, Azure SQL MI public data endpoint, managed instance public data endpoint Quick peek Open full term page

Databases complete SQL Managed Instance service tier Microsoft Learn describes SQL Managed Instance service tiers as purchasing-model choices, such as General Purpose, Next-gen General Purpose, and Business Critical, that define architecture, storage limits, availability behavior, performance characteristics, and billing for a managed instance. Review it using workload evidence. for production database workloads. SQL Managed Instance intermediate 5 commands Aliases: SQL MI service tier, Azure SQL MI tier, managed instance tier, SQL Managed Instance SKU tier Quick peek Open full term page

Databases complete SQL Managed Instance storage size Microsoft Learn explains that SQL Managed Instance storage size is configured capacity for the instance, specified in supported increments, charged according to the maximum configured size, and constrained by service tier, hardware, and resource-limit rules. Review it before migrations begin. across shared database estates. planning. SQL Managed Instance advanced 5 commands Aliases: SQL MI storage size, Azure SQL MI storage capacity, managed instance storage capacity, storageSizeInGB Quick peek Open full term page