Search Azure terms

Compute premium Disk encryption set A disk encryption set is an Azure resource that connects managed disks, snapshots, or images to a customer-managed key used for server-side encryption. Managed disk encryption intermediate 4 commands Aliases: DES, managed disk encryption set, disk CMK set, customer-managed key disk encryption set Quick peek Open full term page

Compute premium field-manual Managed disk A managed disk is an Azure-managed block storage resource used as an operating system disk or data disk for a virtual machine. Teams use it when VM storage needs durable disks without manually managing storage accounts or page blobs. In plain English, it gives operators a named control for clear disk ownership, backup evidence, encryption control, and repeatable VM recovery instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure Disk Storage intermediate 3 commands Aliases: Managed disk, Azure Virtual Machines, Azure Disk Storage Quick peek Open full term page

Compute premium field-manual Managed disk SKU A managed disk SKU is the selected disk type and performance tier for a managed disk, such as Standard HDD, Standard SSD, Premium SSD, Premium SSD v2, or Ultra Disk. Teams use it when a VM workload needs the right balance of latency, IOPS, throughput, durability options, and cost. In plain English, it gives operators a named control for right-sized storage performance without paying for unnecessary disk capability instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure Disk Storage intermediate 3 commands Aliases: Managed disk SKU, Azure Disk Storage Quick peek Open full term page

Analytics premium Databricks managed resource group The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources. Azure Databricks intermediate 6 commands Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group Quick peek Open full term page

Compute premium Disk attachment Disk attachment is the association between a managed disk and a virtual machine or compatible scale set instance, allowing the workload to use the disk as OS or data storage. Managed disks fundamentals 4 commands Aliases: VM disk attachment, data disk attachment, attach managed disk, attached disk Quick peek Open full term page

Security field-manual-complete Infrastructure encryption Infrastructure encryption controls whether supported Azure services apply an extra platform encryption layer for workloads that require stronger data-at-rest protection. Teams see it in storage accounts, encryption scopes. It is not customer-managed keys, transparent data encryption, transport encryption, or a backup retention policy; confusing them can create noncompliant storage designs, irreversible creation-time gaps. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Data Protection Intermediate 5 commands Aliases: double encryption, platform infrastructure encryption, second encryption layer, infrastructure-level encryption Quick peek Open full term page

Compute field-manual-complete Premium SSD disk A Premium SSD disk is a faster Azure managed disk for virtual machines that need steadier storage performance than standard disks. Disks and images intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases complete SQL transparent data encryption Microsoft Learn describes transparent data encryption for Azure SQL as encryption at rest for databases, backups, and transaction logs. It is enabled by default for Azure SQL Database, uses a service-managed protector unless customer-managed keys are configured, and stays transparent to applications. Azure SQL security intermediate 5 commands Aliases: SQL TDE, Azure SQL TDE, transparent data encryption, TDE for Azure SQL Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace managed identity A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service... Synapse Analytics intermediate 8 commands Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity Quick peek Open full term page

Containers premium AKS managed identity An AKS managed identity is a Microsoft Entra identity that an AKS cluster uses to manage Azure resources without stored service principal secrets. AKS identity Intermediate 5 commands Aliases: Azure Kubernetes Service managed identity, aks managed identity Quick peek Open full term page

Storage premium Azure Managed Lustre Azure Managed Lustre is a managed parallel file system for high-performance computing and AI workloads that need scalable, low-latency file storage in Azure. Parallel file systems advanced 5 commands Aliases: Managed Lustre, Azure Managed Lustre File System, AMLFS Quick peek Open full term page

Storage premium Infrastructure encryption for storage Infrastructure encryption for storage controls how Azure Storage applies optional double encryption to blobs, files, queues, or tables depending on account and scope configuration. Teams see it in storage account creation, encryption blade. It is not blob immutability, soft delete, encryption in transit, customer-managed key rotation, or disabling shared key authorization; confusing them can create storage accounts that cannot meet compliance, rebuild-only remediation. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Azure Storage Security Intermediate 5 commands Aliases: storage infrastructure encryption, storage account double encryption, require infrastructure encryption, double encryption for Azure Storage Quick peek Open full term page

Integration premium Service Bus managed identity Service Bus managed identity means using Microsoft Entra managed identities so Azure-hosted applications can access Service Bus without stored credentials. Applications receive RBAC roles such as Data Sender or Data Receiver, while Service Bus namespace identities may also be assigned for service-managed scenarios such as encryption configuration. Service Bus fundamentals 5 commands Aliases: Service Bus identity-based access, Service Bus Entra authentication, managed identity for Service Bus, Service Bus secretless authentication, Service Bus RBAC identity Quick peek Open full term page

Databases premium Azure SQL transparent data encryption Azure SQL Transparent Data Encryption helps protect Azure SQL Database data, log files, and backups at rest by encrypting and decrypting database pages without requiring application changes. Azure SQL Database fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Security premium Customer-managed key rotation Customer-managed key rotation is the planned creation and adoption of new versions of a customer-managed encryption key while Azure services keep accessing protected data safely. Key management advanced 4 commands Aliases: Customer-managed key rotation Quick peek Open full term page

Compute premium Disk bursting Disk bursting is an Azure managed disk capability that lets supported disks temporarily exceed baseline IOPS or throughput targets to handle short workload spikes. Managed disk performance intermediate 4 commands Aliases: managed disk bursting, Premium SSD bursting, Standard SSD bursting, on-demand disk bursting Quick peek Open full term page

Storage premium Microsoft-managed key for storage Microsoft-managed key for Storage means the default Azure Storage encryption approach where Microsoft manages the keys that protect stored data at rest. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Storage encryption advanced 4 commands Aliases: platform-managed key for storage, PMK for storage, Microsoft managed storage encryption key Quick peek Open full term page

Identity learning-path-anchor System-assigned managed identity A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request... Managed identities intermediate 4 commands Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity Quick peek Open full term page

Storage field-manual-complete Storage customer-managed key A storage customer-managed key is a key in Azure Key Vault or Managed HSM that a customer controls for Azure Storage encryption at rest. Azure Storage still performs encryption, but the customer manages key ownership, access, rotation, purge protection, and lifecycle accountability. Storage encryption fundamentals 5 commands Aliases: Azure Storage customer-managed key, storage CMK, customer-managed key for storage Quick peek Open full term page

Storage field-manual-complete Storage encryption scope A storage encryption scope is a named Azure Blob Storage encryption boundary that can protect blobs with either Microsoft-managed keys or customer-managed keys. It lets teams apply different encryption key choices to containers or individual blobs inside the same storage account when isolation or compliance requires it. Storage accounts intermediate 5 commands Aliases: blob encryption scope, Azure Storage encryption scope, scoped blob encryption, container encryption scope Quick peek Open full term page

Databases field-manual-complete Transparent data encryption Transparent data encryption helps protect Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics by encrypting data, backups, and transaction logs at rest. Encryption and decryption happen in real time without requiring application changes, with service-managed or customer-managed key options. Azure SQL intermediate 5 commands Aliases: TDE, SQL transparent data encryption, Azure SQL TDE, database encryption at rest, TDE protector Quick peek Open full term page

Compute complete Shared disk A managed disk configured for simultaneous attachment to multiple VMs so supported clustered applications can use shared block storage. Disks and images intermediate 5 commands Aliases: Azure shared disk, shared managed disk, shared data disk, managed disk maxShares Quick peek Open full term page

Compute complete Standard HDD disk Microsoft Learn lists Standard HDD as an Azure managed disk type that uses hard disk storage and is available for Azure VMs. It is designed for cost-sensitive, low-IO workloads, with more variable performance than SSD-backed disks, and can often be converted when workload needs change. Disks and images intermediate 5 commands Aliases: standard-hdd-disk, Standard HDD disk, Azure Standard HDD, Standard_LRS disk, HDD managed disk, standard hard disk Quick peek Open full term page

Compute complete Standard SSD disk Microsoft Learn lists Standard SSD as an Azure managed disk type that uses solid-state storage for general-purpose VM disks. It sits between Standard HDD and Premium SSD, giving better consistency than HDD for many workloads while keeping cost lower than premium disks for moderate IO requirements. Disks and images intermediate 5 commands Aliases: standard-ssd-disk, Standard SSD disk, Azure Standard SSD, StandardSSD_LRS disk, SSD managed disk, standard solid-state disk Quick peek Open full term page

Storage field-manual-complete Customer-managed key for storage Customer-managed key for storage is an Azure Storage encryption option where the account uses a key stored in Key Vault or Managed HSM to wrap storage encryption keys. Storage accounts advanced 4 commands Aliases: Customer-managed key for storage Quick peek Open full term page

Storage field-manual-complete Encryption scope Encryption scopes in Blob Storage let you manage encryption with a key scoped to a container or individual blob, creating secure boundaries within a storage account. Azure Storage intermediate 4 commands Aliases: Blob encryption scope, Azure Storage encryption scope, container encryption scope Quick peek Open full term page

AI and Machine Learning top-250-pre130-priority-upgraded Customer managed key for Azure OpenAI Customer managed key for Azure OpenAI is a production Azure concept tied to Azure OpenAI. Azure OpenAI advanced 4 commands Aliases: Customer-managed key for Azure OpenAI, Customer managed key for Azure OpenAI Quick peek Open full term page

Databases premium Azure Managed Redis Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios. Managed cache intermediate 6 commands Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI managed identity Azure OpenAI managed identity uses Microsoft Entra identities so Azure workloads can call model endpoints without stored keys. Azure OpenAI intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Event Grid managed identity delivery Event Grid managed identity delivery is the pattern where Event Grid uses a managed identity on a topic, domain, or system topic to authenticate event delivery to supported destinations. In Azure, it shows up when teams want to deliver events to Azure destinations without storing destination keys or embedding secrets in event subscription configuration. Teams use it to review system-assigned or user-assigned identity, Event Grid topic or domain identity settings, destination RBAC role assignments, delivery identity settings, dead-letter identity settings, and monitoring before changing production behavior. Event routing advanced 5 commands Aliases: Event Grid managed identity event delivery, managed identity delivery for Event Grid Quick peek Open full term page

Analytics premium Data Factory managed identity The Microsoft Entra identity assigned to a Data Factory so pipelines and linked services can access Azure resources without embedded passwords. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed identity, ADF managed identity, data factory managed identity Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Web premium Function app managed identity Function app managed identity is a Microsoft Entra identity assigned to a function app so its code and supported bindings can access Azure resources without storing passwords or connection strings. Teams use it to replace secrets in app settings with identity-based access to services such as Storage, Service Bus, Key Vault, Event Hubs, SQL, or monitoring resources. In daily Azure work, it shows up when engineers grant a function app data-plane permissions, remove leaked connection strings, configure identity-based bindings, or investigate why a trigger cannot reach its dependency. Azure Functions intermediate 4 commands Aliases: Azure Functions managed identity, managed identity for Functions, function app identity Quick peek Open full term page

Integration premium Logic Apps managed identity A Logic Apps managed identity is the Microsoft Entra identity assigned to a Logic Apps workflow or Standard logic app resource so the workflow can authenticate to supported Azure resources without storing passwords, shared keys, or long-lived secrets in governed production environments. Azure Logic Apps intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Web premium Managed certificate A managed certificate in Azure App Service is a platform-created TLS certificate for a supported custom domain. Azure can issue and renew it for basic HTTPS protection, but it has limitations compared with uploaded, Key Vault, or purchased certificates. That context supports safer operational decisions. TLS fundamentals 4 commands Aliases: App Service managed certificate, free managed certificate Quick peek Open full term page

Identity premium Managed identity A managed identity is an automatically managed Microsoft Entra identity assigned to a supported Azure resource. It lets workloads authenticate to services that support Microsoft Entra authentication without storing passwords, certificates, or client secrets in code, configuration, or deployment pipelines. Microsoft Entra workload identity intermediate 3 commands Aliases: Managed identity, system-assigned managed identity, user-assigned managed identity, Azure workload identity, secretless authentication, system-assigned identity, user-assigned identity, Microsoft Entra ID, Microsoft Entra workload identity Quick peek Open full term page

Security premium Managed identity for data access Managed identity for data access is the pattern of using a managed identity to let a workload read or write data without embedded secrets. Teams use it when pipelines, applications, jobs, or analytics services need secure access to storage, databases, or other data services. In plain English, it gives operators a named control for least-privilege data access, reduced secret exposure, and cleaner audit trails instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data access security intermediate 3 commands Aliases: Managed identity for data access, Microsoft Entra ID, Data access security Quick peek Open full term page

Databases premium Managed instance database A managed instance database is a database hosted inside Azure SQL Managed Instance with managed platform operations and SQL Server compatibility features. Teams use it when a workload needs managed SQL operations while keeping instance-level features closer to SQL Server. In plain English, it gives operators a named control for database-level ownership, backup evidence, restore planning, and migration clarity within a managed instance instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure SQL Managed Instance intermediate 3 commands Aliases: Managed instance database, Azure SQL Managed Instance Quick peek Open full term page

Databases premium Managed Instance failover group Managed Instance failover group is a disaster-recovery relationship that lets databases in a SQL Managed Instance fail over to a paired managed instance. Teams use it when business-critical databases need cross-region continuity and a managed failover path. In plain English, it gives operators a named control for planned or emergency recovery with clearer listener, replication, and ownership evidence instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure SQL Managed Instance intermediate 3 commands Aliases: Managed Instance failover group, Azure SQL Managed Instance Quick peek Open full term page

Identity premium Assignment managed identity Assignment managed identity is the identity Azure Policy uses when a policy assignment must change resources during remediation. It matters most for effects such as modify and deployIfNotExists, where Policy is not just reporting non-compliance but attempting to fix or deploy something. The identity needs Azure RBAC permissions at the right scope. Without those. Azure Policy intermediate 2 commands Aliases: Policy assignment identity, Azure Policy managed identity, policy remediation identity, assignment identity Quick peek Open full term page

App Hosting field-manual-complete App Service managed certificate An App Service managed certificate is a free certificate that Azure App Service can issue for an eligible custom domain on a web app or function app. App Service TLS Intermediate 5 commands Aliases: Azure App Service managed certificate, app service managed certificate Quick peek Open full term page

Containers field-manual-complete Container Apps managed environment A Container Apps managed environment is the shared home where one or more Azure Container Apps and jobs run. It is not your container image or one app instance; it is the boundary around the runtime, networking, logging, certificates, Dapr settings, and workload profile capacity that those apps use. Teams choose an environment before creating. Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Analytics field-manual-complete Synapse managed private endpoint A Synapse managed private endpoint is a private endpoint that Azure Synapse creates inside a workspace managed virtual network to reach a specific Azure resource over Private Link. It supports approved, resource-scoped connectivity for storage, databases, Cosmos DB, and other targets without opening public network paths. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed private endpoint, Synapse MPE, managed private endpoint in Synapse, Synapse Private Link endpoint Quick peek Open full term page

Analytics field-manual-complete Synapse managed virtual network A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet Quick peek Open full term page

Identity field-manual-complete User-assigned managed identity A standalone managed identity that can be attached to one or more Azure resources. Managed identities fundamentals 5 commands Aliases: UAMI, user managed identity, reusable managed identity Quick peek Open full term page

Databases complete SQL Agent on Managed Instance Microsoft Learn explains that SQL Server Agent executes SQL Agent jobs for task automation in Azure SQL Managed Instance. A job is a specified series of T-SQL scripts against a database, used to run administrative tasks one or more times and monitor success or failure. Azure SQL Managed Instance intermediate 5 commands Aliases: SQL Agent on Managed Instance, sql agent on managed instance, sql-agent-on-managed-instance Quick peek Open full term page

Databases complete SQL Managed Instance Microsoft Learn describes Azure SQL Managed Instance as a fully managed PaaS database engine with near complete SQL Server compatibility, native virtual network deployment, automated patching and backups, and instance-scoped features that help teams lift and shift SQL Server workloads with fewer application or database changes. Azure SQL fundamentals 5 commands Aliases: SQL MI, Azure SQL MI, Azure SQL Managed Instance, managed SQL instance Quick peek Open full term page

Databases complete SQL managed instance backup retention Microsoft Learn explains that automated backups for Azure SQL Managed Instance let teams restore a managed database to a specific point in time within the configured retention period, up to 35 days, while long-term retention policies can preserve selected backups for years when compliance requires it. SQL Managed Instance intermediate 5 commands Aliases: SQL MI backup retention, managed instance PITR retention, MI short-term retention, SQL MI restore window Quick peek Open full term page

Databases complete SQL managed instance distributed transaction Microsoft Learn describes DTC for Azure SQL Managed Instance as support for distributed transactions in mixed environments, including managed instances, SQL Server, other relational databases, custom applications, and transaction participants that can establish network connectivity to Azure and coordinate transaction outcomes safely. SQL Managed Instance intermediate 5 commands Aliases: SQL MI distributed transaction, managed instance DTC, Azure SQL MI DTC, distributed transaction coordinator Quick peek Open full term page

Databases complete SQL managed instance failover group Microsoft Learn describes failover groups for Azure SQL Managed Instance as a way to manage geo-replication and coordinated failover of all user databases from one managed instance to another managed instance in a different Azure region, with stable listener endpoints for application connectivity. SQL Managed Instance intermediate 5 commands Aliases: SQL MI failover group, managed instance failover group, instance failover group, SQL Managed Instance FOG Quick peek Open full term page