Search Azure terms

Security premium Data exfiltration control A set of Azure controls that restrict, inspect, or approve where sensitive data can leave a workload, workspace, network, or tenant boundary. Network and data protection Intermediate 4 commands Aliases: egress control, data exfiltration protection, approved outbound data boundary Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Storage field-manual-complete Storage data protection Storage data protection is the set of Azure Storage controls that help recover, retain, and prove integrity for blob data. It includes patterns such as soft delete, container restore, versioning, change feed, point-in-time restore, immutable storage, and operational backup when those features match the workload. Storage accounts intermediate 5 commands Aliases: storage protection, blob data protection, Azure Storage recovery controls, storage recoverability Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Hyperscale database Hyperscale database is an individual Azure SQL Database configured to use the Hyperscale service tier and its scalable storage and compute architecture. Azure SQL intermediate 4 commands Aliases: Azure SQL Hyperscale database, hyperscale database, Hyperscale database, Hyperscale SQL database Quick peek Open full term page

Security field-manual-complete Least privilege data access Microsoft Learn describes least privilege as granting users and applications only the data and operations required to do their jobs. In Azure data access, that means scoped roles, managed identities, limited secrets, network controls, and reviewable permissions instead of broad owner-style access. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance verified Resource delete protection Resource delete protection uses Azure management locks, usually CanNotDelete, to stop critical resources or resource groups from being deleted by ordinary control-plane operations. Management locks fundamentals 5 commands Aliases: Azure delete protection, management lock delete protection, CanNotDelete lock, delete lock, protected Azure resource Quick peek Open full term page

Analytics field-manual-complete Synapse managed virtual network A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet Quick peek Open full term page

Databases complete SQL transparent data encryption Microsoft Learn describes transparent data encryption for Azure SQL as encryption at rest for databases, backups, and transaction logs. It is enabled by default for Azure SQL Database, uses a service-managed protector unless customer-managed keys are configured, and stays transparent to applications. Azure SQL security intermediate 5 commands Aliases: SQL TDE, Azure SQL TDE, transparent data encryption, TDE for Azure SQL Quick peek Open full term page

Storage premium Data Lake analytics workload A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric. Data Lake Storage Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Databricks managed resource group The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources. Azure Databricks intermediate 6 commands Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group Quick peek Open full term page

Networking premium DDoS Protection Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities. Network security intermediate 6 commands Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection Quick peek Open full term page

Databases premium Azure Database for MySQL Flexible Server A fully managed Azure database service for MySQL workloads with configurable compute, storage, backups, networking, maintenance, and high availability options. Managed MySQL intermediate 5 commands Aliases: MySQL Flexible Server Quick peek Open full term page

Databases premium Azure Database for PostgreSQL Flexible Server A fully managed Azure PostgreSQL service with configurable compute, storage, backups, networking, maintenance, extensions, and high availability options. Managed PostgreSQL intermediate 5 commands Aliases: PostgreSQL Flexible Server Quick peek Open full term page

Analytics premium Azure Databricks A unified, open analytics platform on Azure for building, deploying, sharing, and maintaining enterprise data, analytics, and AI solutions at scale. Data engineering and AI intermediate 5 commands Aliases: Databricks on Azure Quick peek Open full term page

Databases premium Azure SQL Database Azure SQL Database is a fully managed relational database service in Azure that provides SQL Server-compatible engines as single databases, elastic pools, and serverless or provisioned compute choices. Microsoft Learn presents it as platform as a service with built-in availability, backups, patching, scaling, and security integration. Database intermediate 5 commands Aliases: Azure SQL DB, Azure SQL Database, Azure SQL pooled database, Azure SQL single database, SQL Database Quick peek Open full term page

Analytics premium Data flow debug cluster The live Spark cluster started for a mapping data flow debug session so designers can preview data and run transformation logic interactively. Data Factory Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake directory A directory in Azure Data Lake Storage Gen2 is a hierarchical namespace path segment that can contain files and child directories and can have access controls applied. Data Lake Storage Gen2 fundamentals 5 commands Aliases: ADLS directory, Data Lake folder, Gen2 directory, lake folder Quick peek Open full term page

Storage premium Data Lake filesystem Data Lake filesystem is the compact API and CLI naming for the ADLS Gen2 file-system resource that contains directories and files. Data Lake Storage Gen2 fundamentals 5 commands Aliases: filesystem, ADLS filesystem, storage fs, Azure storage fs Quick peek Open full term page

Storage premium Data Lake Gen2 endpoint A Data Lake Gen2 endpoint is the DFS endpoint on a storage account used by Azure Data Lake Storage Gen2 APIs, ABFS URIs, and hierarchical namespace operations. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS Gen2 endpoint, DFS endpoint, dfs.core.windows.net endpoint, Data Lake endpoint Quick peek Open full term page

Storage premium Data Lake gold layer The Data Lake gold layer is the business-ready medallion layer where curated, aggregated, and governed data is published for analytics, reporting, and decision support. Medallion lakehouse architecture intermediate 5 commands Aliases: gold layer, gold zone, curated business layer, trusted reporting layer Quick peek Open full term page

Storage premium Data Lake ingestion zone A Data Lake ingestion zone is the controlled landing area where source data first arrives before validation, transformation, enrichment, or publication. Data Lake Storage Gen2 fundamentals 5 commands Aliases: landing zone, raw ingestion zone, lake landing area, ingest zone Quick peek Open full term page

Storage premium Data Lake namespace A Data Lake namespace is the hierarchical address space in Azure Data Lake Storage Gen2 that organizes file systems, directories, files, and paths for analytics. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS namespace, hierarchical namespace, HNS namespace, lake namespace Quick peek Open full term page

Storage premium Data Lake partition folder A Data Lake partition folder is a directory pattern, often key=value, that groups files by values such as date, region, tenant, or business domain for efficient reads. Data Lake Storage Gen2 intermediate 5 commands Aliases: partition folder, Hive-style partition folder, date partition folder, lake partition path Quick peek Open full term page

Storage premium Data Lake path ACL A Data Lake path ACL is the access control list applied to a file or directory path in Azure Data Lake Storage Gen2 for fine-grained permissions. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS path ACL, Data Lake path access control, path access control list, data-lake-path-ac Quick peek Open full term page

Analytics premium Databricks workspace Private Link Databricks workspace Private Link is the Azure Private Link configuration that provides private connectivity paths to Azure Databricks workspace resources and related Databricks services without exposing traffic to the public internet. Azure Databricks advanced 5 commands Aliases: Azure Databricks Private Link, Databricks private endpoint, workspace private endpoint, front-end Private Link Quick peek Open full term page

Analytics premium Databricks workspace VNet injection Databricks workspace VNet injection is the deployment model that places Azure Databricks compute resources into customer-managed virtual network subnets so network security, routing, and private connectivity controls can be applied. Databricks advanced 5 commands Aliases: VNet-injected Databricks workspace, customer-managed VNet workspace, Databricks VNet injection, workspace in customer VNet Quick peek Open full term page

Databases premium PostgreSQL database A named PostgreSQL catalog inside a flexible server that holds schemas, tables, extensions, permissions, and application data. Azure Database for PostgreSQL fundamentals 5 commands Aliases: PostgreSQL database, postgresql database, Azure Database for PostgreSQL database, database catalog, schema migration, charset, collation Quick peek Open full term page

AI and Machine Learning premium Search data source A search data source is an Azure AI Search indexer object that describes where external content comes from. It specifies the supported source type, connection information, credentials or identity, container or query, and sometimes change or deletion detection used by indexers. Azure AI Search fundamentals 5 commands Aliases: Azure AI Search data source, indexer data source, SearchIndexerDataSourceConnection, data source connection, Azure Search data source object Quick peek Open full term page

Databases premium Advanced threat protection for SQL Advanced threat protection for SQL is the Defender for SQL capability that detects anomalous and potentially harmful database activity. In everyday Azure work, teams use it to surface SQL injection attempts, unusual access, unfamiliar principals, suspicious applications, or brute-force credential patterns. The useful evidence is Defender plan state, server or database protection setting, alert recipient, Azure SQL intermediate 4 commands Aliases: SQL Advanced Threat Protection, Azure SQL threat detection, Defender for SQL ATP, ATP for Azure SQL Quick peek Open full term page

Storage premium Azure Data Box An Azure service that transfers large amounts of data to or from Azure by shipping secure, managed storage devices for offline migration. Data transfer intermediate 4 commands Aliases: Data Box Quick peek Open full term page

Management and Governance premium Azure data plane The Azure data plane is the part of Azure you use after a resource exists, when you interact with the capability that resource provides. Microsoft Learn anchors this term in Azure control plane and data plane, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, data-plane operations are service-specific operations against. Azure Resource Manager fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Azure SQL transparent data encryption Azure SQL Transparent Data Encryption helps protect Azure SQL Database data, log files, and backups at rest by encrypting and decrypting database pages without requiring application changes. Azure SQL Database fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Security premium Data classification tag A tag or catalog label that marks the sensitivity, owner, regulatory handling, or business classification of an Azure resource or dataset. Data protection and governance Intermediate 4 commands Aliases: classification tag, sensitivity tag, data sensitivity tag, confidentiality tag Quick peek Open full term page

Analytics premium Data Factory connector A built-in or configured integration capability that lets Data Factory read from or write to a supported data store, SaaS application, or service endpoint. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory connector, ADF connector, data factory connector Quick peek Open full term page

Analytics premium Data Factory private endpoint A Private Link connection that exposes Data Factory or related data movement targets through a private IP address instead of a public network path. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory private endpoint, ADF private endpoint, data factory private endpoint Quick peek Open full term page

Databases premium Database server / account The Azure resource boundary that owns database instances, authentication, networking, regional placement, and service-wide settings for a database workload. Database platform intermediate 4 commands Aliases: database account, database server, database resource account, logical database server Quick peek Open full term page

Databases premium MySQL database MySQL database means a named database inside an Azure Database for MySQL server that stores application tables, users, routines, and data objects. You see it when developers create application data boundaries, run migrations, grant access, restore data, or separate tenant and service data. Think of it as the application data boundary inside the managed MySQL server. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Security premium Managed identity for data access Managed identity for data access is the pattern of using a managed identity to let a workload read or write data without embedded secrets. Teams use it when pipelines, applications, jobs, or analytics services need secure access to storage, databases, or other data services. In plain English, it gives operators a named control for least-privilege data access, reduced secret exposure, and cleaner audit trails instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data access security intermediate 3 commands Aliases: Managed identity for data access, Microsoft Entra ID, Data access security Quick peek Open full term page

Databases premium Managed instance database A managed instance database is a database hosted inside Azure SQL Managed Instance with managed platform operations and SQL Server compatibility features. Teams use it when a workload needs managed SQL operations while keeping instance-level features closer to SQL Server. In plain English, it gives operators a named control for database-level ownership, backup evidence, restore planning, and migration clarity within a managed instance instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure SQL Managed Instance intermediate 3 commands Aliases: Managed instance database, Azure SQL Managed Instance Quick peek Open full term page

Analytics learning-path-anchor Databricks metastore The top-level Unity Catalog container for catalogs, schemas, tables, volumes, models, functions, and governance permissions. Databricks intermediate 4 commands Aliases: Unity Catalog metastore, Databricks Unity Catalog metastore, metastore Quick peek Open full term page

Analytics learning-path-anchor Databricks MLflow The managed MLflow experience in Azure Databricks for experiments, runs, metrics, artifacts, model lineage, and MLOps evidence. Databricks fundamentals 4 commands Aliases: MLflow on Databricks, Databricks experiment tracking, MLflow tracking Quick peek Open full term page

Analytics learning-path-anchor Databricks model serving A managed serving endpoint pattern for exposing Databricks models or AI workloads for online inference with operational controls. Databricks intermediate 4 commands Aliases: Databricks Model Serving, serving endpoint, model serving endpoint Quick peek Open full term page

Analytics learning-path-anchor Databricks notebook A collaborative Azure Databricks document for code, SQL, visualizations, exploration, jobs, and ML workflows attached to compute. Databricks fundamentals 4 commands Aliases: Azure Databricks notebook, Databricks workspace notebook, interactive notebook Quick peek Open full term page

Analytics learning-path-anchor Databricks Photon The native vectorized Azure Databricks engine for accelerating eligible SQL, DataFrame, ETL, and streaming workloads. Databricks intermediate 4 commands Aliases: Photon engine, Photon acceleration, Databricks vectorized engine Quick peek Open full term page

Analytics learning-path-anchor Databricks repo A workspace Git integration, now called Git folders, for versioning notebooks and files used in Databricks development and CI/CD. Databricks fundamentals 4 commands Aliases: Databricks Repos, Databricks Git folder, Azure Databricks Git folders, workspace Git folder Quick peek Open full term page

Analytics learning-path-anchor Databricks schema A Unity Catalog namespace under a catalog that groups tables, views, volumes, models, functions, and permissions. Databricks fundamentals 4 commands Aliases: Unity Catalog schema, Databricks database schema, schema in Unity Catalog Quick peek Open full term page

Analytics learning-path-anchor Databricks secret scope A named Databricks collection of secrets used to store credentials and grant controlled read or manage access to workloads. Databricks fundamentals 4 commands Aliases: Databricks secrets scope, secret scope, Azure Databricks secrets Quick peek Open full term page

Analytics learning-path-anchor Databricks SQL warehouse A Databricks SQL compute resource for interactive queries, dashboards, BI tools, and governed analytics workloads. Databricks intermediate 4 commands Aliases: SQL warehouse, Databricks SQL compute, serverless SQL warehouse Quick peek Open full term page

Analytics learning-path-anchor Databricks table A governed Databricks data object, commonly managed, external, or foreign, queried through Unity Catalog and optimized for analytics. Databricks fundamentals 4 commands Aliases: Unity Catalog table, Delta table in Databricks, Databricks managed table Quick peek Open full term page