Search Azure terms

Networking verified Packet capture Azure Network Watcher packet capture creates capture sessions that track traffic to and from a virtual machine or virtual machine scale set. It helps diagnose network anomalies, gather packet-level evidence, inspect client-server communication, and save filtered capture files locally or in storage. Network diagnostics intermediate 5 commands Aliases: Network Watcher packet capture, VM packet capture, packet trace, pcap capture Quick peek Open full term page

Networking field-manual-complete NSG flow logs NSG flow logs are records of traffic decisions made by Azure network security groups. They show whether flows were allowed or denied, which rule was involved, and where the traffic was headed. In 2026 they are a legacy operational signal: existing logs still matter for investigations, but new NSG flow logs can no longer be created. A learner should understand them as historical evidence and a migration concern, not as the preferred design for new network logging. Diagnostics fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Web premium App Service diagnostics Built-in App Service troubleshooting tools and detectors that help diagnose availability, performance, configuration, networking, and runtime problems. It helps learners understand where the concept appears in Azure operations and what to verify before changing it. App Service intermediate 5 commands Aliases: app service diagnostics, diagnostics Quick peek Open full term page

Networking premium Network Watcher Network Watcher means an Azure diagnostics service that helps inspect, monitor, and troubleshoot network behavior across supported Azure resources. You see it when teams test connectivity, capture packets, review flow logs, inspect topology, or prove whether a problem is network-related. Think of it as a network evidence toolkit, not a replacement for application logs or security analytics. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Diagnostics fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Compute field-manual-complete VM boot diagnostics storage VM boot diagnostics storage is the storage location used by Azure boot diagnostics to capture serial console logs and screenshots during virtual machine startup. It helps operators troubleshoot startup failures, kernel messages, inaccessible consoles, and early boot problems for Linux and Windows virtual machines. Virtual Machines intermediate 5 commands Aliases: boot diagnostics storage, Azure boot diagnostics, serial log storage, VM boot log storage Quick peek Open full term page

Compute premium Accelerated networking for VM Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads. Virtual Machines intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium AKS network policy An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service. AKS networking Intermediate 5 commands Aliases: Azure Kubernetes Service network policy, aks network policy Quick peek Open full term page

Networking premium Network Security Group Network Security Group means an Azure rule set that filters inbound and outbound network traffic for subnets or network interfaces. You see it when teams restrict application ports, isolate workloads, permit administration, block unwanted traffic, or document network segmentation. Think of it as a prioritized traffic filter near the workload, not complete application security. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Network security fundamentals 5 commands Aliases: NSG Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Containers field-manual-complete AKS network plugin An AKS network plugin is the networking choice that decides how Kubernetes pods get IP addresses and how traffic moves inside an Azure Kubernetes Service cluster. AKS networking Intermediate 5 commands Aliases: Azure Kubernetes Service network plugin, aks network plugin Quick peek Open full term page

Networking verified Public network access Whether a resource can be reached over public endpoints. Networking advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Storage firewall network rule An allow rule that permits selected network sources to reach an Azure Storage account public endpoint. Storage networking intermediate 5 commands Aliases: storage firewall rule, storage account firewall network rule, Azure Storage network ACL rule, storage account network allow rule, Azure Storage firewall network rule, storage account network ACL rule, storage account firewall subnet rule Quick peek Open full term page

Storage field-manual-complete Storage network rule A storage account network access rule that allows selected sources after public access is restricted. Storage networking intermediate 5 commands Aliases: Azure Storage network rules, storage account network rules, storage network ACLs, storage firewall network access, Azure Storage network rule, storage account network rule, storage network ACL rule Quick peek Open full term page

Storage field-manual-complete Storage network rules The selected-network rules that control which sources can reach an Azure Storage account public endpoint. Storage networking Intermediate 5 commands Aliases: storage account network rules, storage firewall rules, storage network ACLs, selected network access, storage account firewall allowlist Quick peek Open full term page

Analytics field-manual-complete Synapse managed virtual network A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet Quick peek Open full term page

Networking field-manual-complete Virtual network An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity. Azure Virtual Network beginner 5 commands Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network Quick peek Open full term page

Storage complete Storage account public network access Public network access is the storage account setting that controls whether requests can reach the account through public Azure Storage endpoints. Teams pair it with firewalls, virtual network rules, trusted-services exceptions, and private endpoints to decide whether only private network paths should be allowed. Storage accounts advanced 5 commands Aliases: public access for storage account, storage public network access, storage public endpoint access, publicNetworkAccess Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

Virtual Desktop Infrastructure premium Azure Virtual Desktop Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control. Virtual desktops fundamentals 5 commands Aliases: AVD Quick peek Open full term page

AI and Machine Learning premium Document Intelligence resource A Document Intelligence resource is the Azure AI service resource that provides the endpoint, keys, region, pricing tier, network configuration, and monitoring for Document Intelligence APIs. Document Intelligence fundamentals 5 commands Aliases: Azure Document Intelligence resource, Document Intelligence account, AI service resource, Form Recognizer resource Quick peek Open full term page

Analytics learning-path-anchor Synapse Studio Synapse Studio is the browser-based workspace experience for Azure Synapse Analytics. It exposes hubs for data, development, integration, monitoring, and management, letting users author notebooks and SQL scripts, build pipelines, configure connections, review access, and work with Git-backed or live artifacts. Synapse Analytics fundamentals 6 commands Aliases: Azure Synapse Studio, Synapse web workspace, Synapse workspace UI, Synapse authoring experience Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace firewall A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It... Synapse Analytics intermediate 6 commands Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall Quick peek Open full term page

Web premium App Service Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it. App Service intermediate 4 commands Aliases: App Service, app service Quick peek Open full term page

AI and Machine Learning premium Azure AI Search service Azure AI Search service is the Azure resource that hosts Azure AI Search indexes, indexers, skillsets, keys, capacity, networking, and query endpoints. AI platform and search intermediate 4 commands Aliases: AI Search resource, AI Search service, Azure Search service, Search service, search service Quick peek Open full term page

AI and Machine Learning premium Azure AI services Azure AI services is the family of Azure cloud AI APIs and resources, surfaced through Foundry Tools, for vision, speech, language, translation, content, and generative scenarios. AI services fundamentals 4 commands Aliases: AI services, Azure AI services account, Cognitive Services, Foundry Tools Quick peek Open full term page

AI and Machine Learning premium Azure AI services account An Azure resource that provides endpoints, keys, identity, networking, billing, and monitoring for one or more Azure AI service capabilities. Azure AI services fundamentals 4 commands Aliases: AI services account, Azure AI multi-service resource, Foundry resource, Microsoft.CognitiveServices account Quick peek Open full term page

Web premium Bandwidth in/out Bandwidth in/out refers to measured inbound and outbound network traffic or throughput for Azure resources, often reviewed through metrics, diagnostics, and billing data. App Service metric intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Service Bus namespace A Service Bus namespace is the Azure management, DNS, identity, and network container for Service Bus messaging entities. It scopes queues, topics, subscriptions, rules, authorization settings, SKU choice, diagnostics, and access endpoints so applications can exchange brokered messages through one named service boundary. Messaging fundamentals 4 commands Aliases: Azure Service Bus namespace, Namespace, Service Bus broker namespace Quick peek Open full term page

Storage learning-path-anchor Table service endpoint A Table service endpoint is the address your application uses when it talks to Azure Table Storage. For a normal Azure Storage account, it looks like an account-specific table URL. That address is not just a string in a connection setting; it determines DNS resolution, firewall evaluation, private endpoint routing, TLS, SDK configuration, and what operators test during an outage. If the endpoint is wrong, the table might exist and credentials might be valid, but clients still fail to connect. Table Storage intermediate 5 commands Aliases: Azure Table endpoint, Table Storage endpoint, storage table endpoint, Table data-plane endpoint Quick peek Open full term page

Management and Governance learning-path-anchor Template spec A template spec stores an ARM template or Bicep deployment artifact as a versioned Azure resource. Infrastructure as code fundamentals 5 commands Aliases: Template spec, template spec, Azure Template spec, ARM Template spec, Azure template spec, Microsoft.Resources/templateSpecs Quick peek Open full term page

Containers learning-path-anchor System node pool A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the... Azure Kubernetes Service intermediate 4 commands Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool Quick peek Open full term page

Storage learning-path-anchor Table batch operation A Table batch operation lets an application change several Azure Table entities together instead of sending separate requests and hoping they all succeed. It is useful when records belong to the same partition and must stay consistent, such as a header row plus related detail rows. The important limitation is strict: the entities must... Table Storage intermediate 4 commands Aliases: entity group transaction, Table Storage batch, batch transaction, partition-scoped batch Quick peek Open full term page

AI and Machine Learning learning-path-anchor Text to speech Text to speech in Azure AI Speech converts written text or SSML into synthesized audio using neural voices, custom voice options, language support, and APIs. Teams use it to add spoken responses to apps, contact centers, accessibility tools, devices, and media workflows while governing region, keys, networking, and quota. Azure AI services fundamentals 4 commands Aliases: Text to speech, text to speech, Azure Text to speech, Microsoft Learn Text to speech, TTS, speech synthesis, Azure AI Speech synthesis, neural voices, SSML speech Quick peek Open full term page

Analytics command-rich Synapse workspace A Synapse workspace is the main container where a team builds and operates Azure Synapse Analytics. It gives the team one named place for SQL pools, Spark pools, pipelines, notebooks, linked services, access rules, monitoring, and the connection to the default data lake. The workspace is not just a folder in the portal; it... Analytics platform fundamentals 9 commands Aliases: Azure Synapse workspace, Synapse Analytics workspace, workspace in Azure Synapse, Synapse analytics boundary Quick peek Open full term page

Databases premium Change feed processor A database capability or setting in Azure Cosmos DB that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context. Azure Cosmos DB fundamentals 15 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Translator service The Translator service is the Azure AI service resource and API surface that provides Translator capabilities to applications. It supplies endpoints, keys or token-based authentication, regional configuration, usage limits, and management settings for text translation, document translation, custom translation, monitoring, and secure integration. Azure AI services fundamentals 6 commands Aliases: Azure AI Translator service, Text Translation service, Translator resource, translation service resource, Cognitive Services Translator Quick peek Open full term page

Containers field-manual-complete Container App environment Microsoft Learn describes a Container Apps environment as a secure boundary around one or more container apps and jobs. The runtime manages the environment by handling OS upgrades, scale operations, failover procedures, resource balancing, shared networking, and observability settings for the workloads that run inside it. Serverless containers fundamentals 5 commands Aliases: Container App environment, app-service-plan, azure-kubernetes-service, azure-monitor, container app environment, container-app-environment, container-apps, container-apps-ingress, container-apps-managed-environment, container-apps-revision, container-apps-secret, container-apps-workload-profile, managed-identity Quick peek Open full term page

Management and Governance verified Resource drift Resource drift is the gap between the intended Azure configuration in code, policy, or design and the resource state that actually exists after manual changes or unmanaged deployments. Operational hygiene intermediate 5 commands Aliases: Azure resource drift, infrastructure drift, configuration drift, IaC drift, deployment drift Quick peek Open full term page

Management and Governance verified Resource group deployment A resource group deployment runs an ARM template or Bicep file at one resource group scope so the resources in that workload boundary are created or updated together. ARM deployments intermediate 5 commands Aliases: ARM resource group deployment, deployment group, az deployment group, Bicep resource group deployment, resource group scope deployment Quick peek Open full term page

Compute verified VM redeploy operation A VM redeploy operation is an Azure Compute action that shuts down a virtual machine, moves it to another Azure host, and powers it back on. It is used when host-level problems, stuck provisioning, or unexplained connectivity issues suggest the current physical host may be unhealthy. Virtual Machines intermediate 5 commands Aliases: VM redeploy operation, vm redeploy operation Quick peek Open full term page

Compute verified VM restart operation A VM restart operation reboots an Azure virtual machine through the Azure control plane. It stops and starts the guest operating system on the same VM resource, preserving disks, network interfaces, identity settings, and configuration while causing a planned service interruption. Virtual Machines intermediate 5 commands Aliases: VM restart operation, vm restart operation Quick peek Open full term page

Compute verified VM serial console VM serial console is Azure's text-based recovery channel for a virtual machine or scale set instance. It connects to the VM serial port through Azure management access, so operators can troubleshoot boot, login, firewall, and network failures even when RDP or SSH is unavailable. Virtual Machines intermediate 5 commands Aliases: VM serial console, vm serial console Quick peek Open full term page

Databases command-rich Cosmos DB for Apache Gremlin Azure Cosmos DB for Apache Gremlin is a managed graph database service for storing, querying, and traversing graph data with the Gremlin language. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI resource An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context. Azure OpenAI fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Service Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls. Generative AI fundamentals 11 commands Aliases: Azure OpenAI Quick peek Open full term page

Storage premium Locally redundant storage Microsoft Learn describes locally redundant storage as Azure Storage redundancy that replicates data within the primary region in a local storage scale unit. LRS is the lowest-cost redundancy option and provides high durability, but it does not protect against regional disasters. Azure Storage intermediate 10 commands Aliases: LRS Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Azure OpenAI provides OpenAI model capabilities through Azure resources, deployments, identity, networking, quota, and monitoring controls. Azure OpenAI intermediate 8 commands Aliases: Azure OpenAI Service Quick peek Open full term page

Management and Governance premium Azure Policy Azure Policy is a governance service for creating, assigning, and managing rules that evaluate Azure resources. Azure Policy fundamentals 7 commands Aliases: Policy Quick peek Open full term page

Databases premium Cosmos DB physical partition Cosmos DB physical partition means a fully managed internal storage and compute partition that hosts ranges of logical partition keys in Azure Cosmos DB. In plain English, it is the thing developers and operators check when they need to understand how data access really works. It connects the application model to automatic scale-out, replica placement, RU distribution, and operational signals such as hot partition diagnostics. For a production team, it turns vague database talk into a specific thing to inspect in the portal, SDK code, templates, metrics, and incident notes. Azure Cosmos DB intermediate 7 commands Aliases: No aliases yet Quick peek Open full term page

Web premium App Service private endpoint An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access. App Service Networking intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page