Search Azure terms

Analytics premium Databricks workspace Private Link Databricks workspace Private Link is the Azure Private Link configuration that provides private connectivity paths to Azure Databricks workspace resources and related Databricks services without exposing traffic to the public internet. Azure Databricks advanced 5 commands Aliases: Azure Databricks Private Link, Databricks private endpoint, workspace private endpoint, front-end Private Link Quick peek Open full term page

Storage premium Azure Files private endpoint Azure Files private endpoint connects Azure file share traffic to a storage account through a private IP address in a virtual network. It helps network, security, and storage teams keep SMB or NFS access on private network paths without exposing file access directly over public endpoints. You see it when regulated workloads need private access, branch users connect through VPN, or applications must mount shares without public storage exposure. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Private connectivity intermediate 4 commands Aliases: Private endpoint for Azure Files, Azure Files Private Link Quick peek Open full term page

Integration premium Service Bus private endpoint A Service Bus private endpoint is an Azure Private Link network interface that maps a virtual network to a Service Bus Premium namespace. It lets approved clients reach the namespace over private connectivity, reducing public exposure when DNS, network rules, and application routing are configured correctly. Service Bus advanced 4 commands Aliases: Azure Service Bus private endpoint, Service Bus Private Link, Private endpoint for Service Bus Quick peek Open full term page

Networking field-manual-complete Private Link Private Link is Azure’s way to reach supported services through private network connections instead of sending traffic to their public endpoints. Private access fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases field-manual-complete Redis private link Redis private link is the private connectivity pattern behind a Redis private endpoint. Private Link is the Azure capability that connects a private endpoint in your virtual network to the managed Redis service. The application still uses the Redis hostname, but DNS resolves it to a private address when configured correctly. Think of private link as the service relationship and private endpoint as the concrete network interface. It matters when your architecture needs private data-service access without self-hosting Redis inside the virtual network. Cache intermediate 5 commands Aliases: Redis Private Link, Private Link for Redis, Azure Redis Private Link, Redis private connectivity Quick peek Open full term page

Containers verified Registry private endpoint A registry private endpoint lets workloads reach Azure Container Registry through private network addressing instead of the public registry endpoint. Your registry remains a managed Azure service, but clients such as AKS nodes, self-hosted build agents, virtual machines, or container platforms connect Azure Container Registry intermediate 5 commands Aliases: ACR private endpoint, Azure Container Registry Private Link, private registry endpoint, container registry private endpoint Quick peek Open full term page

Analytics premium field-manual Managed private endpoint A managed private endpoint is a private endpoint created inside a managed virtual network so a managed service can reach another Azure resource privately. Teams use it when data pipelines or analytics workspaces need private connectivity to storage, databases, or other services. In plain English, it gives operators a named control for reduced public exposure and clearer approval evidence for managed service connectivity instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data engineering and analytics intermediate 4 commands Aliases: Managed private endpoint, Azure Data Factory, Data engineering and analytics, Azure Data Factory and Azure Synapse Analytics, Data Factory and Synapse networking, Managed virtual networking, private endpoint, linked service, managed virtual network, Managed virtual networks, MPE, managed endpoint for Private Link, Azure Data Factory and Azure Synapse managed virtual networks Quick peek Open full term page

Databases premium Azure SQL logical server An Azure SQL logical server is a logical administrative construct for Azure SQL Database and related SQL resources. Microsoft Learn describes it as the central point for managing a collection of databases, including logins, firewall rules, auditing, threat detection policies, and failover groups. Azure SQL Database fundamentals 16 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium ExpressRoute ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before. Hybrid connectivity intermediate 6 commands Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity Quick peek Open full term page

Databases premium PostgreSQL flexible server The managed Azure PostgreSQL server resource that owns compute, storage, backups, networking, high availability, parameters, and databases. PostgreSQL flexible server fundamentals 6 commands Aliases: PostgreSQL flexible server, postgresql flexible server, Azure Database for PostgreSQL flexible server, managed PostgreSQL, backup retention, high availability, private access Quick peek Open full term page

Analytics premium Databricks workspace VNet injection Databricks workspace VNet injection is the deployment model that places Azure Databricks compute resources into customer-managed virtual network subnets so network security, routing, and private connectivity controls can be applied. Databricks advanced 5 commands Aliases: VNet-injected Databricks workspace, customer-managed VNet workspace, Databricks VNet injection, workspace in customer VNet Quick peek Open full term page

AI and Machine Learning premium Azure AI services account An Azure resource that provides endpoints, keys, identity, networking, billing, and monitoring for one or more Azure AI service capabilities. Azure AI services fundamentals 4 commands Aliases: AI services account, Azure AI multi-service resource, Foundry resource, Microsoft.CognitiveServices account Quick peek Open full term page

Networking premium Firewall rule A firewall rule is a gatekeeping setting that decides which network sources can reach a protected Azure service. For Azure SQL, it often means allowing one public IP range to connect to a logical server or a specific database. For storage, MySQL, Cosmos DB, and other services, similar network rules limit where requests can come from. A firewall rule is not user authorization; it only answers whether the network path is allowed. Users or applications still need valid identity, credentials, and permissions after traffic gets through. Network security intermediate 4 commands Aliases: Azure firewall rule, IP firewall rule, server firewall rule, network access rule Quick peek Open full term page

Databases premium MySQL public access MySQL public access means a MySQL Flexible Server networking model that allows connectivity through a public endpoint controlled by firewall rules. You see it when teams support vendor connections, migration tools, development access, or temporary operations when private connectivity is not available. Think of it as public reachability with strict rules, not open database access. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases verified VNet injection for SQL MI VNet injection for SQL MI means deploying Azure SQL Managed Instance inside a dedicated Azure virtual network subnet that is delegated to Microsoft.Sql/managedInstances, with required network rules so the managed instance has private connectivity and service management access. Azure SQL Managed Instance intermediate 6 commands Aliases: SQL MI VNet injection, SQL Managed Instance subnet integration, SQL MI delegated subnet, managed instance VNet placement Quick peek Open full term page

Networking complete SNAT / ephemeral ports Microsoft Learn explains that outbound connections use ephemeral ports so destinations can maintain distinct traffic flows. When those ports are used for source network address translation, they are SNAT ports, and exhaustion can cause intermittent outbound connection failures in services such as App Service. Networking intermediate 6 commands Aliases: SNAT ports, ephemeral ports, source NAT ports, outbound connection ports Quick peek Open full term page

Analytics field-manual-complete Stream Analytics cluster A Stream Analytics cluster is a dedicated single-tenant environment for running Azure Stream Analytics jobs. It is intended for demanding streaming workloads, gives teams control over which jobs use the cluster, and supports private connectivity scenarios that are not covered by ordinary multi-tenant job placement. Stream Analytics intermediate 5 commands Aliases: Stream Analytics cluster, ASA cluster, dedicated Stream Analytics cluster, single-tenant Stream Analytics capacity Quick peek Open full term page

Networking field-manual-complete Subnet A subnet is a smaller address range inside an Azure virtual network. It is where many network-connected resources actually land, such as virtual machines, private endpoints, container nodes, and delegated platform services. Subnets let teams separate workloads, apply network security groups, attach route tables, reserve IP space, and control private connectivity. A good subnet plan gives every workload enough addresses and the right network controls. A bad plan creates overlapping ranges, blocked traffic, exhausted IPs, or painful migrations later. Virtual networking fundamentals 5 commands Aliases: Azure subnet, VNet subnet, virtual network subnet, subnet address prefix Quick peek Open full term page

Networking field-manual-complete Virtual network An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity. Azure Virtual Network beginner 5 commands Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network Quick peek Open full term page

Containers premium AKS private cluster Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation. AKS networking advanced 5 commands Aliases: Azure Kubernetes Service private cluster, aks private cluster Quick peek Open full term page

Databases premium MySQL private access MySQL private access means a MySQL Flexible Server networking model that keeps database connectivity inside a virtual network instead of exposing a public endpoint. You see it when teams host sensitive workloads, enforce network isolation, connect applications through private subnets, or meet compliance expectations. Think of it as private network reachability for the database, not permission to read the data. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases field-manual-complete Azure SQL private endpoint A database capability or setting in Azure SQL Database that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context. Azure SQL Database intermediate 5 commands Aliases: Azure SQL private endpoint, azure-sql-private-endpoint, azure-sql-database, azure-sql-logical-server, private-endpoint, private-dns-zone, vnet-peering, managed-identity, app-service-vnet-integration, azure-sql-firewall-rule, service-endpoint Quick peek Open full term page

Analytics field-manual-complete Synapse managed private endpoint A Synapse managed private endpoint is a private endpoint that Azure Synapse creates inside a workspace managed virtual network to reach a specific Azure resource over Private Link. It supports approved, resource-scoped connectivity for storage, databases, Cosmos DB, and other targets without opening public network paths. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed private endpoint, Synapse MPE, managed private endpoint in Synapse, Synapse Private Link endpoint Quick peek Open full term page

Databases complete SQL Managed Instance private endpoint Microsoft Learn describes private endpoints for Azure SQL Managed Instance as private IP-based connections that use Azure Private Link to provide secure, isolated client connectivity from virtual networks without exposing the managed instance network infrastructure to broader public paths. Properly. and DNS. SQL Managed Instance intermediate 5 commands Aliases: SQL MI private endpoint, Azure SQL MI Private Link, managed instance Private Link endpoint Quick peek Open full term page

Databases complete SQL MI private endpoint Microsoft Learn describes a private endpoint for Azure SQL Managed Instance as a Private Link connection that gives clients in another virtual network a private IP path to the managed instance. It supports isolated client connectivity and requires correct DNS resolution for successful connections. Azure SQL Managed Instance advanced 5 commands Aliases: SQL Managed Instance private endpoint, Azure SQL MI Private Link, managedInstance private endpoint Quick peek Open full term page

Databases complete SQL private endpoint Microsoft Learn describes Azure SQL private endpoints as Private Link connections that allow clients to reach Azure SQL Database or Azure Synapse through a private IP address in a virtual network. The SQL administrator manages private endpoint connection approval, while DNS and network configuration determine client resolution. Azure SQL networking intermediate 5 commands Aliases: Azure SQL private endpoint, Private Link for Azure SQL, SQL Database Private Link, Azure SQL Private Link endpoint Quick peek Open full term page

Web premium App Service private endpoint An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access. App Service Networking intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Bicep private registry A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules. Bicep fundamentals 6 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Event Hubs private endpoint An Event Hubs private endpoint is a Private Link network interface that lets clients reach an Event Hubs namespace through a private IP address in a virtual network. Teams use it to keep Event Hubs traffic on private network paths and restrict namespace access from public internet routes. It is not an outbound connection from Event Hubs into your subnet, a substitute for authentication, or a guarantee that every Azure service can still reach the namespace. Event Hubs intermediate 5 commands Aliases: Private Link for Event Hubs, Event Hubs Private Link, private endpoint connection Quick peek Open full term page

Analytics premium Data Factory private endpoint A Private Link connection that exposes Data Factory or related data movement targets through a private IP address instead of a public network path. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory private endpoint, ADF private endpoint, data factory private endpoint Quick peek Open full term page

Analytics field-manual-complete Synapse private endpoint A Synapse private endpoint is an Azure Private Link network interface that lets clients reach a Synapse workspace over a private IP address instead of the public internet. It is used with workspace development, SQL, and private-link patterns to reduce exposure and control network access. Synapse Analytics advanced 8 commands Aliases: Azure Synapse private endpoint, Synapse workspace private endpoint, Private Link for Synapse, private endpoint for Synapse workspace Quick peek Open full term page

Analytics field-manual-complete Kusto private endpoint A Kusto private endpoint connects clients on an Azure virtual network to an Azure Data Explorer cluster through Azure Private Link, using private IP addressing so query and ingestion traffic can avoid public internet exposure and follow private DNS and approval controls. Azure Data Explorer advanced 6 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Azure OpenAI private endpoint An Azure OpenAI private endpoint gives your model-calling applications a private network path to an Azure OpenAI resource. Instead of reaching the resource over its public endpoint, approved clients in a virtual network resolve the service name to a private IP address. This is useful for sensitive prompts, internal copilots, and retrieval systems that must stay inside controlled network boundaries. It still requires identity, DNS, and application configuration to be correct. Test callers before lockdown. Azure OpenAI intermediate 5 commands Aliases: OpenAI private endpoint, Azure OpenAI Private Link, private model endpoint, private endpoint for Azure OpenAI Quick peek Open full term page

Databases field-manual-complete PostgreSQL private access PostgreSQL private access means the flexible server is reached through private networking instead of an internet-facing endpoint. The server sits in a delegated subnet in a virtual network, and clients resolve its name through Private DNS. Apps in the same virtual network, peered networks, VPN, or ExpressRoute can connect if routing and security rules allow it. For a learner, the key idea is simple: choose private access when the database should behave like an internal service, not a public database with firewall openings. PostgreSQL flexible server intermediate 5 commands Aliases: PostgreSQL private networking, PostgreSQL VNet integration, Private access for PostgreSQL flexible server, PostgreSQL delegated subnet access Quick peek Open full term page

Web field-manual-complete Private bytes Private bytes tells you how much memory an app process has allocated for itself and cannot share with other processes. In App Service, it is a useful signal when a web app, Function, WebJob, or container slowly grows until it restarts, slows down, or exhausts the worker. It is not the same as every memory metric, and it does not explain the root cause by itself. Treat it as a warning light: the app may be leaking memory, caching too aggressively, processing oversized payloads, or running on an undersized plan. Runtime metric intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Web field-manual-complete Private certificate A private certificate is a certificate your App Service app can use because the private key is available to the platform. Teams bring private certificates when they need to secure a custom domain with their own PFX certificate, use a wildcard certificate, import a certificate from Key Vault, or make the app present a certificate to another system. It is different from a public key certificate and from some managed certificate scenarios. Handle it like a secret: protect the private key, track expiry, and bind the right thumbprint to the right hostname. App Service intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking field-manual-complete Private DNS zone A private DNS zone is the private address book Azure uses when a virtual network needs internal name resolution. Instead of sending a service name to public DNS and getting a public address, linked virtual networks can resolve records inside the private zone. Private endpoints depend on this heavily because the application usually keeps calling the normal service hostname, while DNS quietly returns the private endpoint IP. When this is wrong, everything looks like a network outage even though the endpoint exists. DNS fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking field-manual-complete Private Endpoint A private endpoint gives an Azure service a private IP address inside your virtual network. Instead of your app reaching a storage account, database, vault, or AI service through a public endpoint, traffic goes to a private network interface tied to that service. The service still exists as a managed Azure resource; the endpoint is the private doorway to it. DNS, firewall rules, approval state, and public network access settings decide whether the design is actually private and usable. Networking advanced 5 commands Aliases: private link endpoint Quick peek Open full term page

AI and Machine Learning field-manual-complete Private endpoint for AI service A private endpoint for an AI service is the private network doorway to an Azure AI services account. Applications still call the service endpoint they are configured to use, but clients inside the linked network can resolve that name to a private IP instead of reaching across a public path. It is useful when document processing, language analysis, speech, content safety, or vision workloads handle sensitive data. It does not replace authentication, keys, managed identity, or responsible AI controls. AI platform and search intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Private endpoint for Azure Files A private endpoint for Azure Files is the private network path to file shares in a storage account. Instead of mounting or accessing the share through the public file endpoint, clients in approved networks reach a private IP tied to the file service. The share, authentication model, and storage account still matter; the endpoint only changes network reachability. It is especially important for SMB access from Azure workloads, virtual desktops, build systems, and hybrid clients connected through VPN or ExpressRoute. Azure Files advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Private endpoint for Azure OpenAI A private endpoint for Azure OpenAI is the private network doorway to an Azure OpenAI resource. Your application still calls the Azure OpenAI endpoint and authenticates normally, but from approved networks the name can resolve to a private IP instead of a public address. It is commonly used for enterprise chat, RAG, summarization, and agent workloads that handle sensitive prompts or documents. It protects the network path, not the prompt content by itself, so identity, logging, safety, and data controls still matter. Azure OpenAI advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Private endpoint for Storage A private endpoint for Storage is the private network entry point to one storage account service, such as Blob, Files, Queue, Table, Data Lake Storage, or static website content. Storage platform intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking field-manual-complete Private IP address A private IP address is the address an Azure resource uses inside a virtual network instead of on the public internet. IP addressing fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Security field-manual-complete Private Link for data services Private Link for data services means your applications connect to databases, storage, and analytics services through private endpoints instead of public endpoints. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases field-manual-complete Redis private endpoint A Redis private endpoint gives your application a private IP path to Redis inside an Azure virtual network. Instead of letting clients reach the cache through its public endpoint, you attach a private endpoint to a subnet and connect through Private Link. The cache remains a managed Azure service, but traffic from approved networks resolves to private address space. This is most useful when security policy, compliance rules, or network design require Redis to behave like an internal dependency rather than an internet-exposed service. Cache and in-memory data intermediate 5 commands Aliases: Redis Private Endpoint, Azure Redis private endpoint, Redis endpoint over Private Link, Private Redis endpoint Quick peek Open full term page

Storage field-manual-complete Storage private endpoint A Private Link network interface that lets clients reach one Azure Storage service through a private IP address. Private networking Intermediate 5 commands Aliases: private endpoint for storage, Azure Storage private endpoint, storage Private Link endpoint, private storage access, storage account private link Quick peek Open full term page

Storage complete Storage account private endpoint A storage account private endpoint connects a storage service to a private IP address in an Azure virtual network. It lets clients reach Blob, File, Queue, Table, DFS, or Web endpoints over Private Link instead of the public internet, with DNS directing traffic privately. Storage accounts advanced 5 commands Aliases: storage private endpoint, Private Link for storage account, storage Private Link endpoint, private storage endpoint Quick peek Open full term page

Databases field-manual-complete Cosmos DB private endpoint A Cosmos DB private endpoint uses Azure Private Link to expose a Cosmos DB account through private IP addresses in a virtual network. Microsoft Learn explains that this lets teams restrict access to private paths and reduce public exposure for database clients and administrative connections. Azure Cosmos DB intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Synapse SQL Synapse SQL is the T-SQL analytics capability in Azure Synapse Analytics. It includes dedicated SQL pools for provisioned warehousing and serverless SQL pools for on-demand lake queries, letting teams analyze structured and semi-structured data through familiar SQL endpoints inside a Synapse workspace. Synapse Analytics intermediate 7 commands Aliases: Synapse SQL engine, Azure Synapse SQL, Synapse serverless and dedicated SQL, SQL analytics in Synapse Quick peek Open full term page

Analytics learning-path-anchor Synapse Spark pool A Synapse Spark pool is the workspace compute definition Azure Synapse uses to start Apache Spark sessions. It records node size, node count, autoscale behavior, runtime version, packages, and idle timeout so notebooks, Spark jobs, and pipelines get repeatable distributed processing. Synapse Analytics fundamentals 8 commands Aliases: Apache Spark pool, Spark pool, Synapse Apache Spark pool, serverless Spark pool Quick peek Open full term page