Search Azure terms

Containers premium AKS private cluster Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation. AKS networking advanced 5 commands Aliases: Azure Kubernetes Service private cluster, aks private cluster Quick peek Open full term page

Databases premium MySQL private access MySQL private access means a MySQL Flexible Server networking model that keeps database connectivity inside a virtual network instead of exposing a public endpoint. You see it when teams host sensitive workloads, enforce network isolation, connect applications through private subnets, or meet compliance expectations. Think of it as private network reachability for the database, not permission to read the data. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases field-manual-complete Azure SQL private endpoint A database capability or setting in Azure SQL Database that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context. Azure SQL Database intermediate 5 commands Aliases: Azure SQL private endpoint, azure-sql-private-endpoint, azure-sql-database, azure-sql-logical-server, private-endpoint, private-dns-zone, vnet-peering, managed-identity, app-service-vnet-integration, azure-sql-firewall-rule, service-endpoint Quick peek Open full term page

Databases field-manual-complete PostgreSQL private access PostgreSQL private access means the flexible server is reached through private networking instead of an internet-facing endpoint. The server sits in a delegated subnet in a virtual network, and clients resolve its name through Private DNS. Apps in the same virtual network, peered networks, VPN, or ExpressRoute can connect if routing and security rules allow it. For a learner, the key idea is simple: choose private access when the database should behave like an internal service, not a public database with firewall openings. PostgreSQL flexible server intermediate 5 commands Aliases: PostgreSQL private networking, PostgreSQL VNet integration, Private access for PostgreSQL flexible server, PostgreSQL delegated subnet access Quick peek Open full term page

Storage field-manual-complete Storage private endpoint A Private Link network interface that lets clients reach one Azure Storage service through a private IP address. Private networking Intermediate 5 commands Aliases: private endpoint for storage, Azure Storage private endpoint, storage Private Link endpoint, private storage access, storage account private link Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Azure OpenAI provides OpenAI model capabilities through Azure resources, deployments, identity, networking, quota, and monitoring controls. Azure OpenAI intermediate 8 commands Aliases: Azure OpenAI Service Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Databases premium Flexible server A flexible server is the Azure Database deployment model for managed PostgreSQL or MySQL servers with configurable compute, storage, availability, maintenance, backup, and networking options. Teams use it to host managed relational databases with more control over maintenance windows, compute tiers, backup retention, high availability, private networking, stop-start behavior, and performance settings. It is not a self-managed VM database, a single-server compatibility promise, a free unlimited database tier, or proof that schema design, indexes, failover, and application connection pooling are correct. Azure managed databases intermediate 6 commands Aliases: Azure Database flexible server, PostgreSQL flexible server, MySQL flexible server, managed flexible database server Quick peek Open full term page

Containers premium Azure Container Registry A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments. Container images fundamentals 5 commands Aliases: ACR Quick peek Open full term page

Security premium Key Vault Azure Key Vault is a cloud service for storing and controlling access to secrets, keys, and certificates. It helps applications, administrators, and automation protect sensitive values with encryption, access control, logging, purge protection, private networking, and managed integration across Azure workloads. Secrets and keys Fundamentals 5 commands Aliases: Key Vault, Azure Key Vault, vault, secrets store, certificate vault, secure secrets store, key vault resource Quick peek Open full term page

Integration premium Service Bus geo-replication Service Bus geo-replication is a Premium-tier feature that continuously replicates a namespace's metadata and message data from the primary region to a secondary region. It lets operators promote the secondary when the primary region degrades, preserving queues, topics, subscriptions, filters, and message state. Service Bus advanced 5 commands Aliases: Service Bus data replication, Service Bus regional replication, Service Bus secondary region, Service Bus namespace replication, Service Bus Premium geo replication Quick peek Open full term page

AI and Machine Learning premium Azure AI services Azure AI services is the family of Azure cloud AI APIs and resources, surfaced through Foundry Tools, for vision, speech, language, translation, content, and generative scenarios. AI services fundamentals 4 commands Aliases: AI services, Azure AI services account, Cognitive Services, Foundry Tools Quick peek Open full term page

Integration premium Service Bus Premium Service Bus Premium is the Azure Service Bus offering for mission-critical brokered messaging with dedicated resources called messaging units. It provides stronger isolation, predictable throughput, Premium-only features such as private endpoints and full JMS 2.0 support, and scaling options for production namespaces. Service Bus fundamentals 4 commands Aliases: Azure Service Bus Premium, Premium Service Bus, Service Bus Premium Messaging Quick peek Open full term page

Integration premium Service Bus premium tier The Service Bus premium tier is the namespace pricing and capability tier that allocates dedicated messaging units to Azure Service Bus. It is chosen for production scenarios that need resource isolation, predictable capacity, private networking, full JMS support, Premium metrics, and advanced resiliency options. Messaging fundamentals 4 commands Aliases: Azure Service Bus Premium tier, Premium messaging tier, Service Bus SKU Premium Quick peek Open full term page

AI and Machine Learning premium Assistant message Assistant message is the conversation record produced inside an Assistants-style workflow. In the classic Assistants API model, messages live on a thread and can come from a user or the assistant. For operators, the important point is that an assistant message is not just screen text; it is state that may be stored, retrieved. Azure OpenAI intermediate 2 commands Aliases: Assistants API message, thread message, assistant-generated message, Azure OpenAI assistant message Quick peek Open full term page

Storage complete Storage account endpoint Storage account endpoint is documented by Microsoft as part of the Storage accounts area in Azure. Storage accounts fundamentals 8 commands Aliases: storage endpoint, blob endpoint, dfs endpoint, storage service URL Quick peek Open full term page

Databases field-manual-complete Azure SQL firewall rule An Azure SQL firewall rule is an allow-list entry for public network access to Azure SQL Database. It says which client IP address or range may connect to a logical server or a specific database. It does not replace identity, passwords, Microsoft Entra authentication, or private networking; it only decides whether the network connection is. Azure SQL Database intermediate 5 commands Aliases: Azure SQL firewall rule, IP firewall rule, SQL firewall rule, database-level firewall rule, server-level firewall rule Quick peek Open full term page

Storage field-manual-complete Blob Storage Blob Storage is Azure object storage for massive amounts of unstructured data such as documents, images, video, backups, logs, and application files. Storage advanced 5 commands Aliases: Blob Storage, blob-storage, blob, blob-container, blob-access-tier, blob-soft-delete, blob-versioning, storage-account, account-sas, private-endpoint-for-storage, azure-files, data-lake-storage-gen2, queue-storage Quick peek Open full term page

Networking verified Public network access Whether a resource can be reached over public endpoints. Networking advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance verified Resource delete protection Resource delete protection uses Azure management locks, usually CanNotDelete, to stop critical resources or resource groups from being deleted by ordinary control-plane operations. Management locks fundamentals 5 commands Aliases: Azure delete protection, management lock delete protection, CanNotDelete lock, delete lock, protected Azure resource Quick peek Open full term page

Storage field-manual-complete Storage endpoint A storage endpoint is the service URL used to reach an Azure Storage account data service, such as Blob, Data Lake Storage, File, Queue, Table, or static website hosting. Endpoints identify where clients connect, while authorization, firewall rules, DNS, and private endpoints determine whether access succeeds. Storage platform intermediate 5 commands Aliases: storage service endpoint, Azure Storage endpoint, storage account endpoint, storage URL Quick peek Open full term page

Networking field-manual-complete Virtual network An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity. Azure Virtual Network beginner 5 commands Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network Quick peek Open full term page

Databases complete SQL Managed Instance Microsoft Learn describes Azure SQL Managed Instance as a fully managed PaaS database engine with near complete SQL Server compatibility, native virtual network deployment, automated patching and backups, and instance-scoped features that help teams lift and shift SQL Server workloads with fewer application or database changes. Azure SQL fundamentals 5 commands Aliases: SQL MI, Azure SQL MI, Azure SQL Managed Instance, managed SQL instance Quick peek Open full term page

Databases complete SQL Managed Instance public endpoint Microsoft Learn explains that Azure SQL Managed Instance can provide user connectivity through a public endpoint, but the configuration must be secured with network controls, port 3342 access rules, strong authentication, and careful operational review before production use. Always. Carefully. under explicit governance. SQL Managed Instance intermediate 5 commands Aliases: SQL MI public endpoint, Azure SQL MI public data endpoint, managed instance public data endpoint Quick peek Open full term page

Monitoring and Observability verified Data collection endpoint An Azure Monitor resource that provides regional endpoints used by agents and data collection rules for configuration access and telemetry ingestion. Azure Monitor data collection Intermediate 4 commands Aliases: DCE, Azure Monitor DCE, monitor data collection endpoint Quick peek Open full term page

Web premium App Service private endpoint An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access. App Service Networking intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Bicep private registry A Bicep private registry is an Azure Container Registry used to publish and share organization-owned Bicep modules. Bicep fundamentals 6 commands Aliases: No aliases yet Quick peek Open full term page

Networking field-manual-complete Private DNS zone A private DNS zone is the private address book Azure uses when a virtual network needs internal name resolution. Instead of sending a service name to public DNS and getting a public address, linked virtual networks can resolve records inside the private zone. Private endpoints depend on this heavily because the application usually keeps calling the normal service hostname, while DNS quietly returns the private endpoint IP. When this is wrong, everything looks like a network outage even though the endpoint exists. DNS fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking field-manual-complete Private Endpoint A private endpoint gives an Azure service a private IP address inside your virtual network. Instead of your app reaching a storage account, database, vault, or AI service through a public endpoint, traffic goes to a private network interface tied to that service. The service still exists as a managed Azure resource; the endpoint is the private doorway to it. DNS, firewall rules, approval state, and public network access settings decide whether the design is actually private and usable. Networking advanced 5 commands Aliases: private link endpoint Quick peek Open full term page

Networking field-manual-complete Private IP address A private IP address is the address an Azure resource uses inside a virtual network instead of on the public internet. IP addressing fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking field-manual-complete Private Link Private Link is Azure’s way to reach supported services through private network connections instead of sending traffic to their public endpoints. Private access fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Analytics field-manual-complete Synapse managed private endpoint A Synapse managed private endpoint is a private endpoint that Azure Synapse creates inside a workspace managed virtual network to reach a specific Azure resource over Private Link. It supports approved, resource-scoped connectivity for storage, databases, Cosmos DB, and other targets without opening public network paths. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed private endpoint, Synapse MPE, managed private endpoint in Synapse, Synapse Private Link endpoint Quick peek Open full term page

Databases complete SQL private endpoint Microsoft Learn describes Azure SQL private endpoints as Private Link connections that allow clients to reach Azure SQL Database or Azure Synapse through a private IP address in a virtual network. The SQL administrator manages private endpoint connection approval, while DNS and network configuration determine client resolution. Azure SQL networking intermediate 5 commands Aliases: Azure SQL private endpoint, Private Link for Azure SQL, SQL Database Private Link, Azure SQL Private Link endpoint Quick peek Open full term page

Databases field-manual-complete Cosmos DB private endpoint A Cosmos DB private endpoint uses Azure Private Link to expose a Cosmos DB account through private IP addresses in a virtual network. Microsoft Learn explains that this lets teams restrict access to private paths and reduce public exposure for database clients and administrative connections. Azure Cosmos DB intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium field-manual Managed private endpoint A managed private endpoint is a private endpoint created inside a managed virtual network so a managed service can reach another Azure resource privately. Teams use it when data pipelines or analytics workspaces need private connectivity to storage, databases, or other services. In plain English, it gives operators a named control for reduced public exposure and clearer approval evidence for managed service connectivity instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data engineering and analytics intermediate 4 commands Aliases: Managed private endpoint, Azure Data Factory, Data engineering and analytics, Azure Data Factory and Azure Synapse Analytics, Data Factory and Synapse networking, Managed virtual networking, private endpoint, linked service, managed virtual network, Managed virtual networks, MPE, managed endpoint for Private Link, Azure Data Factory and Azure Synapse managed virtual networks Quick peek Open full term page

Compute premium Accelerated networking for VM Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads. Virtual Machines intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Databricks workspace Private Link Databricks workspace Private Link is the Azure Private Link configuration that provides private connectivity paths to Azure Databricks workspace resources and related Databricks services without exposing traffic to the public internet. Azure Databricks advanced 5 commands Aliases: Azure Databricks Private Link, Databricks private endpoint, workspace private endpoint, front-end Private Link Quick peek Open full term page

Integration premium Event Hubs private endpoint An Event Hubs private endpoint is a Private Link network interface that lets clients reach an Event Hubs namespace through a private IP address in a virtual network. Teams use it to keep Event Hubs traffic on private network paths and restrict namespace access from public internet routes. It is not an outbound connection from Event Hubs into your subnet, a substitute for authentication, or a guarantee that every Azure service can still reach the namespace. Event Hubs intermediate 5 commands Aliases: Private Link for Event Hubs, Event Hubs Private Link, private endpoint connection Quick peek Open full term page

Storage premium Azure Files private endpoint Azure Files private endpoint connects Azure file share traffic to a storage account through a private IP address in a virtual network. It helps network, security, and storage teams keep SMB or NFS access on private network paths without exposing file access directly over public endpoints. You see it when regulated workloads need private access, branch users connect through VPN, or applications must mount shares without public storage exposure. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Private connectivity intermediate 4 commands Aliases: Private endpoint for Azure Files, Azure Files Private Link Quick peek Open full term page

Analytics premium Data Factory private endpoint A Private Link connection that exposes Data Factory or related data movement targets through a private IP address instead of a public network path. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory private endpoint, ADF private endpoint, data factory private endpoint Quick peek Open full term page

Integration premium Service Bus private endpoint A Service Bus private endpoint is an Azure Private Link network interface that maps a virtual network to a Service Bus Premium namespace. It lets approved clients reach the namespace over private connectivity, reducing public exposure when DNS, network rules, and application routing are configured correctly. Service Bus advanced 4 commands Aliases: Azure Service Bus private endpoint, Service Bus Private Link, Private endpoint for Service Bus Quick peek Open full term page

Analytics field-manual-complete Synapse private endpoint A Synapse private endpoint is an Azure Private Link network interface that lets clients reach a Synapse workspace over a private IP address instead of the public internet. It is used with workspace development, SQL, and private-link patterns to reduce exposure and control network access. Synapse Analytics advanced 8 commands Aliases: Azure Synapse private endpoint, Synapse workspace private endpoint, Private Link for Synapse, private endpoint for Synapse workspace Quick peek Open full term page

Analytics field-manual-complete Kusto private endpoint A Kusto private endpoint connects clients on an Azure virtual network to an Azure Data Explorer cluster through Azure Private Link, using private IP addressing so query and ingestion traffic can avoid public internet exposure and follow private DNS and approval controls. Azure Data Explorer advanced 6 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Azure OpenAI private endpoint An Azure OpenAI private endpoint gives your model-calling applications a private network path to an Azure OpenAI resource. Instead of reaching the resource over its public endpoint, approved clients in a virtual network resolve the service name to a private IP address. This is useful for sensitive prompts, internal copilots, and retrieval systems that must stay inside controlled network boundaries. It still requires identity, DNS, and application configuration to be correct. Test callers before lockdown. Azure OpenAI intermediate 5 commands Aliases: OpenAI private endpoint, Azure OpenAI Private Link, private model endpoint, private endpoint for Azure OpenAI Quick peek Open full term page

Web field-manual-complete Private bytes Private bytes tells you how much memory an app process has allocated for itself and cannot share with other processes. In App Service, it is a useful signal when a web app, Function, WebJob, or container slowly grows until it restarts, slows down, or exhausts the worker. It is not the same as every memory metric, and it does not explain the root cause by itself. Treat it as a warning light: the app may be leaking memory, caching too aggressively, processing oversized payloads, or running on an undersized plan. Runtime metric intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Web field-manual-complete Private certificate A private certificate is a certificate your App Service app can use because the private key is available to the platform. Teams bring private certificates when they need to secure a custom domain with their own PFX certificate, use a wildcard certificate, import a certificate from Key Vault, or make the app present a certificate to another system. It is different from a public key certificate and from some managed certificate scenarios. Handle it like a secret: protect the private key, track expiry, and bind the right thumbprint to the right hostname. App Service intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Private endpoint for AI service A private endpoint for an AI service is the private network doorway to an Azure AI services account. Applications still call the service endpoint they are configured to use, but clients inside the linked network can resolve that name to a private IP instead of reaching across a public path. It is useful when document processing, language analysis, speech, content safety, or vision workloads handle sensitive data. It does not replace authentication, keys, managed identity, or responsible AI controls. AI platform and search intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Private endpoint for Azure Files A private endpoint for Azure Files is the private network path to file shares in a storage account. Instead of mounting or accessing the share through the public file endpoint, clients in approved networks reach a private IP tied to the file service. The share, authentication model, and storage account still matter; the endpoint only changes network reachability. It is especially important for SMB access from Azure workloads, virtual desktops, build systems, and hybrid clients connected through VPN or ExpressRoute. Azure Files advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning field-manual-complete Private endpoint for Azure OpenAI A private endpoint for Azure OpenAI is the private network doorway to an Azure OpenAI resource. Your application still calls the Azure OpenAI endpoint and authenticates normally, but from approved networks the name can resolve to a private IP instead of a public address. It is commonly used for enterprise chat, RAG, summarization, and agent workloads that handle sensitive prompts or documents. It protects the network path, not the prompt content by itself, so identity, logging, safety, and data controls still matter. Azure OpenAI advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Private endpoint for Storage A private endpoint for Storage is the private network entry point to one storage account service, such as Blob, Files, Queue, Table, Data Lake Storage, or static website content. Storage platform intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page