Search Azure terms

Security premium Incident Incident is a security or operational case that groups alerts, entities, evidence, investigation notes, and response actions around a potential issue. SIEM and SOAR fundamentals 5 commands Aliases: Incident, incident Quick peek Open full term page

Security verified Watchlist A Microsoft Sentinel watchlist is a named set of reference data, usually uploaded from CSV or storage, that analysts use in KQL queries, analytics rules, hunting, workbooks, notebooks, and investigations to enrich, filter, correlate, or prioritize security events at scale. SIEM and SOAR fundamentals 5 commands Aliases: Microsoft Sentinel watchlist, Sentinel reference data list, watchlist alias, KQL watchlist lookup Quick peek Open full term page

Security top-250-pre130-priority-upgraded Microsoft Sentinel Microsoft Sentinel means Microsoft cloud SIEM and SOAR service for collecting security signals, detecting threats, investigating incidents, and automating response. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. SIEM and SOAR fundamentals 4 commands Aliases: Sentinel, Azure Sentinel, Microsoft Sentinel SIEM Quick peek Open full term page

Integration verified Receive and delete Receive and delete is an Azure Service Bus receive mode where the broker considers a message settled as soon as it sends the message to the receiver. If transfer or processing fails afterward, the message is lost instead of being redelivered. Azure Service Bus intermediate 5 commands Aliases: ReceiveAndDelete, receive-and-delete mode, destructive read, at-most-once receive Quick peek Open full term page

Integration verified Receive-and-delete mode A integration pattern or service capability in Messaging that helps teams connect services reliably without tightly coupling every component with clearer ownership, safety, and operational context. Messaging fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

Analytics learning-path-anchor Synapse Spark pool A Synapse Spark pool is the workspace compute definition Azure Synapse uses to start Apache Spark sessions. It records node size, node count, autoscale behavior, runtime version, packages, and idle timeout so notebooks, Spark jobs, and pipelines get repeatable distributed processing. Synapse Analytics fundamentals 8 commands Aliases: Apache Spark pool, Spark pool, Synapse Apache Spark pool, serverless Spark pool Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace managed identity A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service... Synapse Analytics intermediate 8 commands Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL CETAS Synapse SQL CETAS means CREATE EXTERNAL TABLE AS SELECT. It creates external table metadata and exports the result of a T-SQL SELECT statement in parallel to files in Azure Storage or Azure Data Lake Storage Gen2 for later SQL or lake consumption. Synapse Analytics fundamentals 6 commands Aliases: CREATE EXTERNAL TABLE AS SELECT, CETAS, Synapse CETAS, serverless SQL CETAS Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL external table A Synapse SQL external table is database metadata that lets Synapse SQL query files stored outside the database, usually in Azure Storage or ADLS Gen2. It references an external data source, file format, and file location for governed SQL analytics. Synapse Analytics fundamentals 6 commands Aliases: external table in Synapse, Synapse external table, SQL external table, external table over lake files Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL on-demand Synapse SQL on-demand is the serverless SQL pool model in Azure Synapse Analytics. It lets teams run T-SQL queries over data in the lake without provisioning dedicated warehouse capacity, storing only metadata objects while using external data sources, views, functions, and security objects. Synapse Analytics fundamentals 6 commands Aliases: SQL on-demand, Synapse serverless SQL, serverless SQL in Synapse, built-in serverless SQL pool Quick peek Open full term page

Analytics learning-path-anchor Synapse Studio Synapse Studio is the browser-based workspace experience for Azure Synapse Analytics. It exposes hubs for data, development, integration, monitoring, and management, letting users author notebooks and SQL scripts, build pipelines, configure connections, review access, and work with Git-backed or live artifacts. Synapse Analytics fundamentals 6 commands Aliases: Azure Synapse Studio, Synapse web workspace, Synapse workspace UI, Synapse authoring experience Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace firewall A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It... Synapse Analytics intermediate 6 commands Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall Quick peek Open full term page

Storage learning-path-anchor Sync group A sync group is the container that tells Azure File Sync which cloud file share and which Windows Server folders should stay synchronized. Think of it as one file namespace with a hub in Azure and one or more on-premises or edge locations attached to it. If two groups represent different shares or business... Files, queues, and tables fundamentals 6 commands Aliases: Azure File Sync group, file sync group, sync topology, storage sync group Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL script A Synapse SQL script is a saved T-SQL authoring artifact in Synapse Studio. Users create or import scripts in the Develop hub, connect them to a dedicated or serverless SQL pool, run queries, review tabular results, export output, and organize scripts into folders. Synapse Analytics fundamentals 5 commands Aliases: SQL script in Synapse, Synapse Studio SQL script, T-SQL script artifact, Synapse query script Quick peek Open full term page

Analytics learning-path-anchor Synapse workload group A Synapse workload group is a dedicated SQL pool workload management object that reserves, caps, and grants resources for classified requests. It uses settings such as MIN_PERCENTAGE_RESOURCE, CAP_PERCENTAGE_RESOURCE, and request resource grant percentages to shape isolation, containment, concurrency, and execution behavior. Synapse Analytics fundamentals 5 commands Aliases: workload group in Synapse, dedicated SQL pool workload group, CREATE WORKLOAD GROUP, Synapse workload isolation group Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace repository A Synapse workspace repository is where a Synapse workspace saves its authoring artifacts when Git integration is enabled. Instead of every notebook, pipeline, SQL script, linked service, or dataset living only in the live workspace, the team works through branches, commits, pull requests, and a publish branch. That gives data engineers a familiar code-review... Synapse Analytics fundamentals 5 commands Aliases: Synapse Git repository, Synapse source control, Synapse code repository, workspace Git integration Quick peek Open full term page

AI and Machine Learning learning-path-anchor Synonym map A synonym map helps Azure AI Search understand that different words can mean the same thing for search. Users may type laptop, notebook, ultrabook, or a product nickname, while the indexed document uses only one of those terms. The synonym map teaches the search service to expand or rewrite the query so relevant documents... Azure AI Search intermediate 5 commands Aliases: AI Search synonym map, search synonyms, synonymMaps, equivalent terms map Quick peek Open full term page

Databases learning-path-anchor Synthetic partition key A synthetic partition key is a partition key value you create because no single natural field distributes Cosmos DB data well enough. For example, tenantId alone may create one huge tenant partition, while date alone may concentrate today's traffic. A synthetic key might combine tenant, region, and date bucket into one stored value that... Cosmos DB intermediate 5 commands Aliases: generated partition key, composite partition key value, calculated partition key, synthetic key Quick peek Open full term page

AI and Machine Learning learning-path-anchor System message A system message is the instruction layer that tells an Azure OpenAI chat model how it should behave before it answers the user's request. It can define the assistant's role, tone, allowed sources, formatting rules, safety boundaries, and refusal behavior. It is stronger than an ordinary user message, but it is not magic and... Azure OpenAI fundamentals 5 commands Aliases: system prompt, metaprompt, developer instruction, assistant instruction Quick peek Open full term page

Storage learning-path-anchor Table service endpoint A Table service endpoint is the address your application uses when it talks to Azure Table Storage. For a normal Azure Storage account, it looks like an account-specific table URL. That address is not just a string in a connection setting; it determines DNS resolution, firewall evaluation, private endpoint routing, TLS, SDK configuration, and what operators test during an outage. If the endpoint is wrong, the table might exist and credentials might be valid, but clients still fail to connect. Table Storage intermediate 5 commands Aliases: Azure Table endpoint, Table Storage endpoint, storage table endpoint, Table data-plane endpoint Quick peek Open full term page

Storage learning-path-anchor Table Storage Table Storage is Azure Storage for simple structured NoSQL records. You create tables, store entities, and identify each entity with a PartitionKey and RowKey. It is useful when the data is large, sparse, inexpensive to keep, and usually accessed by known keys. It is not a relational database, search engine, or analytics warehouse. The best fit is operational data that can be denormalized, read directly, updated independently, and kept cheap without requiring joins, stored procedures, or secondary indexes. Table Storage fundamentals 5 commands Aliases: Azure Table Storage, Storage Tables, Azure Storage Tables, Azure Tables storage Quick peek Open full term page

Governance learning-path-anchor Tag inheritance Tag inheritance is the controlled reuse of tags from a higher Azure or billing scope. Cost Management can apply higher-scope tags to usage records for reporting, while Azure Policy can copy selected parent tag values onto resources for governance at scale. Resource tagging fundamentals 5 commands Aliases: inherited tags, Azure tag inheritance, billing tag inheritance, policy tag inheritance Quick peek Open full term page

Governance learning-path-anchor Tag name A tag name is the label key in an Azure tag. In Environment=Prod, Environment is the tag name and Prod is the value. The name tells people and tools what question the tag answers: who owns this, what cost center pays for it, what environment is it, or what application does it support? Good tag names are short, consistent, boring, and governed. Bad tag names create duplicate categories like CostCenter, cost-center, CostCentre, and BillingCode that fracture reports. Resource tagging fundamentals 5 commands Aliases: tag key, Azure tag key, resource tag name, metadata tag name Quick peek Open full term page

Management and Governance learning-path-anchor Tag value A tag value is the answer attached to a tag name. If the tag name is Environment, the value might be Production, Test, or Sandbox. If the name is CostCenter, the value might be a finance code. Values are where governance becomes meaningful, because they separate one owner, workload, data class, or lifecycle state from another. A good value is standardized, approved, and easy to query. A bad value is free-text chaos: prod, production, PROD, live, and critical all trying to mean the same thing. Tags and naming fundamentals 5 commands Aliases: tag values, Azure tag value, resource tag value, tag metadata value Quick peek Open full term page

Management and Governance learning-path-anchor Tagging strategy A tagging strategy is the playbook for using tags without making a mess. It answers simple but important questions: which tags are required, who owns the list, which values are allowed, where tags are applied, and what happens when a resource is missing one. Without a strategy, tags become random notes. With a strategy, tags become a dependable system for cost allocation, ownership, lifecycle cleanup, compliance evidence, and operational routing. The best strategies are small enough to follow and strict enough to m Tags and naming fundamentals 5 commands Aliases: Azure tagging strategy, tag governance strategy, tag taxonomy, resource tagging standard Quick peek Open full term page

Management and Governance learning-path-anchor Tags Tags are labels you attach to Azure things so people and tools can understand what they are for. A tag has a name and a value, such as Owner=DataPlatform or Environment=Prod. Tags do not make a virtual machine faster, secure a database, or change a web app setting. They make the estate easier to organize, report on, govern, and automate. Useful tags answer questions the business actually asks: who owns this, what does it support, what environment is it, and who pays for it? Tags and naming advanced 5 commands Aliases: Azure tags, resource tags, name-value tags, Azure metadata tags Quick peek Open full term page

Containers learning-path-anchor Target port A target port tells Azure Container Apps where to deliver traffic inside your container. Public or internal ingress may expose an endpoint, but the app still has to listen on a specific port. If the container listens on 8080 and ingress targets 80, users may see timeouts, failed probes, or gateway errors. The setting is small, but it is often the difference between the app being deployed and the app being reachable. It should match the application startup command, Dockerfile, framework port, and health probes. Azure Container Apps intermediate 5 commands Aliases: container target port, Container Apps target port, ingress targetPort, container ingress port Quick peek Open full term page

Monitoring and Observability learning-path-anchor Telemetry events Telemetry events are breadcrumbs that say something meaningful happened in an application. They are different from raw logs because they usually have a clear event name and structured properties. A checkout completed, a document uploaded, a feature flag changed, or a device registered can all be telemetry events. In Azure Monitor Application Insights, these events help teams understand behavior, investigate incidents, and measure product outcomes. Good events are intentional, consistently named, and tied to the que Application data advanced 5 commands Aliases: event telemetry, custom events, Application Insights events, Azure Monitor events Quick peek Open full term page

Management and Governance learning-path-anchor Template expression A template expression computes values during ARM template deployment. ARM deployments fundamentals 5 commands Aliases: Template expression, template expression, Azure Template expression, ARM Template expression, ARM expressions, deployment expressions Quick peek Open full term page

Management and Governance learning-path-anchor Template function A template function is a built-in helper used by ARM templates or Bicep to calculate values. ARM deployments fundamentals 5 commands Aliases: Template function, template function, Azure Template function, ARM Template function, ARM functions, deployment functions Quick peek Open full term page

Management and Governance learning-path-anchor Template spec A template spec stores an ARM template or Bicep deployment artifact as a versioned Azure resource. Infrastructure as code fundamentals 5 commands Aliases: Template spec, template spec, Azure Template spec, ARM Template spec, Azure template spec, Microsoft.Resources/templateSpecs Quick peek Open full term page

Management and Governance learning-path-anchor Template spec version A template spec version is a specific immutable version of a template spec. ARM deployments fundamentals 5 commands Aliases: Template spec version, template spec version, Azure Template spec version, ARM Template spec version, template spec versions, Microsoft.Resources/templateSpecs/versions Quick peek Open full term page

Management and Governance learning-path-anchor Template validation Template validation checks whether an ARM or Bicep deployment is structurally and semantically acceptable before deployment. ARM deployments intermediate 5 commands Aliases: Template validation, template validation, Azure Template validation, ARM Template validation, ARM validation, deployment validation, az deployment validate Quick peek Open full term page

Management and Governance learning-path-anchor Tenant deployment A tenant deployment is a Resource Manager deployment executed at Microsoft Entra tenant scope. ARM deployments intermediate 5 commands Aliases: Tenant deployment, tenant deployment, Azure Tenant deployment, tenant scope deployment, az deployment tenant, ARM tenant deployment Quick peek Open full term page

Management and Governance learning-path-anchor Tenant scope Tenant scope is the highest Azure Resource Manager deployment and governance context tied to a Microsoft Entra tenant. Management scopes fundamentals 5 commands Aliases: Tenant scope, tenant scope, Azure Tenant scope, tenant level scope, ARM tenant scope, targetScope tenant Quick peek Open full term page

Storage learning-path-anchor Time-based retention Time-based retention in Azure Blob Storage is an immutability policy that keeps blob data in a write-once, read-many state for a specified retention interval. It can be applied at container or version scope to protect records from modification or deletion until the retention period expires. Blob Storage fundamentals 5 commands Aliases: Time-based retention, time based retention, Azure Time-based retention, Microsoft Learn Time-based retention, immutability policy, WORM retention, immutable blob retention, retention days, container immutability policy Quick peek Open full term page

Databases learning-path-anchor Cosmos DB continuous backup Azure Cosmos DB continuous backup is the backup mode that supports point-in-time restore for supported Cosmos DB resources within a configured retention tier. Azure Cosmos DB fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Analytics learning-path-anchor Databricks metastore The top-level Unity Catalog container for catalogs, schemas, tables, volumes, models, functions, and governance permissions. Databricks intermediate 4 commands Aliases: Unity Catalog metastore, Databricks Unity Catalog metastore, metastore Quick peek Open full term page

Analytics learning-path-anchor Databricks MLflow The managed MLflow experience in Azure Databricks for experiments, runs, metrics, artifacts, model lineage, and MLOps evidence. Databricks fundamentals 4 commands Aliases: MLflow on Databricks, Databricks experiment tracking, MLflow tracking Quick peek Open full term page

Analytics learning-path-anchor Databricks model serving A managed serving endpoint pattern for exposing Databricks models or AI workloads for online inference with operational controls. Databricks intermediate 4 commands Aliases: Databricks Model Serving, serving endpoint, model serving endpoint Quick peek Open full term page

Analytics learning-path-anchor Databricks notebook A collaborative Azure Databricks document for code, SQL, visualizations, exploration, jobs, and ML workflows attached to compute. Databricks fundamentals 4 commands Aliases: Azure Databricks notebook, Databricks workspace notebook, interactive notebook Quick peek Open full term page

Analytics learning-path-anchor Databricks Photon The native vectorized Azure Databricks engine for accelerating eligible SQL, DataFrame, ETL, and streaming workloads. Databricks intermediate 4 commands Aliases: Photon engine, Photon acceleration, Databricks vectorized engine Quick peek Open full term page

Analytics learning-path-anchor Databricks repo A workspace Git integration, now called Git folders, for versioning notebooks and files used in Databricks development and CI/CD. Databricks fundamentals 4 commands Aliases: Databricks Repos, Databricks Git folder, Azure Databricks Git folders, workspace Git folder Quick peek Open full term page

Analytics learning-path-anchor Databricks schema A Unity Catalog namespace under a catalog that groups tables, views, volumes, models, functions, and permissions. Databricks fundamentals 4 commands Aliases: Unity Catalog schema, Databricks database schema, schema in Unity Catalog Quick peek Open full term page

Analytics learning-path-anchor Databricks secret scope A named Databricks collection of secrets used to store credentials and grant controlled read or manage access to workloads. Databricks fundamentals 4 commands Aliases: Databricks secrets scope, secret scope, Azure Databricks secrets Quick peek Open full term page

Analytics learning-path-anchor Databricks SQL warehouse A Databricks SQL compute resource for interactive queries, dashboards, BI tools, and governed analytics workloads. Databricks intermediate 4 commands Aliases: SQL warehouse, Databricks SQL compute, serverless SQL warehouse Quick peek Open full term page

Analytics learning-path-anchor Databricks table A governed Databricks data object, commonly managed, external, or foreign, queried through Unity Catalog and optimized for analytics. Databricks fundamentals 4 commands Aliases: Unity Catalog table, Delta table in Databricks, Databricks managed table Quick peek Open full term page

Containers learning-path-anchor System node pool A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the... Azure Kubernetes Service intermediate 4 commands Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool Quick peek Open full term page

Identity learning-path-anchor System-assigned managed identity A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request... Managed identities intermediate 4 commands Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity Quick peek Open full term page