Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,981 matching terms. Narrow the search to reduce the list.
Monitoring and Observability
premium
Error budget
An error budget is the amount of unreliability a service can consume while still meeting its service level objective over a defined measurement window.
SRE and reliability
intermediate
4 commands
Aliases: error budget
Quick peek
Open full term page
Management and Governance
verified
Reliability recommendation
A reliability recommendation is Azure Advisor guidance that flags a resource or design pattern that could be more resilient.
Azure Advisor
fundamentals
6 commands
Aliases: Advisor reliability recommendation, HighAvailability recommendation, resiliency recommendation
Quick peek
Open full term page
Integration
verified
Receive and delete
Receive and delete is an Azure Service Bus receive mode where the broker considers a message settled as soon as it sends the message to the receiver. If transfer or processing fails afterward, the message is lost instead of being redelivered.
Azure Service Bus
intermediate
5 commands
Aliases: ReceiveAndDelete, receive-and-delete mode, destructive read, at-most-once receive
Quick peek
Open full term page
Integration
verified
Receive-and-delete mode
A integration pattern or service capability in Messaging that helps teams connect services reliably without tightly coupling every component with clearer ownership, safety, and operational context.
Messaging
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Monitoring and Observability
premium
Error rate
Error rate is the proportion of requests, operations, or events that fail compared with the total volume over a defined time window.
Metrics and SRE
fundamentals
4 commands
Aliases: error rate
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks model serving
A managed serving endpoint pattern for exposing Databricks models or AI workloads for online inference with operational controls.
Databricks
intermediate
4 commands
Aliases: Databricks Model Serving, serving endpoint, model serving endpoint
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks secret scope
A named Databricks collection of secrets used to store credentials and grant controlled read or manage access to workloads.
Databricks
fundamentals
4 commands
Aliases: Databricks secrets scope, secret scope, Azure Databricks secrets
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks SQL warehouse
A Databricks SQL compute resource for interactive queries, dashboards, BI tools, and governed analytics workloads.
Databricks
intermediate
4 commands
Aliases: SQL warehouse, Databricks SQL compute, serverless SQL warehouse
Quick peek
Open full term page
Storage
learning-path-anchor
Data Lake storage account
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
advanced
19 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
command-rich
Primary storage region
The primary storage region is the home region for an Azure Storage account. When an application writes blobs, files, queues, or tables under normal conditions, it writes to the primary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically.
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
command-rich
Secondary storage region
The secondary storage region is the other region involved when an Azure Storage account uses geo-redundant options such as GRS or GZRS. Under normal conditions, applications write to the primary region, and Azure asynchronously copies data to the secondary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended..
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Azure Policy
Azure Policy is a governance service for creating, assigning, and managing rules that evaluate Azure resources.
Azure Policy
fundamentals
7 commands
Aliases: Policy
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Spark pool
A Synapse Spark pool is the workspace compute definition Azure Synapse uses to start Apache Spark sessions. It records node size, node count, autoscale behavior, runtime version, packages, and idle timeout so notebooks, Spark jobs, and pipelines get repeatable distributed processing.
Synapse Analytics
fundamentals
8 commands
Aliases: Apache Spark pool, Spark pool, Synapse Apache Spark pool, serverless Spark pool
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace managed identity
A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service...
Synapse Analytics
intermediate
8 commands
Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity
Quick peek
Open full term page
Analytics
premium
Data Factory
Azure’s managed data integration service for creating pipelines that move, transform, schedule, and orchestrate data across cloud, SaaS, and hybrid stores.
Data integration and orchestration
Intermediate
6 commands
Aliases: Data Factory, Data Factory, data factory
Quick peek
Open full term page
Integration
premium
Service Bus
Azure Service Bus is a fully managed enterprise message broker with message queues and publish-subscribe topics. It helps decouple applications and services, load-balance work across competing consumers, route data across boundaries, and coordinate transactional workflows that require reliable messaging, ordering, sessions, duplicate detection, and dead-letter handling.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus, Service Bus Messaging
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry
Create a governed project boundary where AI teams can build agents, evaluations, files, and model deployments without unmanaged sprawl.; Compare, evaluate, and approve model deployments before a generative AI feature is
AI platform
fundamentals
5 commands
Aliases: AI Foundry, Microsoft Foundry, Foundry resource, Foundry project, Azure AI Foundry, azure ai foundry
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Storage
premium
Backup item
A backup item is a protected data source or backup instance in Azure Backup that is associated with a vault, policy, retention settings, and recoverable restore points.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Bicep
Bicep is a domain-specific language for declaratively deploying Azure resources through Azure Resource Manager.
Infrastructure as code
fundamentals
5 commands
Aliases: Azure Bicep
Quick peek
Open full term page
Databases
premium
Cosmos DB account
Design the account boundary for a global application before choosing databases, containers, regions, consistency, and backup mode.; Separate regulated, tenant-specific, or production workloads into dedicated Cosmos DB ac
Database
intermediate
5 commands
Aliases: Cosmos DB account, cosmos db account
Quick peek
Open full term page
Analytics
premium
Data Factory pipeline
A logical grouping of Data Factory activities that performs a coordinated data movement, transformation, or control-flow process.
Data integration and orchestration
Intermediate
5 commands
Aliases: Data Factory pipeline, ADF pipeline, data factory pipeline
Quick peek
Open full term page
Storage
premium
Data Lake directory
A directory in Azure Data Lake Storage Gen2 is a hierarchical namespace path segment that can contain files and child directories and can have access controls applied.
Data Lake Storage Gen2
fundamentals
5 commands
Aliases: ADLS directory, Data Lake folder, Gen2 directory, lake folder
Quick peek
Open full term page
Storage
premium
Data Lake filesystem
Data Lake filesystem is the compact API and CLI naming for the ADLS Gen2 file-system resource that contains directories and files.
Data Lake Storage Gen2
fundamentals
5 commands
Aliases: filesystem, ADLS filesystem, storage fs, Azure storage fs
Quick peek
Open full term page
Storage
premium
Data Lake Gen2 endpoint
A Data Lake Gen2 endpoint is the DFS endpoint on a storage account used by Azure Data Lake Storage Gen2 APIs, ABFS URIs, and hierarchical namespace operations.
Data Lake Storage Gen2
intermediate
5 commands
Aliases: ADLS Gen2 endpoint, DFS endpoint, dfs.core.windows.net endpoint, Data Lake endpoint
Quick peek
Open full term page
Storage
premium
Data Lake gold layer
The Data Lake gold layer is the business-ready medallion layer where curated, aggregated, and governed data is published for analytics, reporting, and decision support.
Medallion lakehouse architecture
intermediate
5 commands
Aliases: gold layer, gold zone, curated business layer, trusted reporting layer
Quick peek
Open full term page
Storage
premium
Data Lake ingestion zone
A Data Lake ingestion zone is the controlled landing area where source data first arrives before validation, transformation, enrichment, or publication.
Data Lake Storage Gen2
fundamentals
5 commands
Aliases: landing zone, raw ingestion zone, lake landing area, ingest zone
Quick peek
Open full term page
Storage
premium
Data Lake namespace
A Data Lake namespace is the hierarchical address space in Azure Data Lake Storage Gen2 that organizes file systems, directories, files, and paths for analytics.
Data Lake Storage Gen2
intermediate
5 commands
Aliases: ADLS namespace, hierarchical namespace, HNS namespace, lake namespace
Quick peek
Open full term page
Storage
premium
Data Lake partition folder
A Data Lake partition folder is a directory pattern, often key=value, that groups files by values such as date, region, tenant, or business domain for efficient reads.
Data Lake Storage Gen2
intermediate
5 commands
Aliases: partition folder, Hive-style partition folder, date partition folder, lake partition path
Quick peek
Open full term page
Storage
premium
Data Lake path ACL
A Data Lake path ACL is the access control list applied to a file or directory path in Azure Data Lake Storage Gen2 for fine-grained permissions.
Data Lake Storage Gen2
intermediate
5 commands
Aliases: ADLS path ACL, Data Lake path access control, path access control list, data-lake-path-ac
Quick peek
Open full term page
Web
premium
host.json
host.json is the Azure Functions metadata file that configures host-level runtime behavior for all functions in a function app.
Azure Functions
intermediate
5 commands
Aliases: host json, host.json
Quick peek
Open full term page
Identity
premium
Object ID
An Object ID is the unique ID for a specific thing inside Microsoft Entra ID. That thing might be a user, group, service principal, managed identity, or enterprise application object. It is not the friendly display name, and it is not always the same as an application client ID. In Azure operations, the Object ID is the value people often need when assigning RBAC roles, checking ownership, troubleshooting identity, or proving exactly which principal was granted access.
Microsoft Entra
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Policy effect
A policy effect is the action Azure Policy takes after a rule matches a resource. The rule asks a question, such as whether a storage account allows public access, and the effect decides the response. Some effects only record a finding, some block the request, some add or change properties, and some deploy supporting settings later. For a learner or operator, the effect is the difference between a policy that warns, a policy that prevents drift, and a policy that actively repairs configuration.
Azure Policy
intermediate
5 commands
Aliases: Policy effect, policy-effect
Quick peek
Open full term page
Management and Governance
premium
Policy initiative
A policy initiative is a bundle of related Azure Policy definitions. Instead of assigning ten separate policies for tags, allowed regions, diagnostics, encryption, and public access, a team can group them into one initiative and assign that package to a scope. It makes a governance baseline easier to deploy, review, and explain. For learners, think of an initiative as a control set: the individual policies still do the checking, but the initiative provides the organized package, shared parameters, and management structure.
Azure Policy
intermediate
5 commands
Aliases: Policy initiative, Policy set definition, policy-initiative
Quick peek
Open full term page
Management and Governance
premium
Policy remediation
Policy remediation is Azure Policy’s controlled repair job for resources that already exist. A deny policy can stop a bad new deployment, but it cannot automatically fix old resources. Remediation is for policies with modify or deployIfNotExists effects, such as adding required tags or deploying missing diagnostic settings. You create a remediation task, Azure finds the affected resources, and the assignment’s managed identity performs the configured change. It is governance automation, but it still needs careful scope, permission, and result review.
Azure Policy
intermediate
5 commands
Aliases: Policy remediation, policy-remediation
Quick peek
Open full term page
Web
premium
Shared App Service tier
The Shared App Service tier is a base App Service plan option where apps run on shared Azure virtual machines and receive CPU-minute quotas. It is intended for development and testing, not production workloads that need dedicated compute, autoscale, or predictable performance isolation.
App Service plans
intermediate
5 commands
Aliases: App Service Shared tier, Shared App Service plan, D1 App Service plan, shared compute App Service, App Service D1
Quick peek
Open full term page
Analytics
premium
Trigger in Data Factory
In Azure Data Factory, a trigger determines when a pipeline run starts. Microsoft Learn describes manual, schedule, tumbling window, storage event, and custom event triggers; each carries timing, state, event, or dependency information that Data Factory uses to create pipeline runs.
Data integration
fundamentals
5 commands
Aliases: Data Factory trigger, ADF trigger, Azure Data Factory trigger, pipeline trigger in Data Factory
Quick peek
Open full term page
Storage
premium
Trusted Microsoft services access
Trusted Microsoft services access is an Azure Storage firewall exception that allows selected Azure services to reach a restricted storage account when their service traffic cannot be represented by virtual network or IP rules. The services still authenticate and must be allowed for supported operations.
Azure Storage
intermediate
5 commands
Aliases: trusted Azure services access, AzureServices bypass, allow trusted Microsoft services, storage trusted services access
Quick peek
Open full term page
Analytics
premium
Tumbling window
In Azure Stream Analytics, a tumbling window groups events into fixed-size, non-overlapping, contiguous time intervals. Each event belongs to only one window, making the function useful for periodic aggregations such as counts, averages, totals, or alerts over live streaming data.
Stream Analytics
intermediate
5 commands
Aliases: TumblingWindow, TUMBLINGWINDOW, tumbling window function, fixed non-overlapping window
Quick peek
Open full term page
Analytics
premium
Tumbling window trigger
A tumbling window trigger in Azure Data Factory fires at a recurring interval from a configured start time while retaining state. Microsoft Learn describes it as a fixed, non-overlapping window trigger with one-to-one pipeline association and optional dependencies between windows.
Data Factory
fundamentals
5 commands
Aliases: TumblingWindowTrigger, ADF tumbling window trigger, Data Factory tumbling window trigger, stateful window trigger
Quick peek
Open full term page
Management and Governance
premium
What-if deployment
A what-if deployment is a preview of changes Azure Resource Manager predicts from an ARM template or Bicep file before deployment. It shows which resources would be created, modified, ignored, or deleted without applying changes, helping teams review infrastructure impact before execution.
Infrastructure as code
fundamentals
5 commands
Aliases: ARM what-if deployment, Bicep what-if deployment, deployment preview
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL CETAS
Synapse SQL CETAS means CREATE EXTERNAL TABLE AS SELECT. It creates external table metadata and exports the result of a T-SQL SELECT statement in parallel to files in Azure Storage or Azure Data Lake Storage Gen2 for later SQL or lake consumption.
Synapse Analytics
fundamentals
6 commands
Aliases: CREATE EXTERNAL TABLE AS SELECT, CETAS, Synapse CETAS, serverless SQL CETAS
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL external table
A Synapse SQL external table is database metadata that lets Synapse SQL query files stored outside the database, usually in Azure Storage or ADLS Gen2. It references an external data source, file format, and file location for governed SQL analytics.
Synapse Analytics
fundamentals
6 commands
Aliases: external table in Synapse, Synapse external table, SQL external table, external table over lake files
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL on-demand
Synapse SQL on-demand is the serverless SQL pool model in Azure Synapse Analytics. It lets teams run T-SQL queries over data in the lake without provisioning dedicated warehouse capacity, storing only metadata objects while using external data sources, views, functions, and security objects.
Synapse Analytics
fundamentals
6 commands
Aliases: SQL on-demand, Synapse serverless SQL, serverless SQL in Synapse, built-in serverless SQL pool
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Studio
Synapse Studio is the browser-based workspace experience for Azure Synapse Analytics. It exposes hubs for data, development, integration, monitoring, and management, letting users author notebooks and SQL scripts, build pipelines, configure connections, review access, and work with Git-backed or live artifacts.
Synapse Analytics
fundamentals
6 commands
Aliases: Azure Synapse Studio, Synapse web workspace, Synapse workspace UI, Synapse authoring experience
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace firewall
A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It...
Synapse Analytics
intermediate
6 commands
Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall
Quick peek
Open full term page
Storage
learning-path-anchor
Sync group
A sync group is the container that tells Azure File Sync which cloud file share and which Windows Server folders should stay synchronized. Think of it as one file namespace with a hub in Azure and one or more on-premises or edge locations attached to it. If two groups represent different shares or business...
Files, queues, and tables
fundamentals
6 commands
Aliases: Azure File Sync group, file sync group, sync topology, storage sync group
Quick peek
Open full term page
Management and Governance
premium
Advisor score
Advisor score is an Azure Advisor percentage score that summarizes how closely resources follow recommended best practices. In everyday Azure work, teams use it to measure improvement across cost, reliability, security, performance, and operational excellence recommendations. The useful evidence is overall score, category score, impacted resource count, potential score increase, date, aggregation level, and filtered
Azure Advisor
fundamentals
4 commands
Aliases: Azure Advisor score, best practices score, cloud optimization score
Quick peek
Open full term page
Databases
premium
Autovacuum
Autovacuum is the PostgreSQL maintenance process in Azure Database for PostgreSQL that removes dead row versions and refreshes optimizer statistics without a person running VACUUM by hand. In Azure, teams encounter it when Flexible Server tables receive frequent inserts, updates, and deletes, especially in systems that retain large transactional history. The useful question is what
PostgreSQL
intermediate
4 commands
Aliases: PostgreSQL autovacuum, Azure PostgreSQL autovacuum, autovacuum tuning
Quick peek
Open full term page
Monitoring and Observability
premium
Availability result
Availability result is the recorded outcome of an Application Insights availability test run, including whether the probe succeeded, how long it took, and where it ran. In Azure, teams encounter it when teams query Azure Monitor Logs after a synthetic web test reports failures, slow responses, or regional differences. The useful question is what behavior
Availability
intermediate
4 commands
Aliases: AppAvailabilityResults, availability test result, Application Insights availability result
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search