Search Azure terms

Security premium Key Vault Azure Key Vault is a cloud service for storing and controlling access to secrets, keys, and certificates. It helps applications, administrators, and automation protect sensitive values with encryption, access control, logging, purge protection, private networking, and managed integration across Azure workloads. Secrets and keys Fundamentals 5 commands Aliases: Key Vault, Azure Key Vault, vault, secrets store, certificate vault, secure secrets store, key vault resource Quick peek Open full term page

Security premium Key Vault access policy Key Vault access policy controls which identities can read, write, list, delete, recover, sign, unwrap, or manage Key Vault objects when the vault uses policy-based access. Teams see it in key vault access policies blade, secret permissions. It is not Azure RBAC for Key Vault, a network firewall rule, a secret value, a certificate policy, or an application setting; confusing them can create overprivileged identities, broken secret retrieval. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Secrets and keys Intermediate 5 commands Aliases: access policy, vault access policy, Key Vault policy permissions, data-plane access policy Quick peek Open full term page

Security premium Secret A secret is sensitive data that Azure Key Vault stores and controls, such as a password, API key, token, or connection string. Secrets have names, values, versions, metadata, and access controls, and Key Vault encrypts them at rest through audited operations. Secrets and keys fundamentals 5 commands Aliases: Azure secret, Key Vault secret, secret value, application secret, stored credential Quick peek Open full term page

Security premium Certificate A certificate is an X.509 object used for TLS, authentication, or cryptographic operations. Secrets and keys fundamentals 2 commands Aliases: No aliases yet Quick peek Open full term page

Security verified Purge protection Purge protection is a safety lock for Azure Key Vault. Secrets and keys fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Security premium field-manual Managed HSM Managed HSM is a fully managed, single-tenant hardware security module service for storing and using cryptographic keys. Teams use it when regulated workloads require hardware-backed keys, strong isolation, controlled key operations, and auditable administration. In plain English, it gives operators a named control for stronger key governance, compliance evidence, and separation of duties for cryptographic operations instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Key management intermediate 3 commands Aliases: Managed HSM, Azure Key Vault Managed HSM, Key management Quick peek Open full term page

Databases verified Redis access keys The primary and secondary key pair used for key-based authentication to an Azure Redis cache when that mode is enabled. Cache and in-memory data fundamentals 7 commands Aliases: No aliases yet Quick peek Open full term page

Databases verified Redis keyspace Redis keyspace is the live set of keys, values, expirations, and metadata inside a Redis database. In Azure Redis services, it shows up through database selection, key naming, TTL behavior, and optional keyspace notifications that publish events when keys change or expire. Data platform intermediate 5 commands Aliases: Redis namespace, Redis keys, Redis key namespace, keyspace notifications Quick peek Open full term page

Integration verified Receive and delete Receive and delete is an Azure Service Bus receive mode where the broker considers a message settled as soon as it sends the message to the receiver. If transfer or processing fails afterward, the message is lost instead of being redelivered. Azure Service Bus intermediate 5 commands Aliases: ReceiveAndDelete, receive-and-delete mode, destructive read, at-most-once receive Quick peek Open full term page

Integration verified Receive-and-delete mode A integration pattern or service capability in Messaging that helps teams connect services reliably without tightly coupling every component with clearer ownership, safety, and operational context. Messaging fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace managed identity A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service... Synapse Analytics intermediate 8 commands Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity Quick peek Open full term page

Analytics learning-path-anchor Databricks secret scope A named Databricks collection of secrets used to store credentials and grant controlled read or manage access to workloads. Databricks fundamentals 4 commands Aliases: Databricks secrets scope, secret scope, Azure Databricks secrets Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

DevOps premium Service connection Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely. CI/CD fundamentals 6 commands Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection Quick peek Open full term page

Containers premium ACR admin user The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Integration premium Event Grid managed identity delivery Event Grid managed identity delivery is the pattern where Event Grid uses a managed identity on a topic, domain, or system topic to authenticate event delivery to supported destinations. In Azure, it shows up when teams want to deliver events to Azure destinations without storing destination keys or embedding secrets in event subscription configuration. Teams use it to review system-assigned or user-assigned identity, Event Grid topic or domain identity settings, destination RBAC role assignments, delivery identity settings, dead-letter identity settings, and monitoring before changing production behavior. Event routing advanced 5 commands Aliases: Event Grid managed identity event delivery, managed identity delivery for Event Grid Quick peek Open full term page

Security premium Key Key controls how protected workloads use cryptographic material for encryption, signing, key wrapping, customer-managed keys, and regulated data protection. Teams see it in key vault keys, managed hsm keys. It is not a password, secret value, certificate, storage account key, shared access signature, or application configuration setting; confusing them can create failed encryption operations, accidental key deletion. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Secrets and cryptography Fundamentals 5 commands Aliases: Azure Key Vault key, cryptographic key, key object, encryption key Quick peek Open full term page

Compute premium Host key Host key is an Azure Functions access key scoped to the function app host that can authorize requests to multiple HTTP-triggered functions. Azure Functions beginner 4 commands Aliases: Azure Functions host key, function app host key, Host key, host-key Quick peek Open full term page

Integration premium Logic Apps managed identity A Logic Apps managed identity is the Microsoft Entra identity assigned to a Logic Apps workflow or Standard logic app resource so the workflow can authenticate to supported Azure resources without storing passwords, shared keys, or long-lived secrets in governed production environments. Azure Logic Apps intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Integration premium Service Bus SAS policy A Service Bus SAS policy is a shared access authorization rule on a namespace, queue, or topic. It defines rights such as Send, Listen, or Manage and provides keys used to create shared access signature tokens or connection strings. for controlled access. Service Bus fundamentals 4 commands Aliases: Azure Service Bus SAS policy, Service Bus shared access policy, Service Bus authorization rule Quick peek Open full term page

Databases learning-path-anchor Synthetic partition key A synthetic partition key is a partition key value you create because no single natural field distributes Cosmos DB data well enough. For example, tenantId alone may create one huge tenant partition, while date alone may concentrate today's traffic. A synthetic key might combine tenant, region, and date bucket into one stored value that... Cosmos DB intermediate 5 commands Aliases: generated partition key, composite partition key value, calculated partition key, synthetic key Quick peek Open full term page

AI and Machine Learning learning-path-anchor System message A system message is the instruction layer that tells an Azure OpenAI chat model how it should behave before it answers the user's request. It can define the assistant's role, tone, allowed sources, formatting rules, safety boundaries, and refusal behavior. It is stronger than an ordinary user message, but it is not magic and... Azure OpenAI fundamentals 5 commands Aliases: system prompt, metaprompt, developer instruction, assistant instruction Quick peek Open full term page

Storage learning-path-anchor Table Storage Table Storage is Azure Storage for simple structured NoSQL records. You create tables, store entities, and identify each entity with a PartitionKey and RowKey. It is useful when the data is large, sparse, inexpensive to keep, and usually accessed by known keys. It is not a relational database, search engine, or analytics warehouse. The best fit is operational data that can be denormalized, read directly, updated independently, and kept cheap without requiring joins, stored procedures, or secondary indexes. Table Storage fundamentals 5 commands Aliases: Azure Table Storage, Storage Tables, Azure Storage Tables, Azure Tables storage Quick peek Open full term page

AI and Machine Learning premium AI service key An AI service key is a secret access key for an Azure AI service resource. Clients pass it, commonly with the Ocp-Apim-Subscription-Key header, to authenticate API requests when key-based authentication is used. Azure AI services fundamentals 3 commands Aliases: Azure AI service key, Cognitive Services key, Ocp-Apim-Subscription-Key, resource key Quick peek Open full term page

AI and Machine Learning premium Cognitive services account key A key used to authenticate to an Azure AI services resource. AI platform and search intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Security premium Managed identity for data access Managed identity for data access is the pattern of using a managed identity to let a workload read or write data without embedded secrets. Teams use it when pipelines, applications, jobs, or analytics services need secure access to storage, databases, or other data services. In plain English, it gives operators a named control for least-privilege data access, reduced secret exposure, and cleaner audit trails instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data access security intermediate 3 commands Aliases: Managed identity for data access, Microsoft Entra ID, Data access security Quick peek Open full term page

Databases learning-path-anchor Table A table is the basic place where structured data lives in a database. Each row is one record, and each column describes one attribute, such as customer ID, order date, amount, or status. In Azure, tables show up in Azure SQL Database, SQL Managed Instance, Synapse dedicated SQL pools, Fabric warehouses, PostgreSQL, MySQL, and... Database intermediate 4 commands Aliases: database table, SQL table, relational table, data table Quick peek Open full term page

AI and Machine Learning learning-path-anchor Text to speech Text to speech in Azure AI Speech converts written text or SSML into synthesized audio using neural voices, custom voice options, language support, and APIs. Teams use it to add spoken responses to apps, contact centers, accessibility tools, devices, and media workflows while governing region, keys, networking, and quota. Azure AI services fundamentals 4 commands Aliases: Text to speech, text to speech, Azure Text to speech, Microsoft Learn Text to speech, TTS, speech synthesis, Azure AI Speech synthesis, neural voices, SSML speech Quick peek Open full term page

Databases learning-path-anchor Time to live Time to live in Azure Cosmos DB automatically expires items after a configured number of seconds. TTL can be set at the container level and overridden per item, helping teams remove stale operational data, limit storage growth, and keep queries focused on current records. Azure Cosmos DB intermediate 4 commands Aliases: Time to live, time to live, Azure Time to live, Microsoft Learn Time to live, TTL, Cosmos DB TTL, defaultTtl, item expiration, container TTL Quick peek Open full term page

Databases learning-path-anchor Cosmos DB emulator The Azure Cosmos DB emulator provides a local environment that emulates Azure Cosmos DB for development and testing without requiring a cloud account. Azure Cosmos DB fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Change feed processor A database capability or setting in Azure Cosmos DB that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context. Azure Cosmos DB fundamentals 15 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Conflict resolution policy the container-level Cosmos DB setting that defines how write conflicts are resolved when more than one region can update the same data Cosmos DB intermediate 15 commands Aliases: No aliases yet Quick peek Open full term page

Databases verified Redis access key A single primary or secondary secret used by Redis clients when key-based authentication is enabled for an Azure Redis cache. Cache intermediate 7 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning command-rich Search admin key A search admin key is one of the generated API keys for an Azure AI Search service that allows full read-write data-plane access. It can create, update, or delete indexes, indexers, data sources, and documents, so it must be protected, rotated, and replaced with role-based access when possible. Azure AI Search fundamentals 5 commands Aliases: Azure AI Search admin key, search service admin key, Azure Search API admin key, primary admin key, secondary admin key Quick peek Open full term page

Security field-manual-complete Least privilege data access Microsoft Learn describes least privilege as granting users and applications only the data and operations required to do their jobs. In Azure data access, that means scoped roles, managed identities, limited secrets, network controls, and reviewable permissions instead of broad owner-style access. Data operations intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning verified Query key A query key is a safer API key for applications that only need to search an Azure AI Search index. Azure AI Search fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Storage key rotation The controlled process of moving clients to one storage account key while regenerating the other key. Storage security intermediate 5 commands Aliases: storage account key rotation, rotate storage keys, regenerate storage account keys, Azure Storage access key rotation, Azure Storage key rotation, rotate storage account keys, regenerate storage account access key Quick peek Open full term page

Identity field-manual-complete Token A token is a security credential issued by Microsoft Entra ID or another identity provider to carry claims about an authenticated user, application, or workload. Azure services use access tokens to authorize requests to specific resources without sending passwords on each call. Authentication fundamentals 5 commands Aliases: access token, bearer token, security token, OAuth token, Entra token Quick peek Open full term page

Storage field-manual-complete User delegation SAS A user delegation SAS is a shared access signature for Azure Blob Storage that is secured with Microsoft Entra credentials instead of the storage account key. It grants limited, time-bound access to blob or container resources using a user delegation key. Blob Storage intermediate 5 commands Aliases: Entra-backed SAS, Azure AD SAS, user delegation shared access signature, delegation SAS Quick peek Open full term page

Databases command-rich Cosmos DB for Apache Cassandra Azure Cosmos DB for Apache Cassandra is a managed NoSQL database service that supports Cassandra workloads using CQL, drivers, and compatible tooling. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases command-rich Cosmos DB for Apache Gremlin Azure Cosmos DB for Apache Gremlin is a managed graph database service for storing, querying, and traversing graph data with the Gremlin language. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI resource An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context. Azure OpenAI fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Computer Vision the Azure AI capability that helps applications understand images, read text, detect visual features, and return structured insights from pictures or screenshots Azure AI services fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

Web premium field-manual Master key A master key is a database-level symmetric key used to protect certificates, private keys, and credentials inside SQL databases. Teams use it when SQL objects need encrypted secrets or credentials for secure database operations. In plain English, it gives operators a named control for structured key protection, credential security, and auditable database encryption dependencies instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure Functions access keys intermediate 4 commands Aliases: Master key, _master key, Azure Functions master key, Functions admin key, Functions master key, admin host key, Azure Functions, Azure Functions access keys Quick peek Open full term page

Web complete Slot setting Microsoft Learn describes deployment slot settings in Azure App Service as app settings or connection strings marked as slot-specific so they stay with their deployment slot during a swap. They protect values such as database endpoints, feature flags, secrets, and instrumentation keys that must not move between staging and production. App Service intermediate 4 commands Aliases: Deployment slot setting, sticky setting, slot-specific setting, sticky app setting Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Service Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls. Generative AI fundamentals 11 commands Aliases: Azure OpenAI Quick peek Open full term page

Databases premium Dedicated gateway Dedicated gateway is documented by Microsoft as part of the Azure Cosmos DB area in Azure. Azure Cosmos DB intermediate 11 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Locally redundant storage Microsoft Learn describes locally redundant storage as Azure Storage redundancy that replicates data within the primary region in a local storage scale unit. LRS is the lowest-cost redundancy option and provides high durability, but it does not protect against regional disasters. Azure Storage intermediate 10 commands Aliases: LRS Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Azure OpenAI provides OpenAI model capabilities through Azure resources, deployments, identity, networking, quota, and monitoring controls. Azure OpenAI intermediate 8 commands Aliases: Azure OpenAI Service Quick peek Open full term page

Databases premium Cosmos DB physical partition Cosmos DB physical partition means a fully managed internal storage and compute partition that hosts ranges of logical partition keys in Azure Cosmos DB. In plain English, it is the thing developers and operators check when they need to understand how data access really works. It connects the application model to automatic scale-out, replica placement, RU distribution, and operational signals such as hot partition diagnostics. For a production team, it turns vague database talk into a specific thing to inspect in the portal, SDK code, templates, metrics, and incident notes. Azure Cosmos DB intermediate 7 commands Aliases: No aliases yet Quick peek Open full term page