Search Azure terms

Identity field-manual-complete Security group A security group is a named set of identities that receive access together. Identity operations fundamentals 4 commands Aliases: Microsoft Entra security group, Entra security group, access group Quick peek Open full term page

Security field-manual-complete Security recommendation A security recommendation is a prioritized instruction from Microsoft Defender for Cloud that says, in effect, this resource has a security problem worth reviewing. Cloud security posture fundamentals 4 commands Aliases: Defender for Cloud recommendation, cloud security recommendation, security assessment Quick peek Open full term page

Networking premium Network Security Group Network Security Group means an Azure rule set that filters inbound and outbound network traffic for subnets or network interfaces. You see it when teams restrict application ports, isolate workloads, permit administration, block unwanted traffic, or document network segmentation. Think of it as a prioritized traffic filter near the workload, not complete application security. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Network security fundamentals 5 commands Aliases: NSG Quick peek Open full term page

Networking premium Application security group An application security group lets you group virtual machine network interfaces so network security group rules can target application roles instead of explicit IP addresses. Network security fundamentals 2 commands Aliases: ASG, application security group Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL on-demand Synapse SQL on-demand is the serverless SQL pool model in Azure Synapse Analytics. It lets teams run T-SQL queries over data in the lake without provisioning dedicated warehouse capacity, storing only metadata objects while using external data sources, views, functions, and security objects. Synapse Analytics fundamentals 6 commands Aliases: SQL on-demand, Synapse serverless SQL, serverless SQL in Synapse, built-in serverless SQL pool Quick peek Open full term page

Analytics learning-path-anchor Synapse Studio Synapse Studio is the browser-based workspace experience for Azure Synapse Analytics. It exposes hubs for data, development, integration, monitoring, and management, letting users author notebooks and SQL scripts, build pipelines, configure connections, review access, and work with Git-backed or live artifacts. Synapse Analytics fundamentals 6 commands Aliases: Azure Synapse Studio, Synapse web workspace, Synapse workspace UI, Synapse authoring experience Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace firewall A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It... Synapse Analytics intermediate 6 commands Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall Quick peek Open full term page

Databases learning-path-anchor Cosmos DB continuous backup Azure Cosmos DB continuous backup is the backup mode that supports point-in-time restore for supported Cosmos DB resources within a configured retention tier. Azure Cosmos DB fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases learning-path-anchor Table A table is the basic place where structured data lives in a database. Each row is one record, and each column describes one attribute, such as customer ID, order date, amount, or status. In Azure, tables show up in Azure SQL Database, SQL Managed Instance, Synapse dedicated SQL pools, Fabric warehouses, PostgreSQL, MySQL, and... Database intermediate 4 commands Aliases: database table, SQL table, relational table, data table Quick peek Open full term page

Databases learning-path-anchor Cosmos DB dedicated gateway Azure Cosmos DB dedicated gateway is provisioned server-side compute that fronts an account and enables the integrated cache for supported NoSQL workloads. Azure Cosmos DB fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Databases learning-path-anchor Cosmos DB emulator The Azure Cosmos DB emulator provides a local environment that emulates Azure Cosmos DB for development and testing without requiring a cloud account. Azure Cosmos DB fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Analytics command-rich Synapse workspace A Synapse workspace is the main container where a team builds and operates Azure Synapse Analytics. It gives the team one named place for SQL pools, Spark pools, pipelines, notebooks, linked services, access rules, monitoring, and the connection to the default data lake. The workspace is not just a folder in the portal; it... Analytics platform fundamentals 9 commands Aliases: Azure Synapse workspace, Synapse Analytics workspace, workspace in Azure Synapse, Synapse analytics boundary Quick peek Open full term page

Databases command-rich Cosmos DB for Apache Cassandra Azure Cosmos DB for Apache Cassandra is a managed NoSQL database service that supports Cassandra workloads using CQL, drivers, and compatible tooling. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases command-rich Cosmos DB for Apache Gremlin Azure Cosmos DB for Apache Gremlin is a managed graph database service for storing, querying, and traversing graph data with the Gremlin language. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases command-rich Cosmos DB for PostgreSQL Azure Cosmos DB for PostgreSQL is a managed PostgreSQL service with Citus distributed tables, currently on a retirement path and not recommended for new projects. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases command-rich Cosmos DB for Table Azure Cosmos DB for Table is a managed NoSQL key-value and table API compatible with Azure Table storage SDKs and tools. Data platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI resource An Azure OpenAI resource is the Azure control-plane boundary that hosts deployments, endpoints, access, networking, and billing context. Azure OpenAI fundamentals 12 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI Service Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls. Generative AI fundamentals 11 commands Aliases: Azure OpenAI Quick peek Open full term page

Management and Governance premium Azure Policy Azure Policy is a governance service for creating, assigning, and managing rules that evaluate Azure resources. Azure Policy fundamentals 7 commands Aliases: Policy Quick peek Open full term page

Management and Governance premium Azure subscription An Azure subscription is a management, billing, and scale unit for Azure resources. Azure scope fundamentals 7 commands Aliases: subscription Quick peek Open full term page

Analytics premium Synapse workspace package A Synapse workspace package is a library file stored at the workspace level so Spark workloads can use custom code or pinned dependencies. Instead of downloading a library manually in every notebook, the team uploads a wheel, JAR, or R package archive and attaches it to Spark pools that need it. This is helpful... Synapse Analytics fundamentals 7 commands Aliases: Synapse workspace library, Synapse Spark workspace package, workspace package file, Synapse custom Spark package Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Databases premium Azure Managed Redis Azure Managed Redis is a Microsoft-managed in-memory data store based on Redis Enterprise, used for low-latency caching, session storage, messaging, and semantic cache scenarios. Managed cache intermediate 6 commands Aliases: Managed Redis, Redis Enterprise on Azure, Azure Redis Enterprise Quick peek Open full term page

Analytics premium Azure Synapse Analytics Azure Synapse Analytics is Microsoft’s integrated analytics service for enterprise data warehousing, big data, data integration, and exploratory analytics. Synapse Analytics intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Cosmos DB logical partition Cosmos DB logical partition means the group of items in a container that share the same partition key value. It is the practical label operators use when they decide how application data should be modeled, queried, protected, and monitored in Azure Cosmos DB. In plain English, it explains where developers, platform engineers, and support teams meet: the application wants fast data access, while the platform controls scale, cost, security, and recovery. A good glossary entry helps the team know which setting to inspect, which owner to involve, and which symptoms prove the design works. Azure Cosmos DB intermediate 6 commands Aliases: Azure Cosmos DB logical partition, cosmos db logical partition Quick peek Open full term page

Analytics premium Data Factory Azure’s managed data integration service for creating pipelines that move, transform, schedule, and orchestrate data across cloud, SaaS, and hybrid stores. Data integration and orchestration Intermediate 6 commands Aliases: Data Factory, Data Factory, data factory Quick peek Open full term page

Storage premium Data Lake analytics workload A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric. Data Lake Storage Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Databricks cluster policy A Databricks governance object that limits which cluster settings users can choose, helping control cost, security, runtime consistency, and workload standards. Azure Databricks intermediate 6 commands Aliases: Databricks compute policy, cluster policy, compute policy Quick peek Open full term page

Networking premium DDoS Protection Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities. Network security intermediate 6 commands Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection Quick peek Open full term page

Analytics premium Expression language Expression language is the Azure Data Factory and Azure Synapse syntax used to build dynamic values, parameters, conditions, and function calls inside pipeline definitions. Teams use it to make pipeline paths, dates, conditions, parameters, linked-service values, and activity settings change at runtime instead of being hard-coded. It is not general programming code, a SQL dialect, a security boundary, or a guarantee that dynamic values are valid for every dataset and trigger context. In production, confirm expression syntax, parameter names, variable scope, activity output references, trigger metadata, evaluated values, published JSON, debug runs, run IDs, and downstream paths or queries before. Data Factory intermediate 6 commands Aliases: ADF expression language, Data Factory expression language, pipeline expression language, dynamic content Quick peek Open full term page

Networking premium ExpressRoute ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before. Hybrid connectivity intermediate 6 commands Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity Quick peek Open full term page

Containers premium External ingress External ingress in Azure Container Apps allows traffic from outside the Container Apps environment to reach a container app endpoint. Teams use it to publish a container app to callers outside the environment, including users, APIs, webhooks, partners, or front-end gateways that need a reachable HTTPS or TCP endpoint. It is not internal-only ingress, a custom domain certificate, a network security guarantee, or proof that authentication, authorization, rate limits, and backend health are configured correctly. Azure Container Apps intermediate 6 commands Aliases: external Container Apps ingress, public ingress, internet-facing ingress Quick peek Open full term page

AI and Machine Learning premium Facetable field A Facetable field is an Azure AI Search index field marked so the service can return facet buckets, counts, or filter choices for query results. Teams use it to let search applications show refiners such as category, brand, location, date range, status, or price band without scanning and counting results in application code. It is not a full-text analyzer, vector field setting, ranking rule, security trim, or proof that every facet value is clean, useful, or safe to expose to users. Azure AI Search intermediate 6 commands Aliases: Azure AI Search facetable field, facetable index field, facet-enabled field, facetable attribute Quick peek Open full term page

Containers premium Flux extension The Flux extension is the microsoft.flux Kubernetes cluster extension for Azure Kubernetes Service or Azure Arc-enabled Kubernetes that installs Flux v2 controllers for GitOps reconciliation. Teams use it to sync Git, OCI, Helm, or Kustomize sources to Kubernetes clusters so desired configuration is versioned, reconciled, audited, and applied consistently across AKS and Arc-enabled environments. It is not a CI pipeline by itself, a replacement for cluster security, a guarantee that every manifest is safe, or a reason to let unreviewed repository changes modify production clusters. Kubernetes GitOps intermediate 6 commands Aliases: microsoft.flux extension, GitOps Flux extension, AKS Flux extension, Azure Arc Flux extension Quick peek Open full term page

Databases premium Foreign key A foreign key is a column or set of columns that links rows in one table to key values in another table and helps enforce referential integrity. Teams use it to keep child records such as orders, invoices, payments, devices, or claim lines tied to valid parent records instead of allowing orphaned data to silently enter the database. It is not an index by itself, a security boundary, a substitute for business validation, or an enforced guarantee in every Azure analytics engine that can store a declared relationship. Relational database intermediate 6 commands Aliases: FK, foreign key constraint, referential constraint, SQL foreign key Quick peek Open full term page

AI and Machine Learning premium Foundry Agent A Foundry Agent is an AI agent built or hosted in Microsoft Foundry Agent Service with instructions, model selection, tools, knowledge, and runtime execution evidence. Teams use it to automate business tasks that require model reasoning, tool calls, enterprise knowledge, workflow steps, retrieval, approvals, and observable runs inside a governed Azure AI platform. It is not a magic autonomous worker, a security principal by itself, a replacement for process controls, or a safe production feature without tool permissions, evaluation, monitoring, and human escalation. Microsoft Foundry intermediate 6 commands Aliases: Microsoft Foundry agent, Foundry Agent Service agent, AI agent in Foundry, agent service agent Quick peek Open full term page

AI and Machine Learning premium Foundry hub A Foundry hub is a hub-style Microsoft Foundry resource used in selected scenarios to group AI projects with shared security, connections, data access, and governance settings. Teams use it to organize related AI projects that need common connections, managed identities, network controls, storage, security review, and platform governance across teams or application portfolios. It is not a whole Azure tenant, a model deployment by itself, a replacement for project-level permissions, or the required resource shape for every modern Foundry scenario. Microsoft Foundry intermediate 6 commands Aliases: Azure AI Foundry hub, Foundry hub resource, hub-based project, AI hub Quick peek Open full term page

Storage premium Service endpoint for Storage A service endpoint for Storage enables the Microsoft.Storage endpoint on a virtual network subnet and pairs it with storage account network rules. It lets workloads in that subnet reach Azure Storage over the Microsoft backbone while the account firewall allows only approved virtual network sources. Storage platform intermediate 6 commands Aliases: Azure Storage VNet rule, Microsoft.Storage service endpoint, Service endpoint for Storage, Storage service endpoint, service endpoint for storage, service-endpoint-for-storage Quick peek Open full term page

Networking premium Web Application Firewall Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting. Application security fundamentals 6 commands Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF Quick peek Open full term page

Compute premium Accelerated networking for VM Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads. Virtual Machines intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Account SAS An account SAS is a powerful storage access token signed with the account key. It can grant limited access across multiple storage services, but because it is key-based and hard to audit, keep permissions narrow and expiry short. Blob Storage fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium ACR admin user The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium ACR quarantine policy ACR quarantine policy is a safety gate for images. Newly pushed images can be hidden from normal users until security scanning or approval clears them, reducing the chance that unreviewed images are pulled into workloads. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Containers premium API server authorized IP ranges API server authorized IP ranges are an AKS security setting that limits who can reach the Kubernetes control-plane endpoint. Instead of letting any public IP attempt a connection to the API server, the cluster allows only specified public CIDR ranges, such as corporate VPN, jump-host, automation,. Azure Kubernetes Service intermediate 5 commands Aliases: AKS API server authorized IP ranges, authorized API server IP ranges Quick peek Open full term page

Web premium App Service Environment v3 App Service Environment v3 is the current App Service Environment generation for single-tenant, dedicated App Service hosting with simplified networking and high-scale isolated workloads. App Service isolation intermediate 5 commands Aliases: Azure App Service Environment v3, app service environment v3 Quick peek Open full term page

Web premium App Service Hybrid Connections App Service Hybrid Connections let an App Service app make outbound TCP connections to a specific host and port in another network through Azure Relay. App Service networking intermediate 5 commands Aliases: Azure App Service Hybrid Connections, app service hybrid connections Quick peek Open full term page

Web premium App Service Linux worker An App Service Linux worker is the Linux-based App Service compute instance that runs an app using a built-in Linux runtime stack or custom container. App Service runtime intermediate 5 commands Aliases: Azure App Service Linux worker, app service linux worker Quick peek Open full term page

Web premium App Service restore App Service restore is recovering App Service content and supported configuration from an app backup, usually by overwriting an app or restoring into another app or deployment slot. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes. App Service Recovery intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Web premium App Service scale rule App Service scale rule is an autoscale rule or automatic scaling configuration that changes App Service capacity when metric thresholds, schedules, or platform load signals require more or fewer instances. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes. App Service Scaling intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Web premium App Service Windows worker App Service Windows worker is a Windows-based worker instance in an App Service plan that runs Windows App Service apps and shares compute with other apps placed in the same plan. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes. App Service Platform intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page