Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 680 matching terms. Narrow the search to reduce the list.
Storage
complete
Storage account access key
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage access key, account key, shared key, storage key
Quick peek
Open full term page
Storage
complete
Storage account firewall rule
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage firewall rule, Azure Storage network rule, storage account network ACL, storage firewall
Quick peek
Open full term page
Storage
complete
Storage account kind
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage account type, account kind, Azure Storage account type, StorageV2 kind
Quick peek
Open full term page
Storage
complete
Storage account endpoint
Storage account endpoint is documented by Microsoft as part of the Storage accounts area in Azure.
Storage accounts
fundamentals
8 commands
Aliases: storage endpoint, blob endpoint, dfs endpoint, storage service URL
Quick peek
Open full term page
Storage
complete
Storage account failover
Storage account failover is documented by Microsoft as part of the Storage accounts area in Azure.
Storage accounts
advanced
8 commands
Aliases: account failover, storage failover, customer-managed failover, planned storage failover
Quick peek
Open full term page
Storage
field-manual-complete
Storage account trusted services
Storage account trusted services are Azure service exceptions that can pass a storage firewall when selected network access is restricted. They help specific Microsoft services reach storage for approved scenarios, but they do not replace authentication, authorization, logging, private access review, or least-privilege design.
Storage network security
fundamentals
5 commands
Aliases: trusted Microsoft services for storage, AzureServices bypass, storage trusted services exception
Quick peek
Open full term page
Storage
field-manual-complete
Storage analytics logs
Storage Analytics logs are classic Azure Storage logs that record details about successful and failed requests for Blob, Queue, and Table services. They help troubleshoot request-level behavior, but Azure Monitor storage logs are generally preferred for modern monitoring, querying, alerting, and centralized retention.
Storage monitoring
fundamentals
5 commands
Aliases: classic storage logs, Azure Storage Analytics logging, storage request logs
Quick peek
Open full term page
Storage
field-manual-complete
Storage blob service properties
Storage blob service properties are account-level Blob service settings such as delete retention, container soft delete, versioning, change feed, last access tracking, default service version, CORS, and static website options. They shape data protection, browser access, recovery behavior, and operational diagnostics for Blob workloads.
Blob Storage configuration
fundamentals
5 commands
Aliases: Blob service properties, storage account blob service settings, blobServices properties
Quick peek
Open full term page
Storage
field-manual-complete
Storage CORS rule
A storage CORS rule is a service property that tells Azure Storage which browser origins, HTTP methods, request headers, exposed headers, and preflight cache duration are allowed for cross-origin requests. It supports browser applications, but it is not authentication or authorization.
Blob Storage configuration
fundamentals
5 commands
Aliases: Azure Storage CORS, Blob CORS rule, cross-origin rule for storage
Quick peek
Open full term page
Storage
field-manual-complete
Storage customer-managed key
A storage customer-managed key is a key in Azure Key Vault or Managed HSM that a customer controls for Azure Storage encryption at rest. Azure Storage still performs encryption, but the customer manages key ownership, access, rotation, purge protection, and lifecycle accountability.
Storage encryption
fundamentals
5 commands
Aliases: Azure Storage customer-managed key, storage CMK, customer-managed key for storage
Quick peek
Open full term page
Storage
field-manual-complete
Storage data protection
Storage data protection is the set of Azure Storage controls that help recover, retain, and prove integrity for blob data. It includes patterns such as soft delete, container restore, versioning, change feed, point-in-time restore, immutable storage, and operational backup when those features match the workload.
Storage accounts
intermediate
5 commands
Aliases: storage protection, blob data protection, Azure Storage recovery controls, storage recoverability
Quick peek
Open full term page
Storage
field-manual-complete
Storage diagnostic logging
Storage diagnostic logging uses Azure Monitor diagnostic settings and storage service resource logs to record data-plane operations such as reads, writes, deletes, authentication outcomes, latency, and request metadata. Operators can send those logs to Log Analytics, Event Hubs, or storage for investigation, monitoring, and compliance evidence.
Storage accounts
intermediate
5 commands
Aliases: storage logs, storage resource logs, Azure Storage diagnostic settings, storage audit logs
Quick peek
Open full term page
Storage
field-manual-complete
Storage encryption scope
A storage encryption scope is a named Azure Blob Storage encryption boundary that can protect blobs with either Microsoft-managed keys or customer-managed keys. It lets teams apply different encryption key choices to containers or individual blobs inside the same storage account when isolation or compliance requires it.
Storage accounts
intermediate
5 commands
Aliases: blob encryption scope, Azure Storage encryption scope, scoped blob encryption, container encryption scope
Quick peek
Open full term page
Storage
field-manual-complete
Storage endpoint
A storage endpoint is the service URL used to reach an Azure Storage account data service, such as Blob, Data Lake Storage, File, Queue, Table, or static website hosting. Endpoints identify where clients connect, while authorization, firewall rules, DNS, and private endpoints determine whether access succeeds.
Storage platform
intermediate
5 commands
Aliases: storage service endpoint, Azure Storage endpoint, storage account endpoint, storage URL
Quick peek
Open full term page
Storage
field-manual-complete
Storage firewall
A storage firewall is the Azure Storage network security configuration that restricts data-plane access to selected virtual networks, IP ranges, resource instances, private paths, or trusted service exceptions. It controls network reachability to storage services, while identity and authorization still decide whether an allowed request can access data.
Network security
fundamentals
5 commands
Aliases: storage account firewall, Azure Storage firewall, storage network rules, storage network security
Quick peek
Open full term page
Storage
field-manual-complete
Storage firewall network rule
An allow rule that permits selected network sources to reach an Azure Storage account public endpoint.
Storage networking
intermediate
5 commands
Aliases: storage firewall rule, storage account firewall network rule, Azure Storage network ACL rule, storage account network allow rule, Azure Storage firewall network rule, storage account network ACL rule, storage account firewall subnet rule
Quick peek
Open full term page
Storage
field-manual-complete
Storage key rotation
The controlled process of moving clients to one storage account key while regenerating the other key.
Storage security
intermediate
5 commands
Aliases: storage account key rotation, rotate storage keys, regenerate storage account keys, Azure Storage access key rotation, Azure Storage key rotation, rotate storage account keys, regenerate storage account access key
Quick peek
Open full term page
Storage
field-manual-complete
Storage lifecycle management
Policy-based automation that tiers or deletes Azure Blob Storage data as it ages or changes use.
Storage lifecycle
intermediate
5 commands
Aliases: Azure Blob lifecycle management, storage account lifecycle policy, blob lifecycle management policy, storage retention tiering policy
Quick peek
Open full term page
Storage
field-manual-complete
Storage lifecycle rule
One rule in a Blob Storage lifecycle policy that filters blobs and applies tiering or deletion actions.
Storage lifecycle
intermediate
5 commands
Aliases: blob lifecycle rule, Azure Storage lifecycle rule, lifecycle policy rule, storage tiering rule, lifecycle management policy rule
Quick peek
Open full term page
Storage
field-manual-complete
Storage network rule
A storage account network access rule that allows selected sources after public access is restricted.
Storage networking
intermediate
5 commands
Aliases: Azure Storage network rules, storage account network rules, storage network ACLs, storage firewall network access, Azure Storage network rule, storage account network rule, storage network ACL rule
Quick peek
Open full term page
Storage
field-manual-complete
Storage network rules
The selected-network rules that control which sources can reach an Azure Storage account public endpoint.
Storage networking
Intermediate
5 commands
Aliases: storage account network rules, storage firewall rules, storage network ACLs, selected network access, storage account firewall allowlist
Quick peek
Open full term page
Storage
field-manual-complete
Storage private endpoint
A Private Link network interface that lets clients reach one Azure Storage service through a private IP address.
Private networking
Intermediate
5 commands
Aliases: private endpoint for storage, Azure Storage private endpoint, storage Private Link endpoint, private storage access, storage account private link
Quick peek
Open full term page
Storage
field-manual-complete
Storage queue
Azure Queue Storage is a service for storing large numbers of messages that are accessed through authenticated HTTP or HTTPS calls. Microsoft Learn describes queues as a backlog for asynchronous work. A queue belongs to a storage account, can contain millions of messages, and holds messages up to 64 KB and confidently.
Queue Storage
Intermediate
5 commands
Aliases: Azure Queue Storage queue, queue storage queue, storage account queue, Azure storage queue, simple storage queue
Quick peek
Open full term page
Storage
field-manual-complete
Storage Queue message
A single Queue Storage payload that represents work to be processed asynchronously by a consumer.
Queue Storage
Intermediate
5 commands
Aliases: Azure Queue Storage message, queue storage message, storage message, queue payload, asynchronous queue message
Quick peek
Open full term page
Storage
field-manual-complete
Storage redundancy
Azure Storage redundancy stores multiple copies of data to protect against planned and unplanned events. Microsoft Learn describes options for replication within the primary region, geo-replication to a distant secondary region, and read access to replicated data. The choice balances cost, availability, durability, and recovery requirements for operations.
Storage resilience
Intermediate
5 commands
Aliases: Azure Storage redundancy, storage replication, storage account replication, storage redundancy option, storage SKU redundancy
Quick peek
Open full term page
Storage
field-manual-complete
Storage service endpoint
Azure Storage service endpoints are the service-specific URI addresses exposed by a storage account, such as Blob, Queue, Table, File, DFS, and web endpoints. The account name and endpoint form the address clients use, while firewall, private endpoint, DNS, and authentication settings control usable access.
Storage accounts
fundamentals
5 commands
Aliases: Azure Storage endpoint, storage account service endpoint, Blob service endpoint, DFS service endpoint, storage account endpoints
Quick peek
Open full term page
Storage
field-manual-complete
Storage static website
Azure Storage static website hosting lets a general-purpose v2 or BlockBlobStorage account serve static HTML, CSS, JavaScript, and image files from the special $web container. Operators enable the feature, set index and error documents, and then publish content through the account's web endpoint.
Storage accounts
intermediate
5 commands
Aliases: Azure Storage static website, static website hosting for storage, $web container website, storage website endpoint
Quick peek
Open full term page
Storage
field-manual-complete
Storage Sync Service
A Storage Sync Service is the Azure File Sync management resource that represents registered Windows file servers and sync groups. It coordinates cloud endpoints in Azure file shares, server endpoints on Windows Server, cloud tiering, monitoring, and the trust relationship required to synchronize files safely.
Files, queues, and tables
advanced
5 commands
Aliases: Azure Storage Sync Service, Azure File Sync service, storage sync resource, Azure File Sync management service
Quick peek
Open full term page
Storage
field-manual-complete
Storage table
Azure Table Storage is a NoSQL key-attribute store for structured, schemaless entities in tables. Each entity has a PartitionKey and RowKey, and applications design those keys around query and throughput patterns. Tables are useful for metadata, device state, logs, and simple application data at scale.
Table Storage
advanced
5 commands
Aliases: Azure Table Storage table, Azure storage table, table storage table, NoSQL storage table
Quick peek
Open full term page
Storage
complete
Storage account
Microsoft Learn describes an Azure storage account as the resource that contains Azure Storage data objects such as blobs, files, queues, and tables. It provides a unique namespace for data accessible over HTTP or HTTPS, with durability, availability, security, and scalability choices.
Storage account
intermediate
5 commands
Aliases: storage-account, Storage account, Azure Storage account, general-purpose storage account, GPv2 storage account, storage account resource
Quick peek
Open full term page
Storage
complete
Storage account connection string
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage connection string, AzureWebJobsStorage, storage app setting, account connection string
Quick peek
Open full term page
Storage
complete
Storage account diagnostic settings
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage diagnostics, storage logging, Azure Monitor diagnostic settings for storage, resource logs for storage
Quick peek
Open full term page
Storage
complete
Storage account infrastructure encryption
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage infrastructure encryption, Azure Storage double encryption, double encryption for storage, infrastructure-level encryption
Quick peek
Open full term page
Storage
complete
Storage account key
A shared secret that can authorize broad access to a storage account.
Storage platform
intermediate
5 commands
Aliases: storage key, storage account shared key, Azure Storage key, account key
Quick peek
Open full term page
Storage
complete
Storage account lifecycle management
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: blob lifecycle management, storage lifecycle policy, Azure Storage management policy, blob tiering policy
Quick peek
Open full term page
Storage
complete
Storage account metrics
Microsoft Learn lists storage account metrics as Azure Monitor measurements for Microsoft.Storage accounts. They expose signals such as availability, transactions, capacity, latency, ingress, egress, errors, and service-level dimensions so operators can watch storage behavior, alert on problems, and trend usage over time.
Storage accounts
advanced
5 commands
Aliases: Azure Storage metrics, storage metrics, storage account Azure Monitor metrics, Microsoft.Storage metrics
Quick peek
Open full term page
Storage
complete
Storage account minimum TLS
Microsoft Learn describes the storage account minimum TLS setting as the required Transport Layer Security version for requests to Azure Storage. Clients using older TLS versions can be rejected, helping teams enforce stronger encrypted transport for Blob, File, Queue, and Table access.
Storage accounts
fundamentals
5 commands
Aliases: minimum TLS for storage, Azure Storage TLS minimum, storage TLS floor, minimum transport security for storage
Quick peek
Open full term page
Storage
complete
Storage account minimum TLS version
Microsoft Learn identifies minimumTlsVersion as the storage account property that sets the lowest Transport Layer Security version accepted by Azure Storage. Operators configure the value through portal, CLI, PowerShell, templates, or policy to block clients using older TLS versions. settings. consistently. consistently.
Storage accounts
advanced
5 commands
Aliases: minimumTlsVersion, storage minimum TLS version, TLS version setting for storage, Azure Storage TLS version
Quick peek
Open full term page
Storage
complete
Storage account object replication
Microsoft Learn describes object replication for block blobs as asynchronous copying from a source storage account to a destination account. Policies and rules define the source container, destination container, and object selection, with blob versioning and change feed supporting replication behavior.
Storage accounts
advanced
5 commands
Aliases: blob object replication, Azure Storage object replication, OR policy, cross-account blob replication
Quick peek
Open full term page
Storage
complete
Storage account primary endpoint
Microsoft Learn explains that each Azure Storage account exposes service endpoints for supported storage services. The primary endpoint is the main service URL for the account’s primary location, such as Blob, File, Queue, Table, or Data Lake Storage access paths.
Storage accounts
advanced
5 commands
Aliases: primary storage endpoint, primary blob endpoint, storage account service endpoint URL, primary file queue table endpoint
Quick peek
Open full term page
Storage
complete
Storage account private endpoint
A storage account private endpoint connects a storage service to a private IP address in an Azure virtual network. It lets clients reach Blob, File, Queue, Table, DFS, or Web endpoints over Private Link instead of the public internet, with DNS directing traffic privately.
Storage accounts
advanced
5 commands
Aliases: storage private endpoint, Private Link for storage account, storage Private Link endpoint, private storage endpoint
Quick peek
Open full term page
Storage
complete
Storage account public network access
Public network access is the storage account setting that controls whether requests can reach the account through public Azure Storage endpoints. Teams pair it with firewalls, virtual network rules, trusted-services exceptions, and private endpoints to decide whether only private network paths should be allowed.
Storage accounts
advanced
5 commands
Aliases: public access for storage account, storage public network access, storage public endpoint access, publicNetworkAccess
Quick peek
Open full term page
Storage
complete
Storage account redundancy
Storage account redundancy describes how Azure Storage copies data within or across locations to protect against hardware, zone, or regional failure. Options such as LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS trade cost, durability scope, read availability, and recovery behavior.
Storage accounts
advanced
5 commands
Aliases: storage redundancy, storage replication SKU, storage account replication setting, Azure Storage redundancy
Quick peek
Open full term page
Storage
complete
Storage account replication
Storage account replication is the background copy behavior behind a redundancy choice. It determines whether data is replicated only inside one datacenter, across availability zones, or to a paired region, and whether a secondary location can be read during normal operations.
Storage accounts
advanced
5 commands
Aliases: storage replication, storage account redundancy replication, account replication model, Azure Storage replication
Quick peek
Open full term page
Storage
complete
Storage account SAS
A storage account SAS is a signed URI query string that grants limited access to services, resource types, permissions, and time ranges in a storage account. It is useful for controlled delegation, but it must be scoped, time-bounded, protected, and audited like a credential.
Storage accounts
fundamentals
5 commands
Aliases: account SAS, storage SAS token, storage account shared access signature, account shared access signature
Quick peek
Open full term page
Storage
complete
Storage account secondary endpoint
A storage account secondary endpoint is the read-only service URL for data replicated to a paired Azure region when the account uses read-access geo-redundant redundancy. Applications use it for planned read fallback, disaster recovery testing, and latency-aware secondary reads. It appears in account properties and should be tested before incidents.
Storage accounts
advanced
5 commands
Aliases: Storage account secondary endpoint, storage account secondary endpoint, storage-account-secondary-endpoint, storage secondary endpoint, account secondary endpoint, RA-GRS secondary endpoint
Quick peek
Open full term page
Storage
complete
Storage account secure transfer required
Storage account secure transfer required is an account setting that rejects non-secure requests to Azure Storage. When enabled, REST calls must use HTTPS, helping protect authentication material and data in transit from exposure or network interception. It is commonly enabled by default and governed through policy.
Storage accounts
fundamentals
5 commands
Aliases: Storage account secure transfer required, storage account secure transfer required, storage-account-secure-transfer-required, secure transfer required, HTTPS only storage, enableHttpsTrafficOnly
Quick peek
Open full term page
Storage
complete
Storage account SKU
A storage account SKU is the account’s selected service tier and redundancy option, such as Standard_LRS, Standard_ZRS, Standard_GRS, or Premium_LRS. It influences durability, availability, performance characteristics, regional support, and pricing for the account. Engineers review it before creation, migration, and cost optimization.
Storage accounts
intermediate
5 commands
Aliases: Storage account SKU, storage account sku, storage-account-sku, storage SKU, storage account tier, storage redundancy SKU
Quick peek
Open full term page
Storage
complete
Storage account soft delete
Storage account soft delete is a data protection configuration that keeps deleted blobs, containers, or shares recoverable for a defined retention period. It helps teams recover from accidental deletion or overwrite without immediately restoring from backup. Retention days determine how long recovery remains possible.
Storage accounts
intermediate
5 commands
Aliases: Storage account soft delete, storage account soft delete, storage-account-soft-delete, storage soft delete, blob soft delete, container soft delete
Quick peek
Open full term page
Storage
complete
Storage account static website
Storage account static website is a Blob Storage feature that serves HTML, CSS, JavaScript, and image files from the special $web container through a web endpoint. It supports simple static sites without app servers. The endpoint is commonly fronted by CDN or Azure Front Door.
Storage accounts
fundamentals
5 commands
Aliases: Storage account static website, storage account static website, storage-account-static-website, static website hosting, storage static website, $web container
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search