Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 932 matching terms. Narrow the search to reduce the list.
Storage
complete
Storage account
Microsoft Learn describes an Azure storage account as the resource that contains Azure Storage data objects such as blobs, files, queues, and tables. It provides a unique namespace for data accessible over HTTP or HTTPS, with durability, availability, security, and scalability choices.
Storage account
intermediate
5 commands
Aliases: storage-account, Storage account, Azure Storage account, general-purpose storage account, GPv2 storage account, storage account resource
Quick peek
Open full term page
Storage
complete
Storage account access key
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage access key, account key, shared key, storage key
Quick peek
Open full term page
Storage
complete
Storage account firewall rule
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage firewall rule, Azure Storage network rule, storage account network ACL, storage firewall
Quick peek
Open full term page
Storage
complete
Storage account kind
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
10 commands
Aliases: storage account type, account kind, Azure Storage account type, StorageV2 kind
Quick peek
Open full term page
Storage
complete
Storage account endpoint
Storage account endpoint is documented by Microsoft as part of the Storage accounts area in Azure.
Storage accounts
fundamentals
8 commands
Aliases: storage endpoint, blob endpoint, dfs endpoint, storage service URL
Quick peek
Open full term page
Storage
complete
Storage account failover
Storage account failover is documented by Microsoft as part of the Storage accounts area in Azure.
Storage accounts
advanced
8 commands
Aliases: account failover, storage failover, customer-managed failover, planned storage failover
Quick peek
Open full term page
Storage
field-manual-complete
Storage account trusted services
Storage account trusted services are Azure service exceptions that can pass a storage firewall when selected network access is restricted. They help specific Microsoft services reach storage for approved scenarios, but they do not replace authentication, authorization, logging, private access review, or least-privilege design.
Storage network security
fundamentals
5 commands
Aliases: trusted Microsoft services for storage, AzureServices bypass, storage trusted services exception
Quick peek
Open full term page
Storage
complete
Storage account connection string
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage connection string, AzureWebJobsStorage, storage app setting, account connection string
Quick peek
Open full term page
Storage
complete
Storage account diagnostic settings
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage diagnostics, storage logging, Azure Monitor diagnostic settings for storage, resource logs for storage
Quick peek
Open full term page
Storage
complete
Storage account infrastructure encryption
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: storage infrastructure encryption, Azure Storage double encryption, double encryption for storage, infrastructure-level encryption
Quick peek
Open full term page
Storage
complete
Storage account key
A shared secret that can authorize broad access to a storage account.
Storage platform
intermediate
5 commands
Aliases: storage key, storage account shared key, Azure Storage key, account key
Quick peek
Open full term page
Storage
complete
Storage account lifecycle management
A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Storage accounts
advanced
5 commands
Aliases: blob lifecycle management, storage lifecycle policy, Azure Storage management policy, blob tiering policy
Quick peek
Open full term page
Storage
complete
Storage account metrics
Microsoft Learn lists storage account metrics as Azure Monitor measurements for Microsoft.Storage accounts. They expose signals such as availability, transactions, capacity, latency, ingress, egress, errors, and service-level dimensions so operators can watch storage behavior, alert on problems, and trend usage over time.
Storage accounts
advanced
5 commands
Aliases: Azure Storage metrics, storage metrics, storage account Azure Monitor metrics, Microsoft.Storage metrics
Quick peek
Open full term page
Storage
complete
Storage account minimum TLS
Microsoft Learn describes the storage account minimum TLS setting as the required Transport Layer Security version for requests to Azure Storage. Clients using older TLS versions can be rejected, helping teams enforce stronger encrypted transport for Blob, File, Queue, and Table access.
Storage accounts
fundamentals
5 commands
Aliases: minimum TLS for storage, Azure Storage TLS minimum, storage TLS floor, minimum transport security for storage
Quick peek
Open full term page
Storage
complete
Storage account minimum TLS version
Microsoft Learn identifies minimumTlsVersion as the storage account property that sets the lowest Transport Layer Security version accepted by Azure Storage. Operators configure the value through portal, CLI, PowerShell, templates, or policy to block clients using older TLS versions. settings. consistently. consistently.
Storage accounts
advanced
5 commands
Aliases: minimumTlsVersion, storage minimum TLS version, TLS version setting for storage, Azure Storage TLS version
Quick peek
Open full term page
Storage
complete
Storage account object replication
Microsoft Learn describes object replication for block blobs as asynchronous copying from a source storage account to a destination account. Policies and rules define the source container, destination container, and object selection, with blob versioning and change feed supporting replication behavior.
Storage accounts
advanced
5 commands
Aliases: blob object replication, Azure Storage object replication, OR policy, cross-account blob replication
Quick peek
Open full term page
Storage
complete
Storage account primary endpoint
Microsoft Learn explains that each Azure Storage account exposes service endpoints for supported storage services. The primary endpoint is the main service URL for the account’s primary location, such as Blob, File, Queue, Table, or Data Lake Storage access paths.
Storage accounts
advanced
5 commands
Aliases: primary storage endpoint, primary blob endpoint, storage account service endpoint URL, primary file queue table endpoint
Quick peek
Open full term page
Storage
complete
Storage account private endpoint
A storage account private endpoint connects a storage service to a private IP address in an Azure virtual network. It lets clients reach Blob, File, Queue, Table, DFS, or Web endpoints over Private Link instead of the public internet, with DNS directing traffic privately.
Storage accounts
advanced
5 commands
Aliases: storage private endpoint, Private Link for storage account, storage Private Link endpoint, private storage endpoint
Quick peek
Open full term page
Storage
complete
Storage account public network access
Public network access is the storage account setting that controls whether requests can reach the account through public Azure Storage endpoints. Teams pair it with firewalls, virtual network rules, trusted-services exceptions, and private endpoints to decide whether only private network paths should be allowed.
Storage accounts
advanced
5 commands
Aliases: public access for storage account, storage public network access, storage public endpoint access, publicNetworkAccess
Quick peek
Open full term page
Storage
complete
Storage account redundancy
Storage account redundancy describes how Azure Storage copies data within or across locations to protect against hardware, zone, or regional failure. Options such as LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS trade cost, durability scope, read availability, and recovery behavior.
Storage accounts
advanced
5 commands
Aliases: storage redundancy, storage replication SKU, storage account replication setting, Azure Storage redundancy
Quick peek
Open full term page
Storage
complete
Storage account replication
Storage account replication is the background copy behavior behind a redundancy choice. It determines whether data is replicated only inside one datacenter, across availability zones, or to a paired region, and whether a secondary location can be read during normal operations.
Storage accounts
advanced
5 commands
Aliases: storage replication, storage account redundancy replication, account replication model, Azure Storage replication
Quick peek
Open full term page
Storage
complete
Storage account SAS
A storage account SAS is a signed URI query string that grants limited access to services, resource types, permissions, and time ranges in a storage account. It is useful for controlled delegation, but it must be scoped, time-bounded, protected, and audited like a credential.
Storage accounts
fundamentals
5 commands
Aliases: account SAS, storage SAS token, storage account shared access signature, account shared access signature
Quick peek
Open full term page
Storage
complete
Storage account secondary endpoint
A storage account secondary endpoint is the read-only service URL for data replicated to a paired Azure region when the account uses read-access geo-redundant redundancy. Applications use it for planned read fallback, disaster recovery testing, and latency-aware secondary reads. It appears in account properties and should be tested before incidents.
Storage accounts
advanced
5 commands
Aliases: Storage account secondary endpoint, storage account secondary endpoint, storage-account-secondary-endpoint, storage secondary endpoint, account secondary endpoint, RA-GRS secondary endpoint
Quick peek
Open full term page
Storage
complete
Storage account secure transfer required
Storage account secure transfer required is an account setting that rejects non-secure requests to Azure Storage. When enabled, REST calls must use HTTPS, helping protect authentication material and data in transit from exposure or network interception. It is commonly enabled by default and governed through policy.
Storage accounts
fundamentals
5 commands
Aliases: Storage account secure transfer required, storage account secure transfer required, storage-account-secure-transfer-required, secure transfer required, HTTPS only storage, enableHttpsTrafficOnly
Quick peek
Open full term page
Storage
complete
Storage account SKU
A storage account SKU is the account’s selected service tier and redundancy option, such as Standard_LRS, Standard_ZRS, Standard_GRS, or Premium_LRS. It influences durability, availability, performance characteristics, regional support, and pricing for the account. Engineers review it before creation, migration, and cost optimization.
Storage accounts
intermediate
5 commands
Aliases: Storage account SKU, storage account sku, storage-account-sku, storage SKU, storage account tier, storage redundancy SKU
Quick peek
Open full term page
Storage
complete
Storage account soft delete
Storage account soft delete is a data protection configuration that keeps deleted blobs, containers, or shares recoverable for a defined retention period. It helps teams recover from accidental deletion or overwrite without immediately restoring from backup. Retention days determine how long recovery remains possible.
Storage accounts
intermediate
5 commands
Aliases: Storage account soft delete, storage account soft delete, storage-account-soft-delete, storage soft delete, blob soft delete, container soft delete
Quick peek
Open full term page
Storage
complete
Storage account static website
Storage account static website is a Blob Storage feature that serves HTML, CSS, JavaScript, and image files from the special $web container through a web endpoint. It supports simple static sites without app servers. The endpoint is commonly fronted by CDN or Azure Front Door.
Storage accounts
fundamentals
5 commands
Aliases: Storage account static website, storage account static website, storage-account-static-website, static website hosting, storage static website, $web container
Quick peek
Open full term page
Storage
learning-path-anchor
Data Lake storage account
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
advanced
19 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
General-purpose v2 storage account
General-purpose v2 storage account is an Azure Storage account resource using the StorageV2 kind to host common storage services under one managed namespace. Teams use it to provide durable storage for applications while centralizing endpoints, redundancy, encryption, lifecycle management, networking, monitoring, and access control. In daily Azure work, it appears when engineers provision blob containers, file shares, queues, tables, static websites, backups, application artifacts, or Data Lake Gen2-enabled storage in a landing zone. It is not a specific blob container, an unlimited performance guarantee, an identity provider, or a safe design unless access, networking, and data protection are configured.
Storage accounts
beginner
5 commands
Aliases: Azure general-purpose v2 storage account, GPv2 storage account, StorageV2 storage account
Quick peek
Open full term page
Storage
premium
Blob storage account
A Blob storage account is the Azure Storage account that provides the namespace, security boundary, network configuration, redundancy, and service endpoint for Blob data.
Storage accounts
advanced
3 commands
Aliases: Blob storage account, storage account, blob storage account
Quick peek
Open full term page
Storage
field-manual-complete
Premium storage account
A premium storage account is not just a normal storage account with a fancy name.
Storage accounts
advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
complete
Standard storage account
Microsoft Learn describes a standard general-purpose v2 storage account as the recommended account type for most Azure Storage scenarios. It provides a namespace for blobs, Azure Files, queues, tables, and Data Lake Storage capabilities, with standard redundancy choices such as LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS.
Storage accounts
intermediate
5 commands
Aliases: standard-storage-account, Standard storage account, standard general-purpose v2 storage account, standard GPv2 storage account, Azure Storage standard account, StorageV2 standard account
Quick peek
Open full term page
Storage
learning-path-anchor
Table Storage
Table Storage is Azure Storage for simple structured NoSQL records. You create tables, store entities, and identify each entity with a PartitionKey and RowKey. It is useful when the data is large, sparse, inexpensive to keep, and usually accessed by known keys. It is not a relational database, search engine, or analytics warehouse. The best fit is operational data that can be denormalized, read directly, updated independently, and kept cheap without requiring joins, stored procedures, or secondary indexes.
Table Storage
fundamentals
5 commands
Aliases: Azure Table Storage, Storage Tables, Azure Storage Tables, Azure Tables storage
Quick peek
Open full term page
Storage
command-rich
Primary storage region
The primary storage region is the home region for an Azure Storage account. When an application writes blobs, files, queues, or tables under normal conditions, it writes to the primary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically.
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
command-rich
Secondary storage region
The secondary storage region is the other region involved when an Azure Storage account uses geo-redundant options such as GRS or GZRS. Under normal conditions, applications write to the primary region, and Azure asynchronously copies data to the secondary region. Microsoft Learn anchors this term in Data redundancy - Azure Storage, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended..
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Locally redundant storage
Microsoft Learn describes locally redundant storage as Azure Storage redundancy that replicates data within the primary region in a local storage scale unit. LRS is the lowest-cost redundancy option and provides high durability, but it does not protect against regional disasters.
Azure Storage
intermediate
10 commands
Aliases: LRS
Quick peek
Open full term page
Storage
premium
Service endpoint for Storage
A service endpoint for Storage enables the Microsoft.Storage endpoint on a virtual network subnet and pairs it with storage account network rules. It lets workloads in that subnet reach Azure Storage over the Microsoft backbone while the account firewall allows only approved virtual network sources.
Storage platform
intermediate
6 commands
Aliases: Azure Storage VNet rule, Microsoft.Storage service endpoint, Service endpoint for Storage, Storage service endpoint, service endpoint for storage, service-endpoint-for-storage
Quick peek
Open full term page
Storage
premium
Account SAS
An account SAS is a powerful storage access token signed with the account key. It can grant limited access across multiple storage services, but because it is key-based and hard to audit, keep permissions narrow and expiry short.
Blob Storage
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Immutable storage
Immutable storage is Azure Blob Storage configured to protect data in a write-once, read-many state so it cannot be modified or deleted during a retention period.
Data protection
intermediate
5 commands
Aliases: Immutable storage, immutable storage, immutable-storage
Quick peek
Open full term page
Storage
premium
Infrastructure encryption for storage
Infrastructure encryption for storage controls how Azure Storage applies optional double encryption to blobs, files, queues, or tables depending on account and scope configuration. Teams see it in storage account creation, encryption blade. It is not blob immutability, soft delete, encryption in transit, customer-managed key rotation, or disabling shared key authorization; confusing them can create storage accounts that cannot meet compliance, rebuild-only remediation. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Storage Security
Intermediate
5 commands
Aliases: storage infrastructure encryption, storage account double encryption, require infrastructure encryption, double encryption for Azure Storage
Quick peek
Open full term page
Integration
premium
Integration account
Integration account controls where Logic Apps stores reusable B2B artifacts that workflows use to translate, validate, sign, decode, encode, or route enterprise messages. Teams see it in logic apps workflows, integration account artifacts. It is not a Logic App workflow, an Azure Storage account, an API connection, an Integration Service Environment, or a general-purpose document repository; confusing them can create failed EDI exchanges, expired certificates. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Enterprise integration
Intermediate
5 commands
Aliases: Logic Apps integration account, enterprise integration account, B2B artifact account, EDI artifact store
Quick peek
Open full term page
Containers
premium
Kubernetes StorageClass
A Kubernetes StorageClass defines how persistent storage is dynamically provisioned for persistent volume claims, including the driver, performance tier, reclaim policy, and binding behavior.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
SFTP for Azure Blob Storage
SFTP for Azure Blob Storage lets clients connect to a storage account through SSH File Transfer Protocol for file access, transfer, and management. It requires a supported storage account with hierarchical namespace enabled, then local users and scoped permissions control access to containers and paths.
Storage platform
intermediate
5 commands
Aliases: Azure Blob Storage SFTP, SFTP support for Azure Blob Storage, storage account SFTP, Blob SFTP endpoint, SFTP for Azure Blob Storage
Quick peek
Open full term page
Storage
premium
SFTP for Blob Storage
SFTP for Blob Storage is the storage-account feature that exposes blob containers to SFTP clients after hierarchical namespace is enabled. Administrators configure local users, authentication methods, home directories, and permission scopes so external or internal clients can transfer files without custom SFTP infrastructure.
Blob Storage
advanced
5 commands
Aliases: Blob Storage SFTP, SFTP for Blob Storage, SFTP landing zone, storage SFTP local user, SFTP-enabled storage account
Quick peek
Open full term page
Storage
premium
Trusted Microsoft services for storage
Trusted Microsoft services for Azure Storage are specific Azure services that Microsoft documents as eligible for storage firewall exceptions. Depending on the service, access may be based on tenant registration, supported operations, or managed identity authorization combined with Azure RBAC or Data Lake ACLs.
Storage platform
intermediate
5 commands
Aliases: trusted Azure services for Storage, storage trusted services list, Azure Storage trusted services, trusted services storage firewall
Quick peek
Open full term page
Storage
premium
Zone-redundant storage
Zone-redundant storage (ZRS) is an Azure Storage redundancy option that copies data synchronously across three or more availability zones in the primary region. It keeps storage resources available for reads and writes if a zone becomes unavailable, while staying within the region for governance-sensitive workloads.
Azure Storage
intermediate
5 commands
Aliases: ZRS, ZRS storage, Azure Storage ZRS, zonal storage redundancy
Quick peek
Open full term page
Storage
premium
Azure Storage Actions
Azure Storage Actions is a fully managed platform for automating data management tasks across Azure Blob Storage and Azure Data Lake Storage objects without provisioning separate compute.
Storage platform
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Azure Storage Explorer
Azure Storage Explorer is a standalone app for Windows, macOS, and Linux that helps users connect to and manage Azure Storage data and resources through a graphical interface.
Storage tooling
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Monitoring and Observability
premium
Diagnostic settings for storage
Diagnostic settings for storage route Azure Storage platform logs and metrics, including service-specific operations where supported, to destinations such as Log Analytics, Event Hubs, or Storage for investigation and compliance.
Data operations
intermediate
4 commands
Aliases: storage diagnostic settings, Azure Storage diagnostic settings, Storage account diagnostic settings, storage platform log routing
Quick peek
Open full term page
Storage
premium
Filesystem in Data Lake Storage
Filesystem in Data Lake Storage is the top-level container-like namespace in Azure Data Lake Storage Gen2 that holds directories and files in Azure.
Data Lake Storage Gen2
intermediate
4 commands
Aliases: Filesystem in Data Lake Storage, filesystem in data lake storage
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search