Search Azure terms

Storage premium Service endpoint for Storage A service endpoint for Storage enables the Microsoft.Storage endpoint on a virtual network subnet and pairs it with storage account network rules. It lets workloads in that subnet reach Azure Storage over the Microsoft backbone while the account firewall allows only approved virtual network sources. Storage platform intermediate 6 commands Aliases: Azure Storage VNet rule, Microsoft.Storage service endpoint, Service endpoint for Storage, Storage service endpoint, service endpoint for storage, service-endpoint-for-storage Quick peek Open full term page

Storage premium NFS 3.0 for Blob Storage NFS 3.0 for Blob Storage means an Azure Blob Storage protocol option that lets Linux clients mount blob containers through NFS version 3. You see it when teams connect analytics jobs, HPC workloads, migration tools, or Linux applications that expect mounted file paths. Think of it as a storage protocol choice with account, namespace, and network requirements. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Blob Storage advanced 4 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Storage account trusted services Storage account trusted services are Azure service exceptions that can pass a storage firewall when selected network access is restricted. They help specific Microsoft services reach storage for approved scenarios, but they do not replace authentication, authorization, logging, private access review, or least-privilege design. Storage network security fundamentals 5 commands Aliases: trusted Microsoft services for storage, AzureServices bypass, storage trusted services exception Quick peek Open full term page

Storage field-manual-complete Storage firewall A storage firewall is the Azure Storage network security configuration that restricts data-plane access to selected virtual networks, IP ranges, resource instances, private paths, or trusted service exceptions. It controls network reachability to storage services, while identity and authorization still decide whether an allowed request can access data. Network security fundamentals 5 commands Aliases: storage account firewall, Azure Storage firewall, storage network rules, storage network security Quick peek Open full term page

Networking premium Network Security Group Network Security Group means an Azure rule set that filters inbound and outbound network traffic for subnets or network interfaces. You see it when teams restrict application ports, isolate workloads, permit administration, block unwanted traffic, or document network segmentation. Think of it as a prioritized traffic filter near the workload, not complete application security. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Network security fundamentals 5 commands Aliases: NSG Quick peek Open full term page

Storage field-manual-complete Storage firewall network rule An allow rule that permits selected network sources to reach an Azure Storage account public endpoint. Storage networking intermediate 5 commands Aliases: storage firewall rule, storage account firewall network rule, Azure Storage network ACL rule, storage account network allow rule, Azure Storage firewall network rule, storage account network ACL rule, storage account firewall subnet rule Quick peek Open full term page

Storage field-manual-complete Storage network rule A storage account network access rule that allows selected sources after public access is restricted. Storage networking intermediate 5 commands Aliases: Azure Storage network rules, storage account network rules, storage network ACLs, storage firewall network access, Azure Storage network rule, storage account network rule, storage network ACL rule Quick peek Open full term page

Storage field-manual-complete Storage network rules The selected-network rules that control which sources can reach an Azure Storage account public endpoint. Storage networking Intermediate 5 commands Aliases: storage account network rules, storage firewall rules, storage network ACLs, selected network access, storage account firewall allowlist Quick peek Open full term page

Storage complete Storage account public network access Public network access is the storage account setting that controls whether requests can reach the account through public Azure Storage endpoints. Teams pair it with firewalls, virtual network rules, trusted-services exceptions, and private endpoints to decide whether only private network paths should be allowed. Storage accounts advanced 5 commands Aliases: public access for storage account, storage public network access, storage public endpoint access, publicNetworkAccess Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium General-purpose v2 storage account General-purpose v2 storage account is an Azure Storage account resource using the StorageV2 kind to host common storage services under one managed namespace. Teams use it to provide durable storage for applications while centralizing endpoints, redundancy, encryption, lifecycle management, networking, monitoring, and access control. In daily Azure work, it appears when engineers provision blob containers, file shares, queues, tables, static websites, backups, application artifacts, or Data Lake Gen2-enabled storage in a landing zone. It is not a specific blob container, an unlimited performance guarantee, an identity provider, or a safe design unless access, networking, and data protection are configured. Storage accounts beginner 5 commands Aliases: Azure general-purpose v2 storage account, GPv2 storage account, StorageV2 storage account Quick peek Open full term page

Storage premium Trusted Microsoft services for storage Trusted Microsoft services for Azure Storage are specific Azure services that Microsoft documents as eligible for storage firewall exceptions. Depending on the service, access may be based on tenant registration, supported operations, or managed identity authorization combined with Azure RBAC or Data Lake ACLs. Storage platform intermediate 5 commands Aliases: trusted Azure services for Storage, storage trusted services list, Azure Storage trusted services, trusted services storage firewall Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Storage premium Minimum TLS version for Storage Minimum TLS version for Storage is a storage account setting that rejects client connections using TLS versions below the configured minimum. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Storage security intermediate 4 commands Aliases: TLS minimum for storage, TLS1_2 storage, minimum TLS for Azure Storage, minimumTlsVersion, storage minimum TLS Quick peek Open full term page

Storage premium Azure Storage Discovery Azure Storage Discovery is a fully managed service that provides enterprise-wide visibility into Azure Blob Storage and Azure Data Lake Storage estates for analysis, optimization, security, and operations. Storage platform intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Blob storage account A Blob storage account is the Azure Storage account that provides the namespace, security boundary, network configuration, redundancy, and service endpoint for Blob data. Storage accounts advanced 3 commands Aliases: Blob storage account, storage account, blob storage account Quick peek Open full term page

Storage field-manual-complete Data Lake Storage Gen2 Data Lake Storage Gen2 is Azure Blob Storage with a hierarchical namespace enabled for analytics workloads. Microsoft Learn describes it as combining file-system style directories, ACLs, and large-scale throughput with Blob Storage durability, security, lifecycle, tiering, and ecosystem compatibility for big data scenarios. Analytics storage fundamentals 8 commands Aliases: ADLS Gen2 Quick peek Open full term page

Storage field-manual-complete Blob Storage Blob Storage is Azure object storage for massive amounts of unstructured data such as documents, images, video, backups, logs, and application files. Storage advanced 5 commands Aliases: Blob Storage, blob-storage, blob, blob-container, blob-access-tier, blob-soft-delete, blob-versioning, storage-account, account-sas, private-endpoint-for-storage, azure-files, data-lake-storage-gen2, queue-storage Quick peek Open full term page

Storage field-manual-complete Private endpoint for Storage A private endpoint for Storage is the private network entry point to one storage account service, such as Blob, Files, Queue, Table, Data Lake Storage, or static website content. Storage platform intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking verified Public network access Whether a resource can be reached over public endpoints. Networking advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage field-manual-complete Storage diagnostic logging Storage diagnostic logging uses Azure Monitor diagnostic settings and storage service resource logs to record data-plane operations such as reads, writes, deletes, authentication outcomes, latency, and request metadata. Operators can send those logs to Log Analytics, Event Hubs, or storage for investigation, monitoring, and compliance evidence. Storage accounts intermediate 5 commands Aliases: storage logs, storage resource logs, Azure Storage diagnostic settings, storage audit logs Quick peek Open full term page

Analytics field-manual-complete Synapse managed virtual network A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet Quick peek Open full term page

Storage complete Storage account Microsoft Learn describes an Azure storage account as the resource that contains Azure Storage data objects such as blobs, files, queues, and tables. It provides a unique namespace for data accessible over HTTP or HTTPS, with durability, availability, security, and scalability choices. Storage account intermediate 5 commands Aliases: storage-account, Storage account, Azure Storage account, general-purpose storage account, GPv2 storage account, storage account resource Quick peek Open full term page

Storage complete Storage account key A shared secret that can authorize broad access to a storage account. Storage platform intermediate 5 commands Aliases: storage key, storage account shared key, Azure Storage key, account key Quick peek Open full term page

Storage complete Storage account minimum TLS Microsoft Learn describes the storage account minimum TLS setting as the required Transport Layer Security version for requests to Azure Storage. Clients using older TLS versions can be rejected, helping teams enforce stronger encrypted transport for Blob, File, Queue, and Table access. Storage accounts fundamentals 5 commands Aliases: minimum TLS for storage, Azure Storage TLS minimum, storage TLS floor, minimum transport security for storage Quick peek Open full term page

Storage complete Storage account minimum TLS version Microsoft Learn identifies minimumTlsVersion as the storage account property that sets the lowest Transport Layer Security version accepted by Azure Storage. Operators configure the value through portal, CLI, PowerShell, templates, or policy to block clients using older TLS versions. settings. consistently. consistently. Storage accounts advanced 5 commands Aliases: minimumTlsVersion, storage minimum TLS version, TLS version setting for storage, Azure Storage TLS version Quick peek Open full term page

Storage premium Locally redundant storage Microsoft Learn describes locally redundant storage as Azure Storage redundancy that replicates data within the primary region in a local storage scale unit. LRS is the lowest-cost redundancy option and provides high durability, but it does not protect against regional disasters. Azure Storage intermediate 10 commands Aliases: LRS Quick peek Open full term page

Compute premium Accelerated networking for VM Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads. Virtual Machines intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Infrastructure encryption for storage Infrastructure encryption for storage controls how Azure Storage applies optional double encryption to blobs, files, queues, or tables depending on account and scope configuration. Teams see it in storage account creation, encryption blade. It is not blob immutability, soft delete, encryption in transit, customer-managed key rotation, or disabling shared key authorization; confusing them can create storage accounts that cannot meet compliance, rebuild-only remediation. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Azure Storage Security Intermediate 5 commands Aliases: storage infrastructure encryption, storage account double encryption, require infrastructure encryption, double encryption for Azure Storage Quick peek Open full term page

Storage premium SFTP for Azure Blob Storage SFTP for Azure Blob Storage lets clients connect to a storage account through SSH File Transfer Protocol for file access, transfer, and management. It requires a supported storage account with hierarchical namespace enabled, then local users and scoped permissions control access to containers and paths. Storage platform intermediate 5 commands Aliases: Azure Blob Storage SFTP, SFTP support for Azure Blob Storage, storage account SFTP, Blob SFTP endpoint, SFTP for Azure Blob Storage Quick peek Open full term page

Storage premium Zone-redundant storage Zone-redundant storage (ZRS) is an Azure Storage redundancy option that copies data synchronously across three or more availability zones in the primary region. It keeps storage resources available for reads and writes if a zone becomes unavailable, while staying within the region for governance-sensitive workloads. Azure Storage intermediate 5 commands Aliases: ZRS, ZRS storage, Azure Storage ZRS, zonal storage redundancy Quick peek Open full term page

Storage premium Azure Storage Actions Azure Storage Actions is a fully managed platform for automating data management tasks across Azure Blob Storage and Azure Data Lake Storage objects without provisioning separate compute. Storage platform intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Azure Storage Explorer Azure Storage Explorer is a standalone app for Windows, macOS, and Linux that helps users connect to and manage Azure Storage data and resources through a graphical interface. Storage tooling fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Monitoring and Observability premium Diagnostic settings for storage Diagnostic settings for storage route Azure Storage platform logs and metrics, including service-specific operations where supported, to destinations such as Log Analytics, Event Hubs, or Storage for investigation and compliance. Data operations intermediate 4 commands Aliases: storage diagnostic settings, Azure Storage diagnostic settings, Storage account diagnostic settings, storage platform log routing Quick peek Open full term page

Networking premium Network Watcher Network Watcher means an Azure diagnostics service that helps inspect, monitor, and troubleshoot network behavior across supported Azure resources. You see it when teams test connectivity, capture packets, review flow logs, inspect topology, or prove whether a problem is network-related. Think of it as a network evidence toolkit, not a replacement for application logs or security analytics. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Diagnostics fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Storage learning-path-anchor Table Storage Table Storage is Azure Storage for simple structured NoSQL records. You create tables, store entities, and identify each entity with a PartitionKey and RowKey. It is useful when the data is large, sparse, inexpensive to keep, and usually accessed by known keys. It is not a relational database, search engine, or analytics warehouse. The best fit is operational data that can be denormalized, read directly, updated independently, and kept cheap without requiring joins, stored procedures, or secondary indexes. Table Storage fundamentals 5 commands Aliases: Azure Table Storage, Storage Tables, Azure Storage Tables, Azure Tables storage Quick peek Open full term page

Networking premium Application security group An application security group lets you group virtual machine network interfaces so network security group rules can target application roles instead of explicit IP addresses. Network security fundamentals 2 commands Aliases: ASG, application security group Quick peek Open full term page

Storage complete Storage account access key A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Storage accounts advanced 10 commands Aliases: storage access key, account key, shared key, storage key Quick peek Open full term page

Storage complete Storage account firewall rule A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Storage accounts advanced 10 commands Aliases: storage firewall rule, Azure Storage network rule, storage account network ACL, storage firewall Quick peek Open full term page

Storage complete Storage account kind A storage feature or access model in Storage accounts that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Storage accounts advanced 10 commands Aliases: storage account type, account kind, Azure Storage account type, StorageV2 kind Quick peek Open full term page

Storage complete Storage account endpoint Storage account endpoint is documented by Microsoft as part of the Storage accounts area in Azure. Storage accounts fundamentals 8 commands Aliases: storage endpoint, blob endpoint, dfs endpoint, storage service URL Quick peek Open full term page

Storage complete Storage account failover Storage account failover is documented by Microsoft as part of the Storage accounts area in Azure. Storage accounts advanced 8 commands Aliases: account failover, storage failover, customer-managed failover, planned storage failover Quick peek Open full term page

Storage field-manual-complete Premium storage account A premium storage account is not just a normal storage account with a fancy name. Storage accounts advanced 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage verified Queue Storage Azure Queue Storage is a storage service for keeping large numbers of small messages until an application or worker retrieves and processes them. It supports asynchronous web-queue-worker designs, authenticated HTTP or HTTPS access, and integration with Azure Functions, SDKs, and automation tools. Queue Storage beginner 5 commands Aliases: Queue Storage Quick peek Open full term page

Storage field-manual-complete Storage endpoint A storage endpoint is the service URL used to reach an Azure Storage account data service, such as Blob, Data Lake Storage, File, Queue, Table, or static website hosting. Endpoints identify where clients connect, while authorization, firewall rules, DNS, and private endpoints determine whether access succeeds. Storage platform intermediate 5 commands Aliases: storage service endpoint, Azure Storage endpoint, storage account endpoint, storage URL Quick peek Open full term page

Storage field-manual-complete Storage key rotation The controlled process of moving clients to one storage account key while regenerating the other key. Storage security intermediate 5 commands Aliases: storage account key rotation, rotate storage keys, regenerate storage account keys, Azure Storage access key rotation, Azure Storage key rotation, rotate storage account keys, regenerate storage account access key Quick peek Open full term page

Storage field-manual-complete Storage private endpoint A Private Link network interface that lets clients reach one Azure Storage service through a private IP address. Private networking Intermediate 5 commands Aliases: private endpoint for storage, Azure Storage private endpoint, storage Private Link endpoint, private storage access, storage account private link Quick peek Open full term page

Storage field-manual-complete Storage service endpoint Azure Storage service endpoints are the service-specific URI addresses exposed by a storage account, such as Blob, Queue, Table, File, DFS, and web endpoints. The account name and endpoint form the address clients use, while firewall, private endpoint, DNS, and authentication settings control usable access. Storage accounts fundamentals 5 commands Aliases: Azure Storage endpoint, storage account service endpoint, Blob service endpoint, DFS service endpoint, storage account endpoints Quick peek Open full term page

Networking field-manual-complete Virtual network An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity. Azure Virtual Network beginner 5 commands Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network Quick peek Open full term page

Compute field-manual-complete VM boot diagnostics storage VM boot diagnostics storage is the storage location used by Azure boot diagnostics to capture serial console logs and screenshots during virtual machine startup. It helps operators troubleshoot startup failures, kernel messages, inaccessible consoles, and early boot problems for Linux and Windows virtual machines. Virtual Machines intermediate 5 commands Aliases: boot diagnostics storage, Azure boot diagnostics, serial log storage, VM boot log storage Quick peek Open full term page