Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 247 matching terms. Narrow the search to reduce the list.
Virtual Desktop Infrastructure
premium
Azure Virtual Desktop
Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control.
Virtual desktops
fundamentals
5 commands
Aliases: AVD
Quick peek
Open full term page
Migration
premium
Azure Migrate
Azure Migrate helps organizations discover, assess, plan, and migrate servers, databases, web apps, virtual desktops, and other workloads to Azure with reduced risk.
Migration planning
intermediate
5 commands
Aliases: Migrate, Azure Migrate hub, migration assessment
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Host pool
A host pool is a collection of Azure Virtual Desktop session hosts that deliver desktops or RemoteApp applications to assigned users.
Azure Virtual Desktop
fundamentals
5 commands
Aliases: Host pool, host pool
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Session host
A session host is a virtual machine registered with an Azure Virtual Desktop host pool to run user desktops or RemoteApp sessions. It carries the operating system, installed applications, agent registration, domain or Microsoft Entra join state, and capacity that users actually consume.
Virtual desktops
fundamentals
5 commands
Aliases: Session host, session-host, session host, Session-host
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Application group
An Azure Virtual Desktop application group controls access to a full desktop or a logical grouping of RemoteApp applications from a host pool.
Virtual desktops
fundamentals
2 commands
Aliases: application group
Quick peek
Open full term page
Storage
field-manual-complete
Private endpoint for Azure Files
A private endpoint for Azure Files is the private network path to file shares in a storage account. Instead of mounting or accessing the share through the public file endpoint, clients in approved networks reach a private IP tied to the file service. The share, authentication model, and storage account still matter; the endpoint only changes network reachability. It is especially important for SMB access from Azure workloads, virtual desktops, build systems, and hybrid clients connected through VPN or ExpressRoute.
Azure Files
advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium
Data Factory managed virtual network
A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints.
Data integration and orchestration
Intermediate
4 commands
Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network
Quick peek
Open full term page
Analytics
field-manual-complete
Synapse managed virtual network
A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation.
Synapse Analytics
intermediate
5 commands
Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet
Quick peek
Open full term page
Compute
field-manual-complete
Virtual machine
An Azure compute resource that runs a full guest operating system for workloads needing server-level control.
Azure Virtual Machines
beginner
5 commands
Aliases: Azure VM, VM, cloud virtual server, IaaS virtual machine, virtual machine
Quick peek
Open full term page
Compute
field-manual-complete
Virtual machine scale set
A managed group of VM instances that can scale and update as a fleet.
Azure Virtual Machine Scale Sets
intermediate
5 commands
Aliases: VM scale set, Azure VMSS, Virtual Machine Scale Set, scale set, virtual machine scale set
Quick peek
Open full term page
Networking
field-manual-complete
Virtual network
An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity.
Azure Virtual Network
beginner
5 commands
Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network
Quick peek
Open full term page
Databases
complete
SQL managed instance virtual cluster
Microsoft Learn describes the SQL Managed Instance virtual cluster as service-managed infrastructure that hosts managed instances inside a customer virtual network subnet. The virtual cluster contains isolated virtual machines and VM groups, supports management operations, and is created or changed as instances are deployed, scaled, or removed.
SQL Managed Instance
intermediate
5 commands
Aliases: SQL MI virtual cluster, Azure SQL Managed Instance virtual cluster, managed instance platform cluster
Quick peek
Open full term page
Databases
premium field-manual
Managed instance virtual cluster
Managed Instance virtual cluster is an Azure-managed infrastructure grouping that hosts one or more SQL Managed Instances inside a subnet. Teams use it when teams deploy, scale, move, or delete managed instances and need to understand the hidden infrastructure boundary. In plain English, it gives operators a named control for clearer expectations for provisioning time, subnet planning, instance placement, and cleanup behavior instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear.
Azure SQL Managed Instance
intermediate
3 commands
Aliases: Managed instance virtual cluster, Azure SQL Managed Instance
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace firewall
A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It...
Synapse Analytics
intermediate
6 commands
Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Tags
Tags are labels you attach to Azure things so people and tools can understand what they are for. A tag has a name and a value, such as Owner=DataPlatform or Environment=Prod. Tags do not make a virtual machine faster, secure a database, or change a web app setting. They make the estate easier to organize, report on, govern, and automate. Useful tags answer questions the business actually asks: who owns this, what does it support, what environment is it, and who pays for it?
Tags and naming
advanced
5 commands
Aliases: Azure tags, resource tags, name-value tags, Azure metadata tags
Quick peek
Open full term page
Identity
learning-path-anchor
System-assigned managed identity
A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request...
Managed identities
intermediate
4 commands
Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity
Quick peek
Open full term page
Databases
premium
Azure SQL logical server
An Azure SQL logical server is a logical administrative construct for Azure SQL Database and related SQL resources. Microsoft Learn describes it as the central point for managing a collection of databases, including logins, firewall rules, auditing, threat detection policies, and failover groups.
Azure SQL Database
fundamentals
16 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service private endpoint
An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access.
App Service Networking
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Compute
premium
Azure Functions
Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers.
Serverless compute
intermediate
6 commands
Aliases: Functions, Function App, serverless functions
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
Analytics
premium
Databricks managed resource group
The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources.
Azure Databricks
intermediate
6 commands
Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group
Quick peek
Open full term page
Networking
premium
DDoS Protection
Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities.
Network security
intermediate
6 commands
Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection
Quick peek
Open full term page
Networking
premium
ExpressRoute
ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before.
Hybrid connectivity
intermediate
6 commands
Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity
Quick peek
Open full term page
Analytics
premium
External data source
An External data source is a database object that defines the location and connection information used by SQL engines to access external data. Teams use it to point serverless SQL, dedicated SQL pools, or PolyBase-style queries to data stored outside the database, such as Azure Storage or Data Lake paths. It is not the external table schema, the file format definition, the storage account itself, or proof that the credential can read every file under the path.
Synapse SQL and data virtualization
intermediate
6 commands
Aliases: CREATE EXTERNAL DATA SOURCE, PolyBase external data source, Synapse external data source
Quick peek
Open full term page
Analytics
premium
External file format
An External file format is a database object that describes the file type, delimiter, compression, and parsing options used to read or write external data. Teams use it to tell SQL engines how to interpret external files such as delimited text, Parquet, ORC, or compressed data before external tables and CETAS jobs use them. It is not the data source location, the external table schema, the actual lake file, or a guarantee that every file in a folder has the same structure.
Synapse SQL and data virtualization
intermediate
6 commands
Aliases: CREATE EXTERNAL FILE FORMAT, PolyBase file format, Synapse external file format
Quick peek
Open full term page
Analytics
premium
External table
An External table is a SQL table definition whose data is stored outside the database, commonly in Azure Storage or Azure Data Lake Storage. Teams use it to let SQL users query lake files or remote data through familiar table names while the actual data remains in external storage. It is not a managed internal database table, a copy of the data, a storage access policy, or proof that the external files are optimized, fresh, or secure.
Synapse SQL and data virtualization
intermediate
6 commands
Aliases: Synapse external table, SQL external table, PolyBase external table
Quick peek
Open full term page
Compute
premium
Fault domain
A Fault domain is a logical group of Azure infrastructure that shares a common failure boundary, such as power, cooling, or network equipment, used to spread related virtual machines. Teams use it to reduce the chance that one physical infrastructure problem takes down every instance of the same application tier at the same time. It is not an availability zone, backup copy, application health probe, exact rack identifier exposed to customers, or guarantee that every dependency is isolated from every other dependency.
Virtual Machines
intermediate
6 commands
Aliases: Azure fault domain, platform fault domain, availability set fault domain, VM fault domain
Quick peek
Open full term page
Storage
premium
File service endpoint
A File service endpoint is the Azure Storage endpoint used by clients and services to access Azure Files shares in a storage account through supported protocols and network paths. Teams use it to connect applications, users, file sync agents, and automation to Azure file shares through the correct public endpoint, private endpoint, or virtual network service endpoint path. It is not a file share itself, a private endpoint by itself, a DNS record alone, authorization proof, or a guarantee that SMB, NFS, FileREST, firewall, and identity settings all match.
Azure Files
intermediate
6 commands
Aliases: Azure Files endpoint, storage file endpoint, file endpoint, Azure Storage file service endpoint
Quick peek
Open full term page
Compute
premium
Flexible orchestration
Flexible orchestration is a Virtual Machine Scale Sets mode that lets Azure manage a group of VMs while exposing individual instances through standard Azure IaaS VM APIs. Teams use it to run highly available or mixed virtual machine workloads that need scale-set grouping, instance-level VM control, spreading, load balancing, and more flexible lifecycle management than uniform orchestration. It is not an autoscale rule by itself, a way to change an existing scale set orchestration mode after creation, a replacement for application failover, or a guarantee that every VM size supports every feature.
Virtual Machine Scale Sets
intermediate
6 commands
Aliases: VMSS flexible orchestration, Flexible scale set orchestration, Azure VM Scale Sets flexible mode
Quick peek
Open full term page
Compute
premium
Gallery image version
Gallery image version is a specific published version of a gallery image that virtual machines and scale sets can use as their source. Teams use it to roll out tested OS and application baselines with version numbers, regional replication, retirement dates, and rollback options. In daily Azure work, it appears when engineers promote a golden image, deploy identical VMs across regions, retire vulnerable builds, or troubleshoot why a new VM used the wrong baseline. It is not the image family definition, a live VM, an operating system patch job, or proof that every deployed VM remains compliant after boot.
Disks and images
intermediate
6 commands
Aliases: Azure Compute Gallery image version, SIG image version, image version
Quick peek
Open full term page
Databases
premium
PostgreSQL flexible server
The managed Azure PostgreSQL server resource that owns compute, storage, backups, networking, high availability, parameters, and databases.
PostgreSQL flexible server
fundamentals
6 commands
Aliases: PostgreSQL flexible server, postgresql flexible server, Azure Database for PostgreSQL flexible server, managed PostgreSQL, backup retention, high availability, private access
Quick peek
Open full term page
Integration
premium
Service Bus subscription
Service Bus subscription is a named receiver under a Service Bus topic. It behaves like a virtual queue: messages published to the topic are copied into the subscription when its rules match, and receivers read, lock, complete, defer, or dead-letter those subscription messages.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus subscription, topic subscription, Service Bus topic subscription, subscription entity
Quick peek
Open full term page
Storage
premium
Service endpoint for Storage
A service endpoint for Storage enables the Microsoft.Storage endpoint on a virtual network subnet and pairs it with storage account network rules. It lets workloads in that subnet reach Azure Storage over the Microsoft backbone while the account firewall allows only approved virtual network sources.
Storage platform
intermediate
6 commands
Aliases: Azure Storage VNet rule, Microsoft.Storage service endpoint, Service endpoint for Storage, Storage service endpoint, service endpoint for storage, service-endpoint-for-storage
Quick peek
Open full term page
Web
premium
Web App
A Web App is an Azure App Service application for hosting web applications, REST APIs, or mobile back ends without managing servers. It runs on an App Service plan, supports common language stacks or containers, and integrates with deployment, scaling, networking, identity, and monitoring features.
App Service
intermediate
6 commands
Aliases: Azure Web App, App Service Web App, Microsoft.Web/sites, App Service app
Quick peek
Open full term page
Networking
premium
Web Application Firewall
Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting.
Application security
fundamentals
6 commands
Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF
Quick peek
Open full term page
Compute
premium
Accelerated networking for VM
Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads.
Virtual Machines
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
AKS Linux node pool
An AKS Linux node pool is a group of Linux-based nodes with shared configuration that runs Kubernetes workloads in an AKS cluster. Node pools let teams separate system components, application workloads, VM sizes, zones, scaling behavior, taints, labels, and upgrade settings.
AKS compute
Intermediate
5 commands
Aliases: Azure Kubernetes Service Linux node pool, aks linux node pool
Quick peek
Open full term page
Containers
premium
AKS node
Microsoft Learn explains that AKS nodes are the virtual machines that run your containerized applications, grouped into node pools with the same configuration. System node pools host core cluster pods, while user node pools typically host application workloads and can differ by size, operating system, taints, or purpose.
AKS compute
intermediate
5 commands
Aliases: AKS cluster node, Kubernetes node in AKS, AKS VM node
Quick peek
Open full term page
Web
premium
App Service Environment
Microsoft Learn describes App Service Environment as a single-tenant App Service deployment that runs in a customer virtual network. It hosts App Service plans and apps with stronger network isolation, dedicated compute boundaries, and high-scale hosting compared with the public multitenant App Service model.
App Service isolation
intermediate
5 commands
Aliases: ASE, Azure App Service Environment, app service environment
Quick peek
Open full term page
Web
premium
App Service Linux worker
An App Service Linux worker is the Linux-based App Service compute instance that runs an app using a built-in Linux runtime stack or custom container.
App Service runtime
intermediate
5 commands
Aliases: Azure App Service Linux worker, app service linux worker
Quick peek
Open full term page
Web
premium
App Service VNet integration
Microsoft Learn describes App Service virtual network integration as the feature that lets an App Service app access resources in or through an Azure virtual network. It affects outbound traffic from the app; inbound private access uses other controls, such as private endpoints and access restrictions.
App Service Networking
intermediate
5 commands
Aliases: App Service virtual network integration, regional VNet integration, Web App VNet integration
Quick peek
Open full term page
Databases
premium
Azure Database for MySQL Flexible Server
A fully managed Azure database service for MySQL workloads with configurable compute, storage, backups, networking, maintenance, and high availability options.
Managed MySQL
intermediate
5 commands
Aliases: MySQL Flexible Server
Quick peek
Open full term page
Storage
premium
Azure Elastic SAN
A cloud-native Azure storage area network service that provides scalable, cost-effective, high-performance block storage volumes for compute workloads.
Block storage
intermediate
5 commands
Aliases: Elastic SAN
Quick peek
Open full term page
Storage
premium
Azure file share
An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover.
Files, queues, and tables
fundamentals
5 commands
Aliases: Azure Files share
Quick peek
Open full term page
Analytics
premium
Azure integration runtime
Azure integration runtime is the compute infrastructure used by Azure Data Factory and Synapse pipelines to move data, dispatch activities, and connect across network environments.
Data integration compute
intermediate
5 commands
Aliases: Integration Runtime, IR, ADF integration runtime
Quick peek
Open full term page
Migration
premium
Azure Site Recovery
Azure Site Recovery helps provide disaster recovery by managing replication, failover, and failback for supported workloads.
Disaster recovery
fundamentals
5 commands
Aliases: ASR, Azure Site Recovery, Azure disaster recovery, Site Recovery
Quick peek
Open full term page
Databases
premium
Azure SQL Database
Azure SQL Database is a fully managed relational database service in Azure that provides SQL Server-compatible engines as single databases, elastic pools, and serverless or provisioned compute choices. Microsoft Learn presents it as platform as a service with built-in availability, backups, patching, scaling, and security integration.
Database
intermediate
5 commands
Aliases: Azure SQL DB, Azure SQL Database, Azure SQL pooled database, Azure SQL single database, SQL Database
Quick peek
Open full term page
Storage
premium
Backup item
A backup item is a protected data source or backup instance in Azure Backup that is associated with a vault, policy, retention settings, and recoverable restore points.
Backup and recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Management and Governance
premium
Bicep existing resource
A Bicep existing resource declaration references a resource that already exists instead of deploying it again.
Bicep
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search