Search Azure terms

Networking field-manual-complete Subnet A subnet is a smaller address range inside an Azure virtual network. It is where many network-connected resources actually land, such as virtual machines, private endpoints, container nodes, and delegated platform services. Subnets let teams separate workloads, apply network security groups, attach route tables, reserve IP space, and control private connectivity. A good subnet plan gives every workload enough addresses and the right network controls. A bad plan creates overlapping ranges, blocked traffic, exhausted IPs, or painful migrations later. Virtual networking fundamentals 5 commands Aliases: Azure subnet, VNet subnet, virtual network subnet, subnet address prefix Quick peek Open full term page

Networking verified VNet peering VNet peering connects two Azure virtual networks so resources can communicate privately over the Microsoft backbone, within a region or across regions. Each side has a peering object, and routing, DNS, security rules, and gateway settings still require design securely. Virtual networking fundamentals 5 commands Aliases: virtual network peering, Azure VNet peering, peered virtual networks, hub-spoke peering Quick peek Open full term page

Analytics premium field-manual Managed private endpoint A managed private endpoint is a private endpoint created inside a managed virtual network so a managed service can reach another Azure resource privately. Teams use it when data pipelines or analytics workspaces need private connectivity to storage, databases, or other services. In plain English, it gives operators a named control for reduced public exposure and clearer approval evidence for managed service connectivity instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Data engineering and analytics intermediate 4 commands Aliases: Managed private endpoint, Azure Data Factory, Data engineering and analytics, Azure Data Factory and Azure Synapse Analytics, Data Factory and Synapse networking, Managed virtual networking, private endpoint, linked service, managed virtual network, Managed virtual networks, MPE, managed endpoint for Private Link, Azure Data Factory and Azure Synapse managed virtual networks Quick peek Open full term page

Compute premium Accelerated networking for VM Accelerated networking is a VM network performance feature. When the VM size and OS support it, Azure can send packets through a faster path that reduces CPU work, latency, and jitter. It is most useful for network-intensive workloads. Virtual Machines intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Virtual Desktop Infrastructure premium Azure Virtual Desktop Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control. Virtual desktops fundamentals 5 commands Aliases: AVD Quick peek Open full term page

Compute field-manual-complete Virtual machine An Azure compute resource that runs a full guest operating system for workloads needing server-level control. Azure Virtual Machines beginner 5 commands Aliases: Azure VM, VM, cloud virtual server, IaaS virtual machine, virtual machine Quick peek Open full term page

Networking field-manual-complete Virtual network An Azure private network boundary for subnets, routing, filtering, peering, and private connectivity. Azure Virtual Network beginner 5 commands Aliases: Azure VNet, VNet, virtual network in Azure, private Azure network, virtual network Quick peek Open full term page

Analytics premium Data Factory managed virtual network A Microsoft-managed network boundary used by Azure Integration Runtime to isolate data integration traffic and connect through managed private endpoints. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory managed virtual network, ADF managed virtual network, data factory managed virtual network Quick peek Open full term page

Analytics field-manual-complete Synapse managed virtual network A Synapse managed virtual network is the Azure-managed network boundary associated with a Synapse workspace. It isolates workspace data integration and Spark resources, enables managed private endpoints, and can restrict outbound connectivity to approved targets when data exfiltration protection is enabled at workspace creation. Synapse Analytics intermediate 5 commands Aliases: Azure Synapse managed virtual network, Synapse managed VNet, managed workspace virtual network, Synapse workspace managed VNet Quick peek Open full term page

Compute field-manual-complete Virtual machine scale set A managed group of VM instances that can scale and update as a fleet. Azure Virtual Machine Scale Sets intermediate 5 commands Aliases: VM scale set, Azure VMSS, Virtual Machine Scale Set, scale set, virtual machine scale set Quick peek Open full term page

Databases complete SQL managed instance virtual cluster Microsoft Learn describes the SQL Managed Instance virtual cluster as service-managed infrastructure that hosts managed instances inside a customer virtual network subnet. The virtual cluster contains isolated virtual machines and VM groups, supports management operations, and is created or changed as instances are deployed, scaled, or removed. SQL Managed Instance intermediate 5 commands Aliases: SQL MI virtual cluster, Azure SQL Managed Instance virtual cluster, managed instance platform cluster Quick peek Open full term page

Databases premium field-manual Managed instance virtual cluster Managed Instance virtual cluster is an Azure-managed infrastructure grouping that hosts one or more SQL Managed Instances inside a subnet. Teams use it when teams deploy, scale, move, or delete managed instances and need to understand the hidden infrastructure boundary. In plain English, it gives operators a named control for clearer expectations for provisioning time, subnet planning, instance placement, and cleanup behavior instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear. Azure SQL Managed Instance intermediate 3 commands Aliases: Managed instance virtual cluster, Azure SQL Managed Instance Quick peek Open full term page

Web premium App Service private endpoint An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access. App Service Networking intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Compute premium Azure Functions Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers. Serverless compute intermediate 6 commands Aliases: Functions, Function App, serverless functions Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Networking premium DDoS Protection Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities. Network security intermediate 6 commands Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection Quick peek Open full term page

Networking premium ExpressRoute ExpressRoute lets organizations extend on-premises networks into Microsoft cloud services over private connectivity provided through a connectivity provider. Teams use it to connect datacenters, branches, or colocation environments to Azure with predictable private paths for workloads that need stronger latency, bandwidth, and routing control than public internet connections. It is not a VPN tunnel, a private endpoint, an internet performance guarantee, or proof that every connected application is secure, redundant, or correctly routed. In production, confirm circuit state, provider state, peering configuration, BGP routes, gateway SKU, connected virtual networks, bandwidth, metrics, DNS path, firewall path, and provider escalation details before. Hybrid connectivity intermediate 6 commands Aliases: Azure ExpressRoute, ExpressRoute circuit, private Microsoft cloud connectivity Quick peek Open full term page

Databases premium PostgreSQL flexible server The managed Azure PostgreSQL server resource that owns compute, storage, backups, networking, high availability, parameters, and databases. PostgreSQL flexible server fundamentals 6 commands Aliases: PostgreSQL flexible server, postgresql flexible server, Azure Database for PostgreSQL flexible server, managed PostgreSQL, backup retention, high availability, private access Quick peek Open full term page

Web premium Web App A Web App is an Azure App Service application for hosting web applications, REST APIs, or mobile back ends without managing servers. It runs on an App Service plan, supports common language stacks or containers, and integrates with deployment, scaling, networking, identity, and monitoring features. App Service intermediate 6 commands Aliases: Azure Web App, App Service Web App, Microsoft.Web/sites, App Service app Quick peek Open full term page

Networking premium Web Application Firewall Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting. Application security fundamentals 6 commands Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF Quick peek Open full term page

Web premium App Service VNet integration Microsoft Learn describes App Service virtual network integration as the feature that lets an App Service app access resources in or through an Azure virtual network. It affects outbound traffic from the app; inbound private access uses other controls, such as private endpoints and access restrictions. App Service Networking intermediate 5 commands Aliases: App Service virtual network integration, regional VNet integration, Web App VNet integration Quick peek Open full term page

Databases premium Azure Database for MySQL Flexible Server A fully managed Azure database service for MySQL workloads with configurable compute, storage, backups, networking, maintenance, and high availability options. Managed MySQL intermediate 5 commands Aliases: MySQL Flexible Server Quick peek Open full term page

Databases premium Azure SQL Database Azure SQL Database is a fully managed relational database service in Azure that provides SQL Server-compatible engines as single databases, elastic pools, and serverless or provisioned compute choices. Microsoft Learn presents it as platform as a service with built-in availability, backups, patching, scaling, and security integration. Database intermediate 5 commands Aliases: Azure SQL DB, Azure SQL Database, Azure SQL pooled database, Azure SQL single database, SQL Database Quick peek Open full term page

Analytics premium Databricks workspace VNet injection Databricks workspace VNet injection is the deployment model that places Azure Databricks compute resources into customer-managed virtual network subnets so network security, routing, and private connectivity controls can be applied. Databricks advanced 5 commands Aliases: VNet-injected Databricks workspace, customer-managed VNet workspace, Databricks VNet injection, workspace in customer VNet Quick peek Open full term page

Networking premium Hybrid Connection A Hybrid Connection lets an Azure App Service app reach a specific TCP host and port in another network through Azure Relay. Azure App Service and Azure Relay fundamentals 5 commands Aliases: Hybrid Connection, hybrid connection Quick peek Open full term page

Networking premium Internet egress Internet egress controls how workloads reach public endpoints for updates, APIs, package feeds, SaaS services, telemetry, and other internet-reachable dependencies. Teams see it in virtual networks, nat gateways. It is not inbound internet traffic, private endpoint traffic, ExpressRoute private peering, internal ingress, or Azure service-to-service traffic over private routes; confusing them can create data exfiltration paths, blocked updates. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Outbound connectivity Intermediate 5 commands Aliases: outbound internet traffic, egress to internet, public egress, internet-bound traffic Quick peek Open full term page

Web premium Isolated App Service tier Isolated App Service tier is the App Service pricing tier used for apps running in an App Service Environment with dedicated, isolated workers and advanced networking options. App Service Environment advanced 5 commands Aliases: App Service Isolated tier, IsolatedV2 tier, Iv2 App Service plan, ASE App Service plan, I1v2, I2v2, I3v2 Quick peek Open full term page

Containers premium Kubenet Kubenet is an AKS network plugin where nodes receive virtual network IP addresses and pods receive IP addresses from a separate pod CIDR, with routing handled through user-defined routes. AKS networking Intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium NAT Gateway NAT Gateway means a managed Azure networking service that provides outbound internet connectivity for private resources in associated subnets. You see it when teams let virtual machines, containers, or private application workloads reach updates, APIs, package feeds, or external services. Think of it as an outbound source address and SNAT boundary, not a firewall for all network traffic. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Outbound connectivity fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium Network Security Group Network Security Group means an Azure rule set that filters inbound and outbound network traffic for subnets or network interfaces. You see it when teams restrict application ports, isolate workloads, permit administration, block unwanted traffic, or document network segmentation. Think of it as a prioritized traffic filter near the workload, not complete application security. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Network security fundamentals 5 commands Aliases: NSG Quick peek Open full term page

Management and Governance premium Policy alias A policy alias is the name Azure Policy uses to point at a real resource property. Instead of writing a policy against an awkward raw JSON path, you use an alias such as a storage account or virtual machine property. Azure Policy then knows what part of the resource to evaluate. Aliases are what make many deny, audit, append, and modify rules practical. If the alias is wrong, unsupported, or misunderstood, the policy may miss resources or block the wrong deployment. Azure Policy fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium PostgreSQL firewall rule A public-network access rule that permits a specific IPv4 range to reach an Azure Database for PostgreSQL flexible server. PostgreSQL flexible server intermediate 5 commands Aliases: PostgreSQL firewall rule, postgresql firewall rule, Azure PostgreSQL firewall, public access, IPv4 allowlist, source IP, start IP address Quick peek Open full term page

Networking premium Service endpoint A service endpoint is a subnet-level Azure Virtual Network capability that provides direct connectivity to supported Azure services over the Microsoft backbone. It extends the subnet identity to the service so the service can allow traffic from selected virtual networks without requiring a public IP address on the client workload. Private access fundamentals 5 commands Aliases: Service endpoint, VNet service endpoint, service endpoint, service-endpoint, subnet service endpoint, virtual network service endpoint Quick peek Open full term page

Analytics learning-path-anchor Synapse workspace firewall A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It... Synapse Analytics intermediate 6 commands Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall Quick peek Open full term page

Compute premium Availability zone Availability zone is a physically separate zone inside an Azure region with independent datacenter infrastructure such as power, cooling, and networking. In Azure, teams encounter it when architects choose whether a workload should pin resources to one zone or spread service instances across multiple zones. The useful question is what behavior it proves, who owns Availability fundamentals 4 commands Aliases: Azure availability zone, zone, zone-redundant deployment, zonal deployment Quick peek Open full term page

Networking premium Azure Bastion A fully managed Azure service that provides secure RDP and SSH access to virtual machines without exposing VM public IP addresses. Remote access fundamentals 4 commands Aliases: Azure Bastion host, Bastion, RDP SSH over Bastion, managed jump box Quick peek Open full term page

Containers premium Azure CNI An AKS networking approach where CNI plugins assign pod addresses, route pod traffic, and integrate Kubernetes networking with Azure virtual networks. Kubernetes networking fundamentals 4 commands Aliases: Azure Container Networking Interface Quick peek Open full term page

Containers premium Azure CNI Overlay An AKS networking mode that assigns pods private overlay CIDR addresses while nodes use VNet IPs, conserving subnet address space. Azure Kubernetes Service intermediate 4 commands Aliases: AKS overlay networking Quick peek Open full term page

Networking premium Azure Firewall Azure Firewall is a managed, stateful network firewall service for filtering traffic to and from Azure virtual network resources. It helps network security and platform teams centralize traffic control, logging, and threat protection across workloads without deploying self-managed firewall appliances for every landing zone. You see it when hub-spoke networks need egress control, applications require segmentation, regulated workloads need inspection, or teams need consistent firewall policy logging. It still needs ownership, network design, monitoring, and recovery planning. Operators need repeatable evidence for deployment, protection, troubleshooting, and reviews, not screenshots or tribal knowledge. Network security intermediate 4 commands Aliases: Azure network firewall Quick peek Open full term page

Networking premium DNS zone A DNS zone is an Azure DNS container for record sets that answer names under a domain. Public zones publish internet-resolvable records after registrar delegation, while private zones resolve only for linked virtual networks and support private endpoint and internal naming patterns. DNS fundamentals 4 commands Aliases: Azure DNS zone, DNS zone, public DNS zone, private DNS zone, hosted zone Quick peek Open full term page

Networking premium Load Balancer Azure Load Balancer distributes TCP and UDP traffic across backend virtual machines, virtual machine scale sets, or IP configurations. It uses frontend IPs, backend pools, health probes, and rules to provide low-latency Layer 4 traffic distribution for public or internal workloads. Load balancing fundamentals 4 commands Aliases: Azure Load Balancer, Standard Load Balancer, internal load balancer, public load balancer, layer 4 load balancer Quick peek Open full term page

Networking premium Load balancer frontend IP Microsoft Learn describes a Load Balancer frontend IP configuration as the address-facing entry point that receives client traffic for a load balancer. It can use a public or private IP address and is connected to rules, probes, and backend pools. Application delivery and API edge intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium MySQL private access MySQL private access means a MySQL Flexible Server networking model that keeps database connectivity inside a virtual network instead of exposing a public endpoint. You see it when teams host sensitive workloads, enforce network isolation, connect applications through private subnets, or meet compliance expectations. Think of it as private network reachability for the database, not permission to read the data. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Azure Database for MySQL intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium Network Watcher Network Watcher means an Azure diagnostics service that helps inspect, monitor, and troubleshoot network behavior across supported Azure resources. You see it when teams test connectivity, capture packets, review flow logs, inspect topology, or prove whether a problem is network-related. Think of it as a network evidence toolkit, not a replacement for application logs or security analytics. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path. Diagnostics fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Networking premium Outbound rule An outbound rule is a Standard Azure Load Balancer configuration that controls outbound SNAT for backend pool instances. It defines which frontend IP configurations are used, which backend pool receives outbound access, protocol behavior, allocated SNAT ports, idle timeout, and optional TCP reset handling. Application delivery and API edge intermediate 4 commands Aliases: Load Balancer outbound rule, outbound NAT rule, SNAT rule, Standard Load Balancer egress rule Quick peek Open full term page

Management and Governance learning-path-anchor Tags Tags are labels you attach to Azure things so people and tools can understand what they are for. A tag has a name and a value, such as Owner=DataPlatform or Environment=Prod. Tags do not make a virtual machine faster, secure a database, or change a web app setting. They make the estate easier to organize, report on, govern, and automate. Useful tags answer questions the business actually asks: who owns this, what does it support, what environment is it, and who pays for it? Tags and naming advanced 5 commands Aliases: Azure tags, resource tags, name-value tags, Azure metadata tags Quick peek Open full term page

Networking premium CIDR block A CIDR block expresses an IP address range with an address and prefix length, such as 10.0.0.0/16, for virtual network address space, subnets, and routes. IP addressing fundamentals 3 commands Aliases: CIDR Quick peek Open full term page

Containers learning-path-anchor System node pool A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the... Azure Kubernetes Service intermediate 4 commands Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool Quick peek Open full term page

Identity learning-path-anchor System-assigned managed identity A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request... Managed identities intermediate 4 commands Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity Quick peek Open full term page

AI and Machine Learning learning-path-anchor Text to speech Text to speech in Azure AI Speech converts written text or SSML into synthesized audio using neural voices, custom voice options, language support, and APIs. Teams use it to add spoken responses to apps, contact centers, accessibility tools, devices, and media workflows while governing region, keys, networking, and quota. Azure AI services fundamentals 4 commands Aliases: Text to speech, text to speech, Azure Text to speech, Microsoft Learn Text to speech, TTS, speech synthesis, Azure AI Speech synthesis, neural voices, SSML speech Quick peek Open full term page