Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 246 matching terms. Narrow the search to reduce the list.
Monitoring and Observability
premium
Interaction to Next Paint
Interaction to Next Paint controls how teams measure whether web pages feel responsive after real user interactions, especially for Azure-hosted web apps and customer portals. Teams see it in microsoft edge devtools, microsoft clarity dashboards. It is not server response time, Time to First Byte, First Input Delay, Cumulative Layout Shift, or a backend CPU metric; confusing them can create slow clicks, abandoned checkout flows. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Web Vitals
Intermediate
5 commands
Aliases: INP, Core Web Vitals INP, web responsiveness metric, interaction responsiveness
Quick peek
Open full term page
Monitoring and Observability
premium
Cumulative Layout Shift
a web performance metric that measures how much visible page content unexpectedly moves while a user is trying to read or interact.
Web performance
advanced
3 commands
Aliases: CLS, Core Web Vitals CLS, layout shift metric
Quick peek
Open full term page
Monitoring and Observability
field-manual-complete
Largest Contentful Paint
Largest Contentful Paint is a web performance metric that measures how quickly the largest visible content element in the viewport finishes rendering. Microsoft guidance treats it as a loading-experience signal, commonly associated with Core Web Vitals and a target of about 2.5 seconds for good user experience.
Web Vitals
advanced
2 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
Web App
A Web App is an Azure App Service application for hosting web applications, REST APIs, or mobile back ends without managing servers. It runs on an App Service plan, supports common language stacks or containers, and integrates with deployment, scaling, networking, identity, and monitoring features.
App Service
intermediate
6 commands
Aliases: Azure Web App, App Service Web App, Microsoft.Web/sites, App Service app
Quick peek
Open full term page
Networking
premium
Web Application Firewall
Azure Web Application Firewall is a centralized protection service for HTTP applications. It can run with Application Gateway, Front Door, Application Gateway for Containers, or Azure CDN, using managed and custom rules to detect and block common exploits such as SQL injection and cross-site scripting.
Application security
fundamentals
6 commands
Aliases: WAF, Azure WAF, Application Gateway WAF, Front Door WAF
Quick peek
Open full term page
Containers
premium
ACR webhook
An ACR webhook is an Azure Container Registry event notification that sends an HTTP or HTTPS request to a configured endpoint when registry actions occur, such as image push or delete. It can be registry-wide or scoped to a repository or tag, including regional replicas.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry webhook, registry webhook, ACR event webhook
Quick peek
Open full term page
Integration
premium
Event Grid webhook endpoint
An Event Grid webhook endpoint is an HTTPS endpoint configured as an event handler that validates ownership and receives Event Grid events over HTTP. Teams use it to send Event Grid events to a custom HTTPS application, API, Azure Function HTTP trigger, automation webhook, or supported workflow endpoint. It is not a storage queue, Event Hubs destination, or an endpoint that can skip Event Grid validation. In production, confirm the source, subscription, destination, filters, schema, identity, retry behavior, failure handling, monitoring, and owner before treating the route as safe.
Event Grid
intermediate
5 commands
Aliases: Event Grid webhook handler, webhook endpoint for Event Grid
Quick peek
Open full term page
Web
premium
Custom container web app
an Azure App Service web app that runs a team-supplied container image instead of a built-in runtime stack.
App Service
intermediate
4 commands
Aliases: App Service custom container, Web App for Containers, containerized App Service app
Quick peek
Open full term page
Web
verified
WebJobs / background work
Azure WebJobs is a built-in App Service feature for running background tasks, scripts, and programs alongside a web, API, or mobile app. Jobs share the App Service plan and can run continuously, on demand, or by schedule, often using the WebJobs SDK for event-driven processing.
App Service
intermediate
6 commands
Aliases: Azure WebJobs, App Service WebJobs, background jobs, continuous WebJob, triggered WebJob
Quick peek
Open full term page
Storage
field-manual-complete
Storage static website
Azure Storage static website hosting lets a general-purpose v2 or BlockBlobStorage account serve static HTML, CSS, JavaScript, and image files from the special $web container. Operators enable the feature, set index and error documents, and then publish content through the account's web endpoint.
Storage accounts
intermediate
5 commands
Aliases: Azure Storage static website, static website hosting for storage, $web container website, storage website endpoint
Quick peek
Open full term page
Web
verified
Web app runtime stack
A web app runtime stack is the language and framework environment Azure App Service uses to run an application, such as .NET, Java, Node.js, Python, PHP, or a custom container. It affects supported versions, platform patching, startup behavior, and deployment compatibility.
App Service
intermediate
5 commands
Aliases: App Service runtime stack, web app stack, linuxFxVersion, language runtime stack
Quick peek
Open full term page
App platform
complete
Static Web App
Microsoft Learn describes Azure Static Web Apps as a service that automatically deploys full-stack web apps from a source repository. It serves static assets from globally distributed locations, integrates optional APIs, supports GitHub or Azure DevOps workflows, and provides routing, authentication, staging environments, and CLI support.
Static Web Apps
intermediate
5 commands
Aliases: static-web-app, Static Web App, Azure Static Web Apps, SWA, static web app resource, staticwebapp
Quick peek
Open full term page
App platform
complete
Static Web Apps configuration
Microsoft Learn describes Static Web Apps configuration as the staticwebapp.config.json file used to control routing and application behavior. It defines route rules, authorization requirements, response overrides, custom headers, navigation fallback, networking settings, and other global behavior for an Azure Static Web Apps site.
Static Web Apps
advanced
5 commands
Aliases: static-web-apps-configuration, Static Web Apps configuration, staticwebapp.config.json, Static Web Apps config file, SWA configuration, routes configuration
Quick peek
Open full term page
App platform
complete
Static Web Apps custom domain
Microsoft Learn describes custom domains for Azure Static Web Apps as mappings from your own domain name to a static web app. Configuration includes subdomain or apex-domain options, DNS records for validation and routing, and automatic SSL/TLS certificate creation for the custom domains you add.
Static Web Apps
intermediate
5 commands
Aliases: static-web-apps-custom-domain, Static Web Apps custom domain, Static Web App custom domain, SWA custom domain, custom hostname for Static Web Apps, staticwebapp hostname
Quick peek
Open full term page
Web
complete
Static Web Apps deployment token
A secret used by deployment tooling to publish content to an Azure Static Web Apps resource.
Static Web Apps
intermediate
5 commands
Aliases: static-web-apps-deployment-token, Static Web Apps deployment token, SWA deployment token, Static Web App deployment secret, staticwebapp api key, SWA_CLI_DEPLOYMENT_TOKEN
Quick peek
Open full term page
Web
complete
Static Web Apps environment
A production, preview, or named deployment instance for an Azure Static Web Apps application.
Static Web Apps
intermediate
5 commands
Aliases: static-web-apps-environment, Static Web Apps environment, SWA environment, Static Web Apps preview environment, Static Web Apps named environment, Static Web Apps production environment
Quick peek
Open full term page
Web
complete
Static Web Apps linked backend
An external API service connected to a Static Web App so front-end requests can reach it through the app API route.
Static Web Apps
intermediate
5 commands
Aliases: static-web-apps-linked-backend, Static Web Apps linked backend, SWA linked backend, bring your own API, Static Web Apps BYO API, Static Web Apps backend link
Quick peek
Open full term page
Web
complete
Static Web Apps managed functions
Built-in Azure Functions APIs deployed and managed with an Azure Static Web Apps site.
Static Web Apps
intermediate
5 commands
Aliases: static-web-apps-managed-functions, Static Web Apps managed functions, SWA managed functions, managed Functions API, Static Web Apps built-in API, Static Web Apps /api functions
Quick peek
Open full term page
Web
complete
Static Web Apps route rule
A staticwebapp.config.json rule that controls how a specific Static Web Apps route is authorized, rewritten, redirected, or handled.
Static Web Apps
intermediate
5 commands
Aliases: static-web-apps-route-rule, Static Web Apps route rule, SWA route rule, staticwebapp.config.json route, Static Web Apps routes, route authorization rule
Quick peek
Open full term page
Web
complete
Static Web Apps staging environment
Microsoft Learn describes Static Web Apps staging and preview environments as hosted pre-production versions of a static app. Pull requests can create temporary review URLs, and named preview environments can provide stable locations for branch testing before changes are merged or promoted to production.
Static Web Apps
intermediate
5 commands
Aliases: static-web-apps-staging-environment, Static Web Apps staging environment, SWA staging environment, Static Web Apps preview environment, pre-production Static Web App, Static Web Apps branch environment
Quick peek
Open full term page
Storage
complete
Static website hosting
Microsoft Learn describes static website hosting in Azure Storage as a Blob Storage feature that serves HTML, CSS, JavaScript, and image files from a special $web container through a static website endpoint. The feature supports index and error document configuration for public read-only web content.
Blob Storage
intermediate
5 commands
Aliases: static-website-hosting, Static website hosting, Azure Storage static website, Blob Storage static website, storage static website, static website endpoint
Quick peek
Open full term page
Storage
complete
Static website hosting for storage
Microsoft Learn explains that Azure Storage can host static web content from a general-purpose v2 or BlockBlobStorage account. Enabling the feature creates or uses the $web container, where HTML, CSS, JavaScript, and images are served through the account website endpoint.
Storage account
intermediate
5 commands
Aliases: static-website-hosting-for-storage, Static website hosting for storage, Azure Storage static website hosting, storage account static website, Blob service static website, web endpoint for storage
Quick peek
Open full term page
Storage
complete
Storage account static website
Storage account static website is a Blob Storage feature that serves HTML, CSS, JavaScript, and image files from the special $web container through a web endpoint. It supports simple static sites without app servers. The endpoint is commonly fronted by CDN or Azure Front Door.
Storage accounts
fundamentals
5 commands
Aliases: Storage account static website, storage account static website, storage-account-static-website, static website hosting, storage static website, $web container
Quick peek
Open full term page
Web
field-manual-ready
Multi-container web app
A multi-container web app is an App Service workload made from multiple cooperating containers rather than one application image.
Azure App Service
intermediate
4 commands
Aliases: Docker Compose web app, App Service multi-container, multi-container web app, App Service sidecar, Docker Compose App Service
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Studio
Synapse Studio is the browser-based workspace experience for Azure Synapse Analytics. It exposes hubs for data, development, integration, monitoring, and management, letting users author notebooks and SQL scripts, build pipelines, configure connections, review access, and work with Git-backed or live artifacts.
Synapse Analytics
fundamentals
6 commands
Aliases: Azure Synapse Studio, Synapse web workspace, Synapse workspace UI, Synapse authoring experience
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Tags
Tags are labels you attach to Azure things so people and tools can understand what they are for. A tag has a name and a value, such as Owner=DataPlatform or Environment=Prod. Tags do not make a virtual machine faster, secure a database, or change a web app setting. They make the estate easier to organize, report on, govern, and automate. Useful tags answer questions the business actually asks: who owns this, what does it support, what environment is it, and who pays for it?
Tags and naming
advanced
5 commands
Aliases: Azure tags, resource tags, name-value tags, Azure metadata tags
Quick peek
Open full term page
Identity
learning-path-anchor
System-assigned managed identity
A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request...
Managed identities
intermediate
4 commands
Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity
Quick peek
Open full term page
Monitoring and Observability
learning-path-anchor
Throughput
Throughput is the amount of work a system completes over time, such as requests, messages, bytes, events, or transactions per second. In Azure, teams measure it with service metrics, logs, and capacity settings to judge whether an app, database, storage account, or messaging pipeline can sustain demand.
Performance
intermediate
4 commands
Aliases: Throughput, throughput, Azure Throughput, Microsoft Learn Throughput, requests per second, events per second, transactions per second, bytes per second, work completed over time
Quick peek
Open full term page
Storage
premium
Append Block
the Blob Storage operation that commits a new block of data to the end of an existing append blob.
Blob Storage
intermediate
12 commands
Aliases: Append Block, append block
Quick peek
Open full term page
Databases
premium
Cosmos DB trigger
Cosmos DB trigger is a registered JavaScript pre-trigger or post-trigger for Cosmos DB for NoSQL operations inside a container. It runs server-side logic around an item operation when application code explicitly asks Cosmos DB to use it. You see it when teams maintain legacy NoSQL scripts, troubleshoot write behavior, or compare triggers with change feed and Azure Functions. The production check is whether the trigger is necessary, explicitly invoked, partition-scoped, tested, and safer than handling the logic in application code. Document the decision in code, templates, metrics, and runbooks.
Azure Cosmos DB
intermediate
8 commands
Aliases: No aliases yet
Quick peek
Open full term page
Web
premium
App Service private endpoint
An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access.
App Service Networking
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Compute
premium
Azure Functions
Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers.
Serverless compute
intermediate
6 commands
Aliases: Functions, Function App, serverless functions
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Networking
premium
DDoS Protection
Azure DDoS Protection is a network-layer protection service that helps defend Azure public IP resources against distributed denial-of-service attacks using always-on traffic monitoring, adaptive mitigation, telemetry, and response capabilities.
Network security
intermediate
6 commands
Aliases: Azure DDoS Protection, DDoS Network Protection, DDoS IP Protection, distributed denial of service protection
Quick peek
Open full term page
Integration
premium
Event subscription
An Event subscription is an Event Grid configuration that selects events from a source and delivers matching events to a destination endpoint. Teams use it to route storage, resource, custom, or partner events to the correct webhook, function, queue, topic, or event handler. It is not the event source itself, an Azure subscription, an Event Hubs consumer group, or proof that the destination successfully processed every event. In production, confirm source scope, event types, filters, endpoint URL or resource ID, authentication method, dead-letter destination, retry settings, diagnostic logs, and receiving application owner before treating the design as healthy or ready.
Event Grid
intermediate
6 commands
Aliases: Event Grid subscription, event routing subscription, event delivery subscription
Quick peek
Open full term page
Web
premium
Extension bundle
An Extension bundle in Azure Functions is a packaged set of binding extensions that non-.NET function apps can reference from host.json. Teams use it to enable triggers and bindings such as Storage, Service Bus, Event Hubs, Cosmos DB, and Timer support without manually installing individual .NET extension packages. It is not the function runtime itself, an application dependency lock file, a deployment slot, or a guarantee that every trigger version supports every identity or feature.
Azure Functions
intermediate
6 commands
Aliases: Azure Functions extension bundle, Functions extension bundle, binding extension bundle
Quick peek
Open full term page
Containers
premium
External ingress
External ingress in Azure Container Apps allows traffic from outside the Container Apps environment to reach a container app endpoint. Teams use it to publish a container app to callers outside the environment, including users, APIs, webhooks, partners, or front-end gateways that need a reachable HTTPS or TCP endpoint. It is not internal-only ingress, a custom domain certificate, a network security guarantee, or proof that authentication, authorization, rate limits, and backend health are configured correctly.
Azure Container Apps
intermediate
6 commands
Aliases: external Container Apps ingress, public ingress, internet-facing ingress
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry IQ
Foundry IQ is a managed knowledge layer for Microsoft Foundry that connects enterprise data into reusable, permission-aware knowledge bases for AI agents. Teams use it to ground agents in approved enterprise knowledge from Azure, SharePoint, OneLake, the web, and Azure AI Search-backed knowledge bases while preserving permissions and reusable retrieval configuration. It is not a general data lake, a replacement for source-system permissions, a guarantee that retrieved content is correct, or a reason to skip citation, freshness, and access reviews.
Microsoft Foundry
intermediate
6 commands
Aliases: Microsoft Foundry IQ, Foundry IQ knowledge base, managed knowledge layer, permission-aware knowledge base
Quick peek
Open full term page
Web
premium
Function deployment slot
Function deployment slot is a separate deployment environment inside a Function App that can host a release before it becomes the production slot. Teams use it to test code, app settings, warmup behavior, and integrations under the same app boundary before swapping traffic to the new version. In daily Azure work, it appears when engineers deploy a queue processor safely, warm an HTTP API, test slot settings, or roll back a bad serverless release without rebuilding the app.
Azure Functions
intermediate
6 commands
Aliases: Azure Functions deployment slot, function app slot, staging slot for Functions
Quick peek
Open full term page
Web
premium
Functions Premium plan
Functions Premium plan is a hosting plan for Azure Functions that keeps capacity ready while still supporting event-driven scaling for serverless workloads. Teams use it to reduce cold starts, run longer or heavier functions, use VNet integration, and control minimum and maximum capacity more deliberately than Consumption hosting. In daily Azure work, it appears when engineers stabilize latency-sensitive APIs, connect functions to private dependencies, prepare for event spikes, or replace overprovisioned dedicated App Service capacity. It is not a free tier, a guarantee that code is efficient, unlimited scale, or a substitute for trigger tuning and dependency performance testing.
Azure Functions hosting
advanced
6 commands
Aliases: Elastic Premium plan, Azure Functions Premium, EP plan
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Integration
premium
Service Bus topic
Service Bus topic is a publish-subscribe entity inside a Service Bus namespace. Publishers send one message to the topic, and matching subscriptions receive their own copies. Topics are used when several downstream systems need the same business event without coupling the publisher to every receiver.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus topic, Service Bus pub-sub topic, topic entity, broker topic
Quick peek
Open full term page
Web
premium
Service Bus trigger
Service Bus trigger is an Azure Functions binding that starts function execution when a message arrives on a Service Bus queue or topic subscription. It connects the Functions runtime to Service Bus, supports queue, topic, and session scenarios, and uses app settings or identity-based connections for access.
Azure Functions
intermediate
6 commands
Aliases: Azure Functions Service Bus trigger, ServiceBusTrigger, Service Bus queue trigger, Service Bus topic trigger
Quick peek
Open full term page
Containers
premium
ACR Task
An ACR Task is automation inside Azure Container Registry for building, testing, patching, or maintaining container images. Instead of relying only on a developer laptop or separate build server, the registry can run a build from source, a.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry Task, ACR Tasks, registry task
Quick peek
Open full term page
Monitoring and Observability
premium
Action group
An Azure Monitor action group defines who gets notified and which actions run when an alert fires. It can include notification receivers such as email, SMS, and push, plus automation actions such as webhooks, secure webhooks, Azure Functions, Logic Apps, runbooks, ITSM, or Event Hubs.
Alerts
fundamentals
5 commands
Aliases: Azure Monitor action group, alert action group, monitor action group
Quick peek
Open full term page
Analytics
premium
Activity
Activity is a single work step inside an Azure Data Factory or Synapse pipeline. In everyday Azure work, teams use it to copy data, run a notebook, call a web endpoint, validate a condition, or control pipeline branching. The useful evidence is activity type, dependencies, retry policy, linked service, inputs, outputs, and run status. Treat
Data Factory
fundamentals
5 commands
Aliases: Data Factory activity, pipeline activity, Synapse pipeline activity
Quick peek
Open full term page
Web
premium
Activity function
Activity function is the worker function called by a Durable Functions orchestrator to perform one concrete unit of work. In everyday Azure work, teams use it to move side effects such as API calls, database writes, document generation, or messages out of deterministic orchestration code. The useful evidence is activity name, orchestration instance ID, retry
Durable Functions
intermediate
5 commands
Aliases: Durable Functions activity, Durable activity function, orchestrator activity
Quick peek
Open full term page
Integration
premium
Advanced event filter
Advanced event filter is an Event Grid subscription filter that matches event fields and data values using advanced operators. In everyday Azure work, teams use it to route only the events that a handler actually needs, without creating separate topics for every condition. The useful evidence is event subscription, key path, operator type, values, event
Event Grid
intermediate
5 commands
Aliases: Event Grid advanced filter, advanced filtering, event subscription advanced filter
Quick peek
Open full term page
Containers
premium
AKS ingress controller
Microsoft Learn explains AKS ingress through Kubernetes ingress resources and controllers that route HTTP or HTTPS traffic to services in a cluster. AKS application routing options can configure ingress controllers, DNS integration, TLS handling, and related networking components for production applications.
AKS networking
intermediate
5 commands
Aliases: AKS ingress, Ingress controller for AKS, Kubernetes ingress controller
Quick peek
Open full term page
Identity
premium
App registration
An app registration is the identity profile for an application, not the application code itself. It tells Microsoft Entra ID how the app is allowed to sign in users or request tokens. It contains values developers copy into configuration, such as client ID, tenant, redirect URI, credentials, and permissions. When sign-in breaks, consent fails, or tokens contain the wrong audience, the app registration is often where engineers look first. It is the contract between the app, Entra ID, administrators, and downstream APIs.
Applications
fundamentals
5 commands
Aliases: Microsoft Entra app registration, application registration
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search