Azure For Intermediate
A complete, category-by-category catalog of Microsoft Azure services, with technical descriptions written for readers who already understand cloud, networking, and software fundamentals.
This is a working reference to Azure’s service catalog, written for engineers who already understand core cloud concepts — VMs, containers, IAM, load balancing, managed databases — and want a fast, technically accurate overview of what each Azure product does, how it’s typically positioned, and where it fits relative to adjacent services. It assumes familiarity with general distributed-systems and networking terminology rather than re-explaining it from scratch.
1Compute Services
The execution layer — from raw VMs to fully abstracted serverless runtimes.
Virtual Machines
IaaS with configurable VM series (general purpose, compute-optimized, memory-optimized, GPU), Availability Sets/Zones for resilience, and Spot VMs for interruptible, cost-sensitive workloads.
App Service
PaaS with deployment slots for blue-green releases, App Service Plans determining scale-out/up limits, and support for multiple language runtimes and custom containers.
Azure Kubernetes Service (AKS)
Managed Kubernetes control plane (free) with customer-managed node pools, cluster autoscaler, and native integration with Microsoft Entra ID for pod-level workload identity.
Azure Container Apps
Serverless container hosting built on KEDA (event-driven autoscaling) and Dapr (microservices building blocks), positioned between Container Instances and full AKS.
Azure Container Instances
Fastest path to running a single container group without orchestration overhead, billed per second, commonly used for burst compute or CI/CD build agents.
Azure Functions
Event-driven FaaS across Consumption (scale-to-zero, cold starts), Premium (pre-warmed instances, VNet integration), and Dedicated (App Service Plan-backed) hosting plans.
Azure Batch
Schedules large-scale parallel and HPC-style compute jobs across pools of VMs, handling job queuing and automatic scaling of the underlying compute pool.
Azure Dedicated Host
Physical servers dedicated to a single subscription, used to satisfy per-core licensing requirements or strict compliance/isolation mandates.
Virtual Machine Scale Sets
Manages a group of identical, load-balanced VMs with autoscale rules based on metrics or schedules, forming the underlying compute layer for many PaaS services.
2Storage Services
Persistence layers differentiated by access pattern and durability requirements.
Blob Storage
Object storage with Hot/Cool/Cold/Archive access tiers, lifecycle management policies for automated tiering, and strong read-after-write consistency.
Azure Files
Fully managed SMB and NFS file shares, optionally extended on-premises via Azure File Sync for a hybrid caching layer with cloud tiering.
Managed Disks
Block storage in Standard HDD, Standard SSD, Premium SSD, and Ultra Disk tiers, each with distinct IOPS/throughput ceilings independent of attached VM size on Ultra Disk.
Azure NetApp Files
Enterprise-grade NFS/SMB file storage delivering sub-millisecond latency, commonly used for latency-sensitive workloads like SAP HANA or high-performance file shares.
Data Movement Tools (AzCopy, Storage Explorer)
AzCopy provides high-throughput command-line data transfer with automatic parallelization; Storage Explorer offers a GUI for browsing and managing storage resources across subscriptions.
3Database Services
Managed persistence engines chosen by consistency model, compatibility, and scale ceiling.
Azure SQL Database
Managed SQL Server with DTU (bundled) or vCore (independent compute/storage) purchasing models, elastic pools for cost-sharing across many databases, and active geo-replication.
Azure SQL Managed Instance
Near-100% SQL Server engine compatibility (including cross-database queries and SQL Agent), positioned for lift-and-shift migrations that Azure SQL Database’s PaaS model can’t accommodate.
Cosmos DB
Multi-model (SQL/Core, MongoDB, Cassandra, Gremlin, Table APIs) globally distributed database offering five tunable consistency levels between strong and eventual, with automatic multi-region failover.
Azure Database for PostgreSQL/MySQL
Flexible Server deployment offers granular compute/storage control and zone-redundant HA; Single Server (legacy) offers simpler management with less configuration flexibility.
Azure Cache for Redis
Managed Redis across Basic, Standard, Premium, and Enterprise tiers, with clustering, geo-replication, and Redis modules available only at higher tiers.
Azure Database Migration Service
Supports both offline (downtime-based) and online (continuous replication, minimal-downtime) migration paths into Azure SQL, Managed Instance, or open-source database targets.
4Networking Services
The transport, routing, and edge layer connecting workloads to each other and to clients.
Virtual Network (VNet)
Regional software-defined network supporting VNet peering (including global peering across regions), service endpoints, and private endpoints for PaaS connectivity.
Azure Load Balancer
Layer 4 load balancing in Basic and Standard SKUs, supporting both public-facing and internal-only configurations with zone-redundant frontends on Standard.
Application Gateway
Layer 7 load balancer with path-based routing, SSL termination, and an integrated Web Application Firewall (WAF) tier for OWASP-based protection.
Azure Front Door
Global, Anycast-based HTTP(S) load balancing combined with CDN and WAF capabilities at Microsoft’s edge, positioned above regional Application Gateway deployments.
ExpressRoute
Private, SLA-backed connectivity to Azure bypassing the public internet, offered via a connectivity provider with predictable bandwidth and lower latency than VPN.
VPN Gateway
Site-to-site and point-to-site IPsec/IKE VPN tunnels terminating on Azure’s edge, available in Basic through high-throughput SKUs with active-active configurations for redundancy.
Azure Firewall
Managed, stateful network firewall-as-a-service with built-in high availability and threat intelligence-based filtering, avoiding the need to manage a self-hosted NVA.
Network Watcher
Provides packet capture, connection troubleshooting, and effective route/security rule analysis for diagnosing connectivity issues at the network layer.
Private Link
Exposes PaaS services (Storage, SQL Database, etc.) via a private IP inside a VNet, routing traffic over Microsoft’s backbone instead of the public internet.
5Big Data & Analytics Services
Unifying data warehousing, big data processing, and business intelligence.
Azure Synapse Analytics
Unifies dedicated SQL pools (data warehousing), serverless SQL pools (ad-hoc querying over the data lake), and Spark pools (big data processing) within a single workspace.
Azure Data Factory
Pipeline orchestration and data integration service using integration runtimes to support hybrid scenarios, moving and transforming data between on-premises and cloud sources.
Azure Databricks
First-party managed Apache Spark platform built in partnership with Databricks, offering deep integration with Microsoft Entra ID and Azure storage services.
Azure Stream Analytics
Serverless, SQL-like real-time stream processing engine, commonly paired with Event Hubs or IoT Hub as the ingestion source.
Azure Data Lake Storage Gen2
Adds a hierarchical namespace on top of Blob Storage, enabling efficient directory-level operations required by big data analytics engines like Spark and Hive.
Power BI
Business intelligence platform using DAX for data modeling, connecting to a wide range of data sources including live connections to Synapse and Analysis Services.
6AI & Machine Learning Services
From pre-trained inference APIs to full MLOps tooling for custom models.
Azure Machine Learning
End-to-end MLOps platform with a drag-and-drop designer, AutoML for automated model selection, and managed online/batch endpoints for deployment.
Cognitive Services
A family of pre-trained APIs spanning Vision, Speech, Language, and Decision categories, callable via REST/SDK without training custom models.
Azure OpenAI Service
Provides enterprise access to OpenAI’s models (GPT, embeddings, DALL-E) with private networking, content filtering, and regional data residency controls not available through OpenAI’s public API.
Bot Service
Built on the Bot Framework SDK, providing channel connectors (Teams, web chat, etc.) and integration with Cognitive Services for natural language understanding.
7Developer Tools & CI/CD Services
The build, artifact, and deployment pipeline layer.
Azure DevOps
An integrated suite covering Boards (work tracking), Repos (Git hosting), Pipelines (CI/CD), Artifacts (package feeds), and Test Plans, usable independently or together.
Azure Pipelines
YAML-based multi-stage CI/CD supporting both Microsoft-hosted and self-hosted agents, with approval gates and environment-based deployment tracking.
GitHub Actions Integration
Since Microsoft owns GitHub, Azure provides first-party GitHub Actions for deploying directly to Azure services, often preferred over Azure Pipelines for GitHub-native repositories.
Azure Artifacts
Hosts package feeds for npm, NuGet, Maven, and Python, with upstream sources letting teams proxy public registries alongside private packages.
8Operations & Monitoring Services
The observability stack spanning metrics, logs, and traces.
Azure Monitor
The umbrella platform unifying Metrics (near real-time numeric time series) and Logs (queryable via Kusto Query Language) across Azure resources.
Application Insights
An Azure Monitor feature providing APM capabilities — distributed tracing, dependency tracking, and failure diagnostics — for web and API applications.
Log Analytics Workspace
The underlying data store for Azure Monitor Logs, queried using KQL (Kusto Query Language), supporting cross-resource and cross-subscription queries.
Azure Automation
Runs PowerShell/Python runbooks on a schedule or in response to events, commonly used for operational tasks like VM start/stop scheduling or configuration drift remediation.
9Security & Identity Services
Access control, encryption, and threat detection across the platform.
Microsoft Entra ID (Azure AD)
Supports Conditional Access policies (context-aware access rules), multi-factor authentication, and Privileged Identity Management (PIM) for just-in-time elevated role assignment.
Key Vault
Stores keys, secrets, and certificates with optional HSM-backed protection, supporting both a legacy access policy model and a newer, more granular Azure RBAC model for permissions.
Microsoft Defender for Cloud
Combines Cloud Security Posture Management (CSPM) with workload-specific threat protection plans, providing a Secure Score to quantify overall security posture.
Azure Policy
Enforces organizational standards at scale via policy definitions and initiatives, with effects ranging from audit-only to automatic remediation of non-compliant resources.
Microsoft Sentinel
A cloud-native SIEM and SOAR platform built on Log Analytics, using analytics rules and playbooks (Logic Apps-based) to detect and automatically respond to security incidents.
10Migration Services
Moving existing workloads and data into Azure with minimal disruption.
Azure Migrate
Provides discovery and assessment of on-premises VMs and databases (sizing recommendations, cost estimates) before orchestrating the actual migration.
Azure Database Migration Service
Handles schema and data migration into Azure SQL targets, supporting continuous replication for near-zero-downtime cutovers on supported source engines.
Azure Site Recovery
Provides continuous replication of on-premises or Azure VMs to a secondary region for disaster recovery, distinct from Azure Migrate’s one-time migration focus.
11Serverless & Application Integration Services
Connecting applications and automating workflows without managing infrastructure.
Logic Apps
Low-code, visual workflow automation with hundreds of pre-built connectors, running on either a multi-tenant Consumption plan or an isolated Standard plan.
Event Grid
A fully managed event routing service using a publish-subscribe model, natively integrated with most Azure services as event sources without custom polling code.
Service Bus
Enterprise messaging with queues (point-to-point) and topics (publish-subscribe), supporting sessions, dead-lettering, and duplicate detection for reliable enterprise integration.
Event Hubs
A big-data streaming ingestion service compatible with the Apache Kafka protocol, designed for millions of events per second from sources like telemetry and clickstreams.
12API Management Services
Publishing, securing, and monitoring APIs at scale.
Azure API Management
Full API lifecycle management with policy-based request/response transformation, rate limiting, a developer portal for API consumers, and support for both cloud and self-hosted gateways.
13Hybrid & Multicloud Services
Extending Azure’s management plane beyond Azure’s own data centers.
Azure Arc
Extends Azure Resource Manager, Azure Policy, and monitoring to servers, Kubernetes clusters, and data services running on-premises or in other clouds, without migrating the workloads themselves.
Azure Stack HCI
A hyperconverged infrastructure operating system for running virtualized workloads on-premises while integrating with Azure for monitoring, backup, and hybrid management.
Azure VMware Solution
Runs a native, first-party VMware SDDC stack (vSphere, vSAN, NSX-T) directly on Azure infrastructure, supporting lift-and-shift VMware migrations without hypervisor conversion.
Key Takeaways
- Service selection within a category is usually a compatibility vs. scale vs. management-overhead trade-off — e.g., Azure SQL Database vs. SQL Managed Instance, or AKS vs. Container Apps.
- Microsoft Entra ID is the identity backbone connecting nearly every other service — Conditional Access and PIM are core enterprise security controls, not optional extras.
- Azure’s networking stack layers cleanly: VNets for isolation, Load Balancer/App Gateway for regional traffic, Front Door for global edge routing — matching the right layer to the actual requirement matters.
- Cosmos DB’s tunable consistency levels and Synapse’s unified warehouse-plus-Spark model are two of Azure’s most architecturally distinctive design choices.
- Hybrid tooling (Azure Arc, Stack HCI, Azure VMware Solution) reflects Azure’s strong enterprise and on-premises heritage compared to other major clouds.
- This catalog changes frequently — validate current service tiers, SLAs, and regional availability against official Azure documentation before finalizing an architecture.