Cognitive Services in Azure

Cognitive Services in Azure

A complete, plain-English guide to Azure's ready-made artificial intelligence services that see, hear, read, speak, and translate: what each one does, how a request really travels, how to keep it secure and affordable, and how to build with it in production.

Imagine you run a small travel company and you want your app to do something clever. A customer takes a photo of a passport, and the app reads the name and number. A customer speaks a question in Spanish, and the app answers in English text. A customer writes an angry review, and the app flags it for a manager within seconds. Ten years ago, each of those features would have needed a team of scientists, a mountain of training data, and months of work. Today, you can add each one with a few lines of connection settings and pay only for what you use.

That is the promise of Azure Cognitive Services: ready-made artificial intelligence that you rent by the request, the way you rent electricity by the unit. Microsoft has since renamed the family Azure AI Services, and has changed the names of some surrounding tools more than once, but the idea is the same, and many people still use the older name. In this guide you will learn what these services are, why they exist, every important part, how one request travels from your app to the answer and back, and the mistakes that trip up even experienced engineers. Each new word is explained the first time it appears, so you can begin with no background at all.

1What Cognitive Services Are

Start with the big picture: what you get, what the word cognitive means here, and what the service is not.

The word cognitive relates to thinking and understanding: seeing, hearing, reading, and making sense of the world. Cognitive Services are cloud services that give your software some of those human-like abilities. Each ability is offered as an API, which stands for application programming interface. An API is a menu of requests that one program can send to another. Your app sends a picture, and the API sends back a description. Your app sends an audio clip, and the API sends back the words that were spoken. You never see the complicated model that does the work, and you never train it yourself.

These services are called prebuilt or pre-trained. Microsoft has already taught the underlying models, using enormous amounts of data and powerful computers. You simply use them. That is very different from machine learning projects in which you gather your own data, train your own model, and host it yourself. The prebuilt route is much faster and cheaper for common tasks. When a prebuilt service is not quite right, many of them also allow customization, where you teach the model a little about your own special words or images without starting from scratch.

Analogy

Think of a big city with specialist professionals you can hire by the hour: a translator, a stenographer, an art appraiser, a proofreader. You do not train them or give them a salary. You hand over a task, pay a small fee, and receive the finished result. Cognitive Services are those specialists for software, available any time, day or night.

Prebuilt
Already trained, ready to call from your app
By request
Paid mostly per transaction or per unit used
5 senses
Vision, speech, language, decision, and search

A short history

Microsoft Research spent many years teaching computers to recognize images and speech. In 2015 and 2016, Microsoft released a set of these abilities to developers under the name Project Oxford, which soon became Azure Cognitive Services. Over the years the family grew to include vision, speech, language, translation, form reading, and more. In 2023, Microsoft joined the family closely to its Azure OpenAI offering and rebranded the group as Azure AI Services. Some older services were retired and replaced by newer ones. For example, a language understanding tool called LUIS and a question tool called QnA Maker were replaced by newer language features. Because names and service lists keep changing, always check Microsoft’s current service list before you plan a project.

i
Tip

Prices, limits, service names, and model versions change often in this area. Use the ideas in this guide as a map and confirm exact details in Microsoft’s current documentation before you finalize a design.

2The Problem It Solves

Every tool exists because something hurt. Here is the pain that Cognitive Services remove.

Suppose you want your app to read text from photographs of receipts. You could build this yourself. You would need thousands of labeled receipt photos, a machine learning expert, powerful graphics processors to train the model, weeks of experiments, and a hosting system that can answer quickly under heavy traffic. Then you would need to keep improving the model as new receipt designs appear. For one feature, that is a huge project. For a company that wants ten such features, it is out of reach.

Prebuilt services change the math. The model already exists and is already running on Microsoft’s computers around the world. It improves over time without you doing anything. Your job shrinks to a simple one: send the data, receive the answer, and decide what your app does with it. This lets small teams add features that once belonged only to giant technology companies.

Pain 1

Need rare expertise

Building vision, speech, or language models needs scientists that most companies cannot hire.

Pain 2

Huge data and compute

Training good models needs vast data and expensive specialized hardware.

Pain 3

Slow time to market

Custom projects take months before the first customer sees a benefit.

Pain 4

Hard to run at scale

Serving models quickly to thousands of users at once is its own engineering challenge.

Everyday example: the support inbox

A company receives ten thousand customer emails per day in many languages. A small team connects the emails to a translation service and a language service. Each email is translated into English, scored for sentiment, and checked for personal details. Angry or urgent messages jump to the top of the queue within seconds. The whole system was built in two weeks by two engineers, with no model training at all.

3Core Concepts: Resources, Keys, Endpoints, and Tiers

Before you use any of the services, learn the small set of words Azure uses to organize them.

In Azure, almost everything you use is a resource, a named item that lives in your subscription and that you can configure and pay for. To use Cognitive Services, you create a resource of this family. There are two styles. A single-service resource gives you access to one service, such as Speech or Vision. A multi-service resource gives you one connection that works for many services at once, which is simpler when your app uses several of them. A single-service resource can have its own pricing and its own free tier, and is handy when you want to track costs or control access per service.

Every resource has an endpoint, which is its web address, the place your app sends requests. Endpoints belong to a region, the geographic area of Azure data centers, such as West Europe or East US, where your resource and its processing live. Choosing a region close to your users reduces delay, and choosing the right region can matter for rules about where data may be processed.

To prove who you are, a resource gives you two keys. A key is a long secret code that you send with each request, like a membership card. There are two so that you can change one without breaking your app: switch your app to key two, replace key one, and so on. A better and more modern alternative is to use Microsoft Entra ID with a managed identity, where your app proves its identity without any stored secret at all. We will look at this more closely later.

Finally, every resource has a pricing tier, also called an SKU. The Free tier, usually named F0, gives a small monthly allowance at no cost, perfect for learning and testing. The Standard tier, usually named S0, is pay as you go. Some services also offer commitment tiers, where you agree to a monthly amount of usage in return for a lower rate.

TermPlain meaningWhy it matters
ResourceThe Azure item you create and pay forHolds your settings, keys, and billing
Multi-service resourceOne resource for many AI servicesOne endpoint and one key for simplicity
Single-service resourceA resource for one AI serviceSeparate cost and access control, and free tiers
EndpointThe web address of your resourceWhere your app sends requests
RegionThe Azure geography where it runsAffects speed, rules, and which features exist
KeyA secret code proving who you areMust be protected and rotated
Pricing tierFree, Standard, or commitmentDecides cost and quotas
Analogy

Think of a gym membership. The resource is your account at the gym. The multi-service resource is an all-access pass for every room, while a single-service resource is a pass for just the pool. The endpoint is the gym’s address, the key is your membership card, the region is which branch you attend, and the tier is whether you chose the free trial or the monthly plan.

!
Warning

Anyone who holds your key can use your resource and run up your bill. Never put keys in web pages, mobile apps that users can inspect, or public code repositories. Keep them in a secret store such as Azure Key Vault, or avoid keys entirely by using managed identities.

4Architecture and Components

Now let us look at how an application, the Cognitive Services resource, and the models behind it fit together.

A typical design has four zones. First is your client, the part that collects the data: a mobile app, a website, a backend service, or a device in a factory. Second is your application backend, the code you run in Azure, in a function, a container, or a web app. It decides which service to call, holds the connection settings safely, and handles the answers. Third is the Cognitive Services resource, the managed front door that receives the request, checks who you are, applies limits, and counts usage. Fourth are the models, the trained systems on Microsoft’s computers that actually do the thinking.

Around these sit supporting services. Microsoft Entra ID proves identities. Azure Key Vault keeps secrets safe. Azure Monitor records metrics and logs. Azure Storage often holds the input files and the results. A private network can hide the whole path from the public internet.

flowchart LR
    CL["Client app or device"] --> BE["Application backend"]
    BE -->|"authenticate"| ID["Microsoft Entra ID or key from Key Vault"]
    BE --> EP["Cognitive Services endpoint"]
    EP --> GW["Front door - auth and rate limits"]
    GW --> M1["Vision models"]
    GW --> M2["Speech models"]
    GW --> M3["Language models"]
    BE --> ST["Storage for inputs and results"]
    EP -.->|"metrics and logs"| MON["Azure Monitor"]
    
Figure 1. Your backend calls the resource endpoint, which checks identity and limits before reaching the models.

Read the diagram from left to right. The client never talks directly to the AI models. It talks to your backend, which holds the keys or identity. The backend calls the endpoint of your resource. The front door checks that you are allowed, applies limits to protect the shared system, and passes the request to the right model. The answer returns along the same path. Meanwhile, numbers about every call flow into Azure Monitor, so you can see usage, errors, and speed.

Your side

Client and backend

Collect the data, hold secrets safely, and decide what to do with the answers.

Azure front door

Resource endpoint

Checks identity, applies limits, and counts usage for billing.

The thinking

Pre-trained models

Vision, speech, language, and other models run on Microsoft’s computers.

Identity

Entra ID and Key Vault

Prove who you are without scattering secrets.

Data

Storage

Holds source files such as images and audio, and the results.

Watching

Azure Monitor

Records metrics, logs, and alerts for every resource.

5Vision: Teaching Software to See

Vision services turn pictures and documents into text and facts your software can use.

The Azure AI Vision service looks at images and tells you what is in them. Its abilities fall into a few groups. Image analysis produces a caption for a picture, a list of tags such as “outdoor,” “dog,” or “bicycle,” and can find objects and people, giving each a position in the image. It can also create a smart thumbnail that crops around the most important part. Optical character recognition, shortened to OCR, reads printed and handwritten text from photographs, scans, and screenshots and returns it as plain text with the position of each word. This is the technology that lets you photograph a menu or a sign and copy the words.

Vision also offers abilities for video and space. Spatial analysis can count people entering a shop or measure how long they stand at a display, using camera streams and without identifying anyone. Another group, face technology, can detect that a face is present and describe attributes such as its position in the picture. Because faces involve strong privacy concerns, Microsoft restricts the more sensitive face features and requires an application and approval for them, a policy called Limited Access. We will return to this in the chapter on responsible use.

If the prebuilt abilities do not fit your needs, you can use a custom approach. For example, a manufacturer can show the service several hundred photos of good and defective parts, and obtain a model that spots defects on its own production line. This is more work than the prebuilt options but far less than training a model from nothing.

flowchart TB
    IMG["Image or video frame"] --> V["Vision service"]
    V --> C["Caption and tags"]
    V --> O["Object and people locations"]
    V --> T["Text through OCR"]
    V --> S["Smart thumbnail"]
    V --> SP["People counting with spatial analysis"]
    
Figure 2. One image can produce many kinds of answers from the same service.
Analogy

Vision is like handing a photograph to a very observant assistant. You can ask, “What is in this picture?” and receive a short caption. You can ask, “Please read me the writing on the sign,” and get the words. You can ask, “Where exactly is the bicycle?” and get a rectangle drawn around it.

Everyday example: the online marketplace

A second-hand marketplace asks sellers to upload photos. Vision automatically tags each picture, such as “sofa, living room, grey,” so buyers can search by what they see. It also detects text in the images, helping the marketplace spot photos that contain phone numbers, which are against its rules.

i
Tip

Images have size and format limits. Resize large photos before sending them, because sending a huge picture costs time and bandwidth without improving the answer. A moderately sized image is usually enough.

6Speech: Teaching Software to Hear and Talk

Speech services convert between spoken sounds and written words, in many languages.

The Azure AI Speech service has four main abilities. Speech to text, also called transcription, listens to audio and writes down the words. It can do this in real time from a microphone, with words appearing as people speak, or in batch mode, where you submit many large recordings and collect the transcripts later. Text to speech does the opposite: it turns written words into natural sounding spoken audio, choosing from many voices and languages. Some voices are so natural that listeners may not realize they are synthetic, which is why strict rules apply to custom voices.

Speech translation combines listening and translating: a person speaks in one language and the service produces text or spoken audio in another. Speaker recognition, also available in some forms, can help tell who is speaking, which is useful for separating voices in a recorded meeting, a task called diarization. Another useful feature is pronunciation assessment, used in language learning apps to score how well a student pronounces words.

Real-time speech uses a continuous stream. The app opens a connection, sends audio in small pieces, and receives partial and final text as the person talks. For short phrases, a simpler one-shot request can be used, with a limit of about a minute of audio. For long recordings such as hour-long calls, use batch transcription.

1

Capture audio

A microphone or a recorded file provides the sound.

2

Send to Speech

The app streams the audio, or uploads a file for batch work.

3

Get words back

The service returns text, with time stamps and confidence scores.

4

Use the text

Pass it to Language for sentiment or summary, or to Translator for another language.

5

Talk back if needed

Text to speech turns the reply into a spoken voice.

Analogy

Speech to text is a court stenographer who types everything said in the room. Text to speech is a voice actor who reads any script you hand over. Speech translation is an interpreter at a conference, listening in one language and speaking in another, almost at once.

!
Warning

Recording people requires consent in many places. Tell users when audio is captured, and follow the privacy laws of the regions where they live. Technical ability to transcribe does not equal the legal right to record.

7Language: Teaching Software to Read

Language services understand the meaning inside written text.

The Azure AI Language service gathers many text understanding abilities in one place. Each ability takes in text and returns structured facts. Sentiment analysis says whether a piece of text sounds positive, negative, or neutral, both for the whole text and for each sentence, and can link opinions to the things they describe, such as “the food was great but the service was slow.” Key phrase extraction picks out the main talking points. Named entity recognition finds real-world things in text, such as people, places, companies, dates, and amounts of money. Language detection says which language a text is written in.

Several abilities help with privacy and size. PII detection finds personally identifiable information, such as names, phone numbers, and account numbers, and can redact it, replacing the sensitive parts with masks. Summarization shortens long documents or conversations into a few sentences, which is a great fit for call center notes. Other abilities help your app converse: conversational language understanding works out what a user wants and the important details in their message, such as “book a table for four on Friday.” Custom question answering lets you feed in your own documents and frequently asked questions so users can ask questions in plain words. If the built-in categories do not fit, custom text classification and custom named entity recognition let you teach the service your own labels from examples.

AbilityWhat goes inWhat comes outExample use
Sentiment analysisReview or message textPositive, negative, or neutral scoreFlag angry customers
Key phrasesA paragraphList of main topicsTag support tickets
Entity recognitionTextPeople, places, dates, amountsFill in forms automatically
PII detectionTextFound and masked personal dataProtect privacy in transcripts
SummarizationLong text or a conversationA short summaryCall center notes
Conversational understandingA user messageIntent and detailsChat assistants
Question answeringYour documents and a user questionThe best matching answerHelp center search
Analogy

Language is like a team of very fast readers. One reads a letter and tells you the mood. Another underlines the important names and dates. A third blacks out any private numbers. A fourth writes a three-line summary for the busy manager. Each does one job well, and you can use any of them without hiring the whole team.

Everyday example: the call center

A bank records thousands of customer calls each day. Speech converts the audio to text. Language removes card numbers and names, scores the sentiment of each call, extracts the main topics, and writes a short summary. Managers review a dashboard of unhappy topics, and the bank never stores raw personal details in its analytics system.

8Documents and Translation

Two services that handle the everyday business of paperwork and many languages.

Azure AI Document Intelligence

Businesses still run on forms: invoices, receipts, tax papers, identity cards, and contracts. Document Intelligence, formerly known as Form Recognizer, goes beyond plain OCR. It does not just read the words, it understands the structure of a document: which text is a heading, which numbers belong in a table, and which value belongs to which label. It offers prebuilt models for common documents, such as invoices, receipts, business cards, and identity documents, returning named fields like invoice number, vendor name, and total amount. It also offers a layout model that extracts text, tables, and checkboxes from any document, and custom models that you can train on a small number of your own sample forms so it learns your own special layouts.

Azure AI Translator

Translator converts text from one language to another, supporting a very large number of languages. It can detect the source language itself, translate to several target languages in a single call, and translate whole documents while keeping their formatting. A custom translator feature lets you provide your own example translations so the service learns your company’s special terms, such as product names that must never be translated. It can also transliterate, which means writing a word using a different alphabet without changing the language.

Documents

Prebuilt models

Ready for invoices, receipts, IDs, and more, returning named fields.

Documents

Layout model

Extracts text, tables, and structure from any document.

Documents

Custom models

Learn your own form layouts from a handful of examples.

Translation

Text translation

Translate into many languages with automatic source detection.

Translation

Document translation

Translate whole files while keeping their look.

Translation

Custom translator

Teach your own vocabulary and protect names from translation.

Analogy

Plain OCR is like a person reading aloud every word on a page without understanding it. Document Intelligence is like an experienced accounts clerk who knows that the number next to “Total” is the amount due and the one next to “Date” is the invoice date. Translator is a professional interpreter who also keeps a glossary of your special terms.

i
Tip

Always look at the confidence score that these services return along with each answer. A low confidence value is a signal to send that item to a human for checking, instead of trusting it blindly.

Everyday example: invoice processing

An accounts team receives two thousand invoices per month from many suppliers. A pipeline sends each one to the prebuilt invoice model, pulls out the vendor, date, line items, and total, and posts them into the finance system. Items with low confidence are put in a review queue. What used to take three people a week now takes one person a day.

9Safety, Search, and Generative AI

Beyond seeing, hearing, and reading, the family now includes services that guard content, find knowledge, and generate new text.

Azure AI Content Safety

Any app that lets people post text or images, or that shows machine-generated writing, needs a way to catch harmful material. Content Safety checks text and images for categories such as hate, sexual content, violence, and self-harm, and gives each a severity score. You choose how strict to be. An app for children can block even mild cases, while a news forum may allow more. It also offers tools to shield generative AI from attempts to trick it, often called prompt attacks, in which a user tries to make the system ignore its rules.

Azure AI Search

Azure AI Search, formerly Azure Cognitive Search, is a managed search engine for your own content. You load documents into an index, a structure built for very fast searching, and users can search it with keywords or with questions in plain words. It can also run skills during loading, which are small AI steps from the other Cognitive Services. For example, it can read text from scanned pages with OCR, detect languages, and extract names of people and places, then store all of that along with the document so that the search results are richer. This process is called AI enrichment.

Azure OpenAI Service

Azure OpenAI offers powerful large language models, systems trained on huge amounts of text that can write, summarize, answer questions, translate, and reason about text and sometimes images. It runs inside Azure with Azure’s security, networking, and compliance features. A common design called retrieval augmented generation, or RAG, pairs these models with search: the app first finds the most relevant pieces of your own documents using Azure AI Search, then hands them to the model, which writes an answer based on them. This keeps answers tied to your real information and reduces made-up facts.

flowchart LR
    U["User question"] --> APP["Application"]
    APP --> CS1["Content Safety check on the question"]
    CS1 --> SR["AI Search finds relevant passages"]
    SR --> LLM["Azure OpenAI writes an answer from the passages"]
    LLM --> CS2["Content Safety check on the answer"]
    CS2 --> ANS["Answer with sources"]
    
Figure 3. A retrieval augmented generation design combines search, a language model, and safety checks.
Analogy

Think of a very well-read assistant who has a great memory for general knowledge but has never seen your company’s files. The search service is the librarian who pulls the right pages from your filing cabinet. The language model is the assistant who reads those pages and writes you a clear answer. Content Safety is the editor who reads the final draft before it leaves the building.

!
Warning

Language models can produce confident answers that are wrong, a problem called hallucination. Ground answers in your own data, show sources, check outputs for important decisions, and never let a model’s answer alone trigger a risky action.

10Internal Working and Data Flow

What actually happens, step by step, when your app asks the service a question? Let us follow one request.

Suppose your backend wants to analyze the sentiment of a customer review. First, your code builds a request: a small package of data, usually in a text format called JSON, containing the review text and some options. It sends this package over a secure connection, protected by TLS, the encryption that keeps web traffic private, to your resource’s endpoint. The request carries your proof of identity: either a key, or a token obtained for your managed identity.

The request arrives at Microsoft’s front door in the region of your resource. Here several checks happen before any AI model is touched. The system confirms the key or token is valid, that the resource exists and is allowed to use this feature, that the network rules permit this caller, and that you have not gone over your allowed rate, the number of requests per second. If any check fails, the request is rejected early, with a clear error code, so no model time is wasted. If all checks pass, the front door sends your request to a pool of computers running the right model. The model analyzes the text and produces a result. The front door counts one transaction for billing, writes metrics, and returns the answer to your backend as another JSON package.

sequenceDiagram
    participant App as Your backend
    participant Door as Service front door
    participant Model as AI model pool
    participant Mon as Monitoring and billing
    App->>Door: Send request over TLS with key or token
    Door->>Door: Check identity, network rules and rate limit
    Door->>Model: Forward the valid request
    Model-->>Door: Return analysis result
    Door->>Mon: Record usage and metrics
    Door-->>App: Send answer as JSON
    
Figure 4. One synchronous request: checks first, thinking second, bookkeeping at the end.

Three styles of calling

Style 1

Synchronous

You send a request and wait for the answer in the same call. Best for short, quick tasks such as one sentiment score or one small image.

Style 2

Asynchronous

You submit a long job, receive a ticket, and come back later to collect the result. Used for big documents, long audio, and batches.

Style 3

Streaming

A connection stays open and data flows in pieces, as in live speech recognition or a model typing out its answer word by word.

For the asynchronous style, the pattern is the same across services. Your app submits the job and the service answers at once with an operation location, a web address where you can check progress. Your app then polls, meaning it checks that address every few seconds, until the status says succeeded. Then it fetches the result. Polling too fast wastes calls and may hit limits, so wait a sensible time between checks, or use a callback or event notification where the service offers one.

1

Submit the job

Send the large document or audio file and receive a job address.

2

Service queues and works

The job waits its turn, then is processed, perhaps in many parts at once.

3

Poll politely

Ask for status at gentle intervals instead of hammering the service.

4

Fetch the result

When the status is succeeded, download the structured answer.

5

Store and act

Save the result and continue with the next step of your workflow.

Analogy

A synchronous call is like asking a shop assistant a quick question at the counter and waiting for the reply. An asynchronous call is like leaving a large order at a print shop, taking a ticket, and coming back later to collect it. Streaming is like a live phone call, where words flow back and forth as they are spoken.

i
Tip

The processing is stateless for most calls, meaning the service does not remember your previous request. If your app needs context, such as a conversation history, your app must supply it with each new request.

11Authentication and Access Control

There are two ways to prove who you are. One is easy and risky. The other is better.

The first way is the key, a secret code sent with each request. It is simple to start with and works from any programming language. But a key is like a house key that anyone can copy: if it leaks, anyone can use your resource until you replace it. A key also gives full power over the resource’s calls, with no way to say “only for reading.”

The second way is Microsoft Entra ID, the Azure identity system. Your application runs with a managed identity, an identity that Azure creates and manages for it, with no password to store. You give that identity a role, a named set of permissions, on the resource. Common roles include Cognitive Services User, which allows calling the services, and Cognitive Services Contributor, which also allows managing the resource. This approach is called role based access control. It lets you give each application exactly the access it needs, remove access in one place, and see in logs who did what. For this method, your resource usually needs a custom subdomain, a name unique to you in its endpoint address.

FeatureKeyEntra ID with managed identity
Secret to storeYesNo secret needed
Risk if leakedHigh, full access until rotatedLow, tokens are short lived
Fine-grained permissionsNoYes, through roles
Audit of who calledWeak, one shared keyStrong, per identity
Ease of first setupVery easyA few more steps
Good forLearning and quick testsProduction systems

For the highest security, you can turn off local authentication on the resource, which disables keys completely, so that the only way in is through Entra ID. Where you must keep keys, store them in Azure Key Vault, give your app access to the vault through its managed identity, and rotate keys regularly, using the two-key design to switch without downtime.

Analogy

A key is a physical house key that can be copied and passed around. A managed identity is a staff badge that is issued to a specific person, opens only the doors their job requires, expires quickly, and can be cancelled at the front desk in one second.

!
Warning

Do not send a key from a browser or mobile app straight to the service. Instead, let the app call your own backend, and let the backend call the service. Otherwise the key can be found by anyone who inspects the app.

12Customization: When Prebuilt Is Not Enough

Prebuilt models are general. Sometimes your words, forms, or pictures are special, and the model needs a little teaching.

Out of the box, a speech model might not know the names of your drugs, your product codes, or your regional accent. A document model might not know your own odd invoice layout. A text model might not know that “Falcon” means a product line in your company, not a bird. For such cases, many services let you customize the model by giving it examples. You do not build a new model. You adapt a strong existing one, which needs far less data and skill than full training.

Speech

Custom speech

Teach the service your special words and noisy environments using sample audio and text.

Documents

Custom extraction models

Label fields on a handful of your own forms and get a model that reads them reliably.

Language

Custom classification and entities

Train the service to sort text into your own categories and find your own kinds of terms.

Translation

Custom translator

Supply your own parallel texts so product names and jargon translate correctly.

Vision

Custom image models

Show examples of your own objects or defects to classify or detect them.

Generative

Grounding and fine-tuning

Feed your documents through search, or in some cases fine-tune a model on your examples.

A sensible order of effort

1

Try the prebuilt model first

Measure how well it works on a sample of your real data.

2

Tune simple settings

Choose language, options, and domain hints before anything heavier.

3

Add custom vocabulary or examples

Use light customization when specific terms or layouts cause errors.

4

Train a custom model

Build one only where the gain is real and you have enough clean examples.

5

Evaluate and retrain

Keep a test set apart, check accuracy, and refresh as your data changes.

Analogy

Hiring a skilled general doctor and then giving them a short course in your company’s specialty is far cheaper than training a new doctor from the first day of medical school. Customization is that short course.

i
Tip

Custom models usually belong to one region and one resource, and they are billed for training and sometimes for hosting. Plan how you will copy or recreate them in a second region for disaster recovery.

13Containers: Running AI Close to the Data

Sometimes the data cannot leave the building. Containers bring the service to the data instead.

A container is a sealed package that holds a program and everything it needs, so it runs the same way on any computer. Many Cognitive Services are offered as containers that you can run on your own servers, in other clouds, or on small devices at the edge. This is useful when your data is very sensitive and must stay on your premises, when your internet connection is slow or unreliable, or when you need extremely quick answers close to a machine on a factory floor. The container does the AI work locally, so the raw data, such as images or audio, does not travel to the cloud.

By default, these containers still contact Azure to report usage, which is how billing works. Only usage numbers are sent, not your content. For places with no internet access at all, a disconnected container mode is available for customers who sign a commitment plan, which allows running offline for a set period.

flowchart LR
    DEV["Camera or microphone on site"] --> CON["AI container on local server"]
    CON --> LOC["Local results and alerts"]
    CON -.->|"usage numbers only"| AZ["Azure billing"]
    
Figure 5. A container keeps the data on site and sends only usage counts for billing.
OptionWhere it runsBest forTrade-off
Cloud serviceMicrosoft’s regionsMost apps, easy and always updatedData travels to the cloud
Connected containerYour servers, with usage reportingData residency and low delayYou manage updates and scaling
Disconnected containerYour servers, offlineSecure and remote placesNeeds a commitment plan and manual updates
Analogy

Using the cloud service is like sending your documents to a faraway specialist and waiting for the reply. Running a container is like inviting the specialist to work in a room inside your own office. Your papers never leave the building, but you must provide the room and keep the specialist’s tools up to date.

!
Warning

Not every service or feature is available as a container, and containers may lag behind the cloud version in model quality or new features. Check the container list for the exact ability you need before you plan an on-premises design.

14Networking and Security

A resource that reads your customers’ words, faces, and documents deserves strong protection.

By default, a Cognitive Services resource has a public endpoint, reachable from the internet by anyone who holds valid credentials. Traffic is always encrypted in transit with TLS and data is encrypted at rest. For stronger protection you can narrow the doors in three steps. First, use the resource firewall to allow only chosen internet addresses. Second, allow only chosen virtual networks, which are your private networks in Azure. Third, use a private endpoint, which gives the resource a private address inside your own virtual network, and then turn off public network access entirely. With a private endpoint, your backend reaches the service over Microsoft’s private network and the service is invisible from the open internet.

Other security tools stack on top. Azure Key Vault stores any keys you must keep. Customer-managed keys, where supported, let you own the encryption keys used for your stored data and custom models. Azure Policy can enforce company rules, such as “all AI resources must use private endpoints and must have local keys disabled.” Microsoft Defender for Cloud can watch for suspicious activity such as sudden bursts of calls from odd places. And resource locks stop someone from deleting a resource by accident.

Door 1

Public with firewall rules

Allow only trusted internet addresses to reach the endpoint.

Door 2

Selected virtual networks

Allow calls only from chosen subnets using service endpoints.

Door 3

Private endpoint

A private address in your network, with public access turned off.

Identity

Entra ID and roles

No keys, least privilege, and per-application audit trails.

Keys

Key Vault and rotation

Where keys are unavoidable, store and rotate them safely.

Guardrails

Policy and locks

Enforce rules and prevent accidental deletion.

Analogy

A public endpoint with a firewall is a shop on a street that checks IDs at the door. A private endpoint is a shop inside a secured office building, with no street entrance at all. Only people who already belong to the building can even find it.

i
Tip

When you use a private endpoint, remember the DNS, the system that turns names into addresses. The resource name must resolve to the private address inside your network, or your backend will keep trying the public one and fail.

15Responsible AI and Data Privacy

Powerful tools can cause harm when used carelessly. Responsible use is part of the design, not an afterthought.

Microsoft describes six principles for responsible AI: fairness, meaning treating people equally; reliability and safety, meaning working well and safely; privacy and security, meaning protecting data; inclusiveness, meaning serving people of all abilities and backgrounds; transparency, meaning being clear about what the system does and its limits; and accountability, meaning people remain responsible for outcomes. These principles show up in practical rules.

First, Limited Access. Some abilities, such as certain face features and custom synthetic voices, have high potential for misuse. Microsoft makes you apply and describe your use, and may refuse some uses. Second, transparency notes: for each service, Microsoft publishes a document that describes what it is good at, where it fails, and how to use it responsibly. Third, content filters are built into generative services and can be adjusted within limits. Fourth, human oversight: for decisions that affect people, such as hiring, lending, or health, a person should review the model’s suggestions.

On data privacy, Microsoft states that for these services your data belongs to you and is not used to train the base models that serve other customers. Some services keep inputs briefly for processing, abuse monitoring, or to deliver features such as custom models, and the details differ from service to service, so read the data handling notes for each one and the options for turning off logging where they exist. Choose the region carefully, since your data is processed in the region of the resource, which matters for laws about where data may be handled.

1

Define the purpose

Write down what the system will decide or influence, and who could be harmed if it errs.

2

Read the transparency note

Learn the known limits, such as languages, accents, or lighting where accuracy drops.

3

Test across groups

Measure accuracy for different accents, skin tones, ages, and languages to find unfair gaps.

4

Add human review

Send uncertain or high-impact cases to a person, using confidence scores.

5

Be open with users

Tell people when AI is involved and give them a way to appeal or correct mistakes.

Analogy

Responsible AI is like the safety rules around a powerful power tool. The saw is useful, but you wear goggles, you read the manual, and you do not hand it to someone untrained. The rules are not there to stop you from working, but to keep everyone’s fingers intact.

!
Warning

Models can be less accurate for some accents, dialects, skin tones, or lighting conditions. Do not assume that a high accuracy figure on average holds for every group of your users. Test with your own diverse data before you rely on a result.

16Reliability, Quotas, and Failover

The service is shared by many customers. Good designs expect limits and failures and plan for them.

Most services state an availability target, often about 99.9 percent, which allows nearly nine hours of downtime in a year. The exact number varies by service, so check each one. A request can fail for several reasons, and it helps to know the codes. A client error, starting with the digit four, means something is wrong with your request, such as a bad key or too large a file. A server error, starting with the digit five, means a problem on the service side, often short-lived. A special client error, 429 Too Many Requests, means you went over your rate limit. Each resource has quotas, limits on requests per second or per minute, and some services also limit the sizes of files and the length of text.

The standard answer to temporary failures and rate limits is a retry with exponential backoff. Your app waits a short time, tries again, waits twice as long if it fails again, and so on, with a small random variation called jitter so that many clients do not all retry at the same instant. Many responses include a header telling you how many seconds to wait, and a good client honors it. The official software kits from Microsoft already include sensible retry behavior, which you should keep switched on.

For protection against a whole region having trouble, deploy two resources in two regions, usually a pair of regions in the same geography. Your app sends calls to the main region and automatically switches to the second one when errors continue. Put a front layer such as Azure API Management, Azure Front Door, or your own failover code in charge of the switch. Remember that custom models, custom vocabularies, and search indexes must exist in both regions, so keep their training data and setup in source control, so you can recreate them quickly.

flowchart TB
    APP["Your application"] --> GW["API Management or failover logic"]
    GW -->|"normal traffic"| R1["AI resource - region one"]
    GW -.->|"on repeated failure"| R2["AI resource - region two"]
    R1 --> M1["Custom models in region one"]
    R2 --> M2["Copy of custom models in region two"]
    
Figure 6. Two regional resources with a switch in front protect against a regional problem.

Failure scenarios and recovery

A

A burst of traffic hits the rate limit

Requests get 429 responses. Backoff and a queue smooth the burst, and a higher quota or commitment tier may be requested.

B

A short service glitch

A server error appears briefly. Retries cure it without anyone noticing.

C

A key is leaked

Switch to the second key, regenerate the first, and move to managed identities.

D

A regional outage

Fail over to the second resource. Use the copy of custom models that already exists there.

E

A bad input item

One broken document must not stop a batch. Catch the error, log the item, and continue with the rest.

F

A retired model or API version

Track announcements, test the new version early, and plan updates before the old one stops working.

i
Tip

Put slow or non-urgent work behind a queue, such as Azure Service Bus or Storage queues. Workers pull items at a speed that respects your rate limit, and the queue keeps the work safe if the service is down for a while.

17Monitoring, Logging, and Metrics

You cannot manage what you cannot see. Azure gives you numbers for every resource.

The main tool is Azure Monitor, Azure’s central place for numbers, charts, and alerts. A metric is a measurement taken over time. For Cognitive Services, useful metrics include the total number of calls, the number of successful calls, the counts of client errors and server errors, the latency or time each call took, and the number of blocked calls caused by rate limits. Other measures depend on the service, for example characters translated, audio seconds processed, or tokens used by language models, where a token is a small piece of a word.

For deeper detail, turn on diagnostic settings to send logs to a Log Analytics workspace, a searchable store with a query language. The request logs show when each call happened, which operation it was, how long it took, and its result code, without storing the content of your data. Set alerts so that the right person is told when error counts rise, latency climbs, or usage jumps unexpectedly. A sudden spike in calls may be a feature launch, a bug that loops, or a stolen key, and you want to know within minutes, not at the end of the month.

What to watchWhy it mattersTypical action
Total callsShows usage and cost driversAlert on sudden jumps, compare with expected traffic
Client errorsReveals bad requests, wrong keys, or oversized inputFix the calling code or the input checks
Server errorsPoints to problems on the service sideRely on retries, and open a support case if lasting
Throttled callsMeans you are hitting the rate limitAdd backoff, queues, or request more quota
LatencyDirectly affects user experienceCheck region, input size, and call style
Usage unitsDrives the bill, such as characters or audio timeSet budgets and review trends
Quality scoresLow confidence means more human reviewTrack the share of items needing manual check

Many teams also place Azure API Management in front of their AI resources. It becomes a single, controlled door: it holds the keys or identity, applies per-team limits, caches repeated answers, records who used what for charging back costs, and gives one place to add policies, such as removing sensitive data before a request goes out.

Everyday example: the surprise bill

A team notices a call count ten times higher than normal on a Saturday night. The metrics and logs show a nightly job stuck in a loop, resubmitting the same documents. An alert on call volume would have caught it within the hour. After adding the alert and a safe limit on retries, the problem never repeated.

18Performance Tuning

Fast AI features feel magical. Slow ones feel broken. A few habits make the difference.

The time a user waits has several parts: the trip across the network to the service, the time the request waits for its turn, the time the model thinks, and the trip back. Tuning begins by measuring each part, so you do not guess. Most of the controllable delay sits in four places.

Distance

Choose a close region

A resource in the same region as your backend and users cuts network delay. Put your backend and the AI resource in the same region.

Size

Send only what is needed

Resize images, trim silent audio, and remove unneeded text. Smaller inputs travel and process faster, and often cost less.

Batching

Group small items

Many services accept several text records in one call. One call with many records is faster and kinder to limits than many tiny calls.

Parallel

Run calls at the same time

Send independent requests in parallel, but keep within your rate limit with a controlled number of workers.

Caching

Remember repeated answers

If the same image or sentence is analyzed again and again, store the result and reuse it.

Connections

Reuse connections

Keep network connections open and reuse client objects rather than creating a new one for every call.

For generative models, speed also depends on the length of the prompt and the length of the answer, both measured in tokens. A shorter prompt with only the passages that matter, and a limit on answer length, makes responses faster and cheaper. For steady, high-volume use, some generative services offer provisioned throughput, which reserves a fixed amount of capacity for you so that speed stays predictable instead of varying with the load of other customers.

Analogy

Think of sending parcels by courier. Choosing a nearby depot cuts the trip. Packing only what is needed makes parcels lighter. Putting several small items in one box saves many trips. Remembering that you already sent the same parcel yesterday saves sending it again.

!
Warning

More parallel calls are not always better. Beyond your quota, extra calls only produce throttling errors and retries, which make everything slower. Find the sweet spot by testing with a controlled number of workers.

Everyday example: the photo upload

A mobile app uploads twelve-megabyte photos for analysis, and users wait several seconds. The team shrinks each photo on the phone to a modest size before upload. The service answers just as accurately, the wait drops to under a second, and the data bill falls as well.

19Cost and Capacity Management

Pay-per-use is gentle for small projects and can surprise large ones. Understand the meter.

Almost every service is billed by a unit of work, and the unit differs by service. Vision and many document features charge per transaction, usually priced per thousand. Language features charge per text record, often a chunk of a thousand characters. Speech charges per hour of audio for transcription and per million characters for synthesized voice. Translator charges per million characters. Generative models charge per token, with input and output tokens priced differently. Prices change, so confirm them on the current price list for your region.

There are three kinds of plan. The free tier gives a small monthly allowance, good for tests but not for production because of its tight limits. The pay-as-you-go tier is the default for real use, where you pay for exactly what you use. Commitment tiers offer a lower rate if you agree to pay for a fixed amount each month, which saves money when your usage is steady and predictable. For generative models there is also provisioned throughput, billed for reserved capacity whether you use it or not.

Cost leverHow it saves moneyTrade-off
Cache repeated resultsAvoids paying twice for the same analysisCached answers may become stale
Resize and trim inputsFewer units and less bandwidthToo much shrinking can reduce accuracy
Filter before callingSkip empty, duplicate, or irrelevant itemsAdds a small amount of your own logic
Choose the right featureA simple model costs less than a heavy oneNeeds testing to confirm quality
Commitment tierLower unit price for steady usageYou pay even when use is lower
Shorter prompts and answersFewer tokens for generative modelsMay reduce detail
Budgets and alertsCatch runaway usage earlyNeeds someone to respond
Separate resources by projectClear cost reporting and quotasMore resources to manage
Analogy

Cognitive Services billing is like a phone plan. The free tier is a trial minute allowance. Pay as you go is paying by the minute. A commitment tier is a monthly bundle that makes each minute cheaper if you really talk that much. A runaway loop in your code is like leaving the phone off the hook on an international call overnight.

i
Tip

Tag every resource with the project and owner, and use Azure Cost Management to view spending by tag. Set a budget with alerts at fifty, eighty, and one hundred percent so a surprise never waits until month end.

20Advantages, Disadvantages, and Trade-offs

No tool is right for everything. A fair look at both sides helps you choose with open eyes.

Advantages

  • No machine learning expertise or training data needed for common tasks.
  • Fast to build: features can work in days, not months.
  • Pay per use, with a free tier for learning.
  • Models improve over time without your effort.
  • Scales automatically with a global network of regions.
  • Enterprise security features: private endpoints, managed identities, and encryption.
  • Customization options and containers for special needs.
  • Part of a broad family that works well together.

Disadvantages

  • Models are general, so very special tasks may need customization or your own model.
  • Per-call costs can grow quickly at large volumes.
  • Rate limits and quotas require retry and queue designs.
  • Service names, versions, and features change, and older services are retired.
  • Data goes to a cloud region unless you use containers, which matters for strict rules.
  • Results are probabilistic and sometimes wrong, so they need checks.
  • Less control and transparency than a model you build yourself.

The big trade-offs

Speed versus control. A prebuilt service gives you results this week, while a custom model gives finer control but takes much longer. Cost per call versus fixed cost. At low volume, pay-per-use is cheapest. At very high steady volume, owning your own model or buying commitment tiers may be better. Cloud convenience versus data residency. The cloud is easiest, and containers keep data on site at the price of more management. Accuracy versus fairness. A model that is accurate on average may be less accurate for some groups, so testing and human review matter. Generality versus specialization. General models handle many cases adequately, while custom models excel on your narrow ones.

21Design Patterns and Choosing the Right Approach

Proven recipes for building with these services, and a guide for when something else fits better.

Pattern: the document processing pipeline

This is the most common pattern in business. A document lands in storage, an event wakes a small program, the program calls Document Intelligence to read it, and the structured result is stored in a database and indexed for search. Low-confidence results go to a human review queue.

flowchart LR
    UP["Document uploaded to storage"] --> EV["Storage event"]
    EV --> FN["Function app"]
    FN --> DI["Document Intelligence reads fields"]
    DI --> CHK["Confidence check"]
    CHK -->|"high"| DB["Database and search index"]
    CHK -->|"low"| HR["Human review queue"]
    HR --> DB
    
Figure 7. A document pipeline with a human review path for uncertain results.

Pattern: the voice analytics pipeline

Recorded calls are transcribed by Speech, personal data is masked by Language, and sentiment, topics, and summaries are extracted. The results feed a dashboard and a quality team.

flowchart LR
    AUD["Call recordings"] --> SP["Speech batch transcription"]
    SP --> PII["Language masks personal data"]
    PII --> SN["Sentiment, topics and summary"]
    SN --> DASH["Dashboard for managers"]
    SN --> ALR["Alerts for angry customers"]
    
Figure 8. From audio to insights using Speech and Language together.
Pattern

Backend as gatekeeper

Clients never hold keys. Your backend calls the services and returns only what the client needs.

Pattern

Queue and worker

Put work on a queue and process at a rate that respects limits, with retries and a dead-letter queue.

Pattern

Human in the loop

Use confidence scores to send uncertain items to people and learn from their corrections.

Pattern

Composition

Chain services: speech to text, translation, language analysis, then text to speech.

Pattern

Retrieval augmented generation

Search finds your facts, a language model writes the answer, safety checks guard both ends.

Pattern

Central API gateway

Use API Management for shared limits, caching, and charge-back across teams.

Choosing among approaches

NeedGood fitWhy
A common task such as OCR, translation, or sentimentPrebuilt Azure AI serviceQuickest and cheapest to start
Common task with your own vocabulary or layoutCustomized Azure AI serviceLight training on strong base models
Natural conversation, writing, or reasoningAzure OpenAI with search and safetyLarge language models handle open-ended text
A very special problem with lots of your own dataCustom model in Azure Machine LearningFull control over data, features, and training
Data that must stay on site or work offlineContainersRun the service where the data lives
Searching across your own documentsAzure AI Search with enrichmentManaged index with built-in AI skills
i
Tip

Follow the ladder: try prebuilt first, customize second, build your own model last. Most projects never need to climb to the top rung.

22Anti-Patterns to Avoid

An anti-pattern is a habit that looks sensible but leads to pain.

ANTI-PATTERN 01Avoid
What people do

Put the service key inside a web page, a mobile app, or a public code repository.

Why it hurts

Anyone can copy it and use your resource, and you pay the bill.

Better approach

Call the service from a backend, use managed identities, and keep any needed keys in Key Vault.

ANTI-PATTERN 02Avoid
What people do

Trust every answer blindly and ignore confidence scores.

Why it hurts

Wrong results flow silently into invoices, records, and decisions about real people.

Better approach

Use thresholds and human review for low-confidence or high-impact cases.

ANTI-PATTERN 03Avoid
What people do

Call the service in a tight loop with no retry limits and no backoff.

Why it hurts

You hit rate limits, create storms of retries, and may burn through your budget in hours.

Better approach

Use exponential backoff with jitter, a maximum retry count, queues, and cost alerts.

ANTI-PATTERN 04Avoid
What people do

Build a custom model first, before testing the prebuilt one.

Why it hurts

You spend weeks and money on what a prebuilt service might have done well enough.

Better approach

Test the prebuilt service on real samples, and customize only where it truly falls short.

ANTI-PATTERN 05Avoid
What people do

Send raw personal data to every service without thinking about privacy or region.

Why it hurts

It can break privacy laws and company rules, and increases the damage of any leak.

Better approach

Mask or remove personal data first when you can, choose the right region, and use private endpoints.

ANTI-PATTERN 06Avoid
What people do

Use the free tier for production.

Why it hurts

Small quotas and limits cause outages on the first busy day.

Better approach

Use the free tier for learning, and the Standard tier for real systems.

ANTI-PATTERN 07Avoid
What people do

Ignore service retirement notices and version changes.

Why it hurts

One day an old service or API version stops working and a feature breaks on a deadline.

Better approach

Watch the lifecycle announcements, pin versions deliberately, and test new versions early.

23Best Practices and Common Mistakes

A short checklist that separates calm operations from late-night emergencies.

1

Start with a small real test

Try the service on a sample of your own data, not just on the demo examples.

2

Use identities, not keys

Prefer managed identities and role based access. Disable local keys where you can.

3

Plan for limits

Add retries with backoff, queues, and a design that tolerates throttling.

4

Keep humans in the loop

Use confidence scores to route uncertain cases to people.

5

Protect the network and data

Use private endpoints, mask personal data, and choose regions carefully.

6

Monitor, alert, and budget

Watch errors, latency, and usage, and set budgets with alerts.

7

Test for fairness

Measure quality across languages, accents, and user groups before launch.

8

Automate and document

Define resources as code, keep custom model data in source control, and track service lifecycle notices.

Common mistakes

  • Mixing up resource regions. A resource in a faraway region adds delay, and some features are not available in every region.
  • Forgetting the custom subdomain. Entra ID sign-in often needs it, and errors can be confusing.
  • Sending oversized inputs. Large files fail with size errors, or waste time and money.
  • Ignoring language settings. A wrong or missing language hint lowers accuracy for speech and text.
  • No test set. Without examples kept apart, you cannot tell if a change made things better.
  • Treating the model as a database. Models do not store your facts. Use search and your own data stores for facts.
  • Skipping private DNS. With private endpoints, wrong name resolution sends traffic to the blocked public path.
!
Warning

A feature that works wonderfully in a demo may behave very differently on messy real data, such as noisy audio, crooked photographs, or slang-filled text. Test with the worst data you expect, not only with the best.

24Real-World Usage Patterns

Where do these services shine in practice?

Contact centers

Companies transcribe calls, remove personal details, score sentiment, and summarize each call. Supervisors see problems quickly and agents save time on note-taking.

Finance and back office automation

Invoices, receipts, loan forms, and identity documents are read automatically, with exceptions sent to staff. This shortens processing time and reduces typing errors.

Accessibility

Live captions for meetings, text to speech for people with reading difficulties, picture descriptions for people who cannot see, and reading aids all rely on these services to include more people.

Global customer support and content

Translation lets small teams serve customers in dozens of languages, translate help articles and product pages, and read feedback from every market.

Retail and manufacturing

Cameras with vision services count shoppers, check shelves for gaps, and inspect products on a line for defects, often using containers at the edge so video stays on site.

Enterprise search and assistants

Organizations index their documents with enrichment and add a chat assistant that answers questions using their own policies and manuals, with safety checks and cited sources.

Start with ready-made intelligence, measure it on your own data, and add your own touches only where they truly pay off.

25Frequently Asked Questions

Q1Are Cognitive Services and Azure AI Services the same thing?

Yes, in practice. Microsoft renamed the family from Azure Cognitive Services to Azure AI Services. Older names still appear in many documents and discussions.

Q2Do I need to know machine learning to use them?

No. For prebuilt abilities you send data to an API and use the result. Customization needs more care but still far less expertise than building a model from scratch.

Q3What is the difference between a multi-service and a single-service resource?

A multi-service resource gives one key and endpoint for many services. A single-service resource is for one service and gives separate billing, access control, and sometimes a free tier.

Q4How should I authenticate in production?

Use Microsoft Entra ID with a managed identity and role based access. If you must use keys, store them in Key Vault, rotate them, and consider disabling local keys.

Q5What does a 429 error mean?

You sent more requests than your limit allows. Wait, retry with exponential backoff, smooth the traffic with a queue, or request a higher quota.

Q6Is my data used to train Microsoft’s models?

Microsoft states that customer data is not used to train the base models for other customers. Details on retention and monitoring vary by service, so read each service’s data privacy notes.

Q7Can I keep data on my own servers?

For many services, yes, by running containers locally. Some even support disconnected use with a commitment plan. Check that the exact feature you need is offered as a container.

Q8How do I make a private connection to the service?

Create a private endpoint in your virtual network, set up the matching private DNS, and turn off public network access on the resource.

Q9What if the prebuilt model does not understand my special words?

Try custom vocabulary or custom models where the service supports them, such as custom speech, custom translator, or custom extraction models for documents.

Q10How do I control cost?

Cache results, trim inputs, batch requests, choose the right feature, use commitment tiers for steady loads, tag resources, and set budgets with alerts.

Q11Which service should I use to build a chat assistant over my documents?

A common design pairs Azure AI Search to find relevant passages with Azure OpenAI to write answers, and Content Safety to check inputs and outputs.

Q12What happens when a service is retired?

Microsoft announces retirement dates in advance and usually points to a replacement. Watch the announcements and plan migration before the date, because old APIs eventually stop working.

26Summary and Key Takeaways

Key Takeaways

  • What they are: Cognitive Services, now called Azure AI Services, are ready-made, pay-per-use AI abilities for vision, speech, language, documents, translation, safety, search, and generative text, called through simple APIs.
  • How they are organized: You create a resource with an endpoint, region, keys, and a pricing tier. A multi-service resource gives one connection for many services, while single-service resources give separate control.
  • How a request works: Your backend sends data over TLS, the front door checks identity, network rules, and rate limits, a model analyzes it, usage is recorded, and a structured answer returns.
  • How to stay secure: Prefer managed identities over keys, keep secrets in Key Vault, use private endpoints, mask personal data, and follow responsible AI practices with human review for important decisions.
  • How to stay reliable: Expect rate limits and glitches, use retries with backoff, queues, and a second region, and keep custom model data ready to recreate.
  • How to go further: Try prebuilt first, customize second, and build your own model last. Use containers when data must stay on site.
  • How to run it well: Monitor calls, errors, latency, and usage, set budgets, cache and batch, test fairly on real data, and watch for service changes and retirements.