External

In the Ultra Transcenders books

AZ-305

Each book explains External in context, with comparison tables and the common traps.

Terms in this definition

• API Management

  Azure's API gateway, where policies like rate limits, quotas, ip-filter and validate-jwt are defined once and apply to every API. Production VNet injection is offered in the Premium tier.

• VNet

  A private network belonging to a single subscription and region and covering all of that region's availability zones. A VM can only use a VNet located in the same region.

Related terms

• Accessibility level

  Whether a Container Apps environment is reachable publicly or only privately, fixed when the environment is made. With external, its virtual IP sits on a public address; with internal, an internal load balancer in your own virtual network holds it.

• ADLS

  Paths beginning abfss:// point into this: Azure Storage with the hierarchical namespace switched on. In Unity Catalog it is typically the object store under both external locations and managed storage.

• ALL PRIVILEGES

  A shortcut grant in Unity Catalog covering every privilege relevant to an object. Four are deliberately left out: MANAGE, READ METADATA and the two external use privileges for schemas and locations.

• B2B collaboration

  Microsoft Entra feature that invites external users one by one as guests; by itself it doesn't provision, approve or expire their access automatically.

• Certified visual

  A custom visual on AppSource that the Power BI team has code-reviewed and tested, including confirming it makes no calls to external services. Certified visuals are included when reports are exported to PowerPoint or sent in email subscriptions.

• CETAS

  Writes the result of a query out to external storage as files (CSV or Parquet, say), in parallel, and creates an external table over them, all in one T-SQL statement.

• Collaboration restrictions

  By default B2B invitations can be sent to any domain. This external collaboration setting changes that by holding a list of domains, used either as an allow list or as a block list.

• Container Apps environment

  Boundary that groups Azure Container Apps for security, isolation and networking; decisions about workload profiles versus Consumption only, a custom VNet, and internal or external access can't be changed after creation.