State

In the Ultra Transcenders books

AZ-305

Each book explains State in context, with comparison tables and the common traps.

Terms in this definition

• OAuth

  An authorisation standard allowing software to act for someone. In Azure Pipelines, choosing it for a GitHub service connection ties the connection to your own GitHub account; for integrations with Azure DevOps APIs, Microsoft Entra ID OAuth is the right choice.

• Authorisation

  Working out which actions and data a signed-in user or application is permitted, typically via role assignments. It comes after authentication.

• Flow

  The unit of work inside a Lakeflow pipeline that takes data from a source, transforms it and lands it in a destination like a streaming table. Streaming flows either append or update, and CREATE FLOW lets you declare a flow apart from the table it feeds.

• API Management

  Azure's API gateway, where policies like rate limits, quotas, ip-filter and validate-jwt are defined once and apply to every API. Production VNet injection is offered in the Premium tier.

Related terms

• AADRiskyUsers

  A Log Analytics table listing the users that Microsoft Entra ID Protection flags as risky, with each user's risk level and state. It is populated once you export the RiskyUsers category through diagnostic settings.

• AB# mention

  Type AB# and a work item number in a GitHub issue, pull request or commit to link Azure Boards items; preceding it with fix, fixes or fixed changes the item's state on merge to the default branch. Azure Repos uses just # and the number.

• Activity log alert

  Alert rule without state that triggers on a matching Activity log event, deleting a management lock for instance. A scope, a condition and an action group are required; a Log Analytics workspace is not.

• Adaptive thinking

  Mode in which Claude itself chooses whether to reason and for how long, guided by the effort parameter. Claude Opus 4.7 and newer models support only this thinking mode.

• APIM subscription key

  Caller key supplied either as a query-string parameter or in the Ocp-Apim-Subscription-Key header. API Management's gateway checks it as an APIM subscription key, which is not a Microsoft Entra token, while Foundry Tools like Content Safety read the resource key from it.

• Approved Inventory

  State in Defender EASM for assets the organisation owns directly. Such assets are scanned every day and, by default, are the only ones dashboard charts display.

• Architecture Definition Document

  A key deliverable bringing together the main architecture artifacts across the four domains for every relevant state: baseline, transition and target. It sets out, in qualitative terms, what the architect intends.

• ARM template test toolkit

  Run via Test-AzTemplate, these PowerShell checks compare templates and parameter files against best practice for ARM. For Bicep, use the Bicep linter, since the toolkit can't check it.