Azure Cloud Shell
What it is
Azure Cloud Shell is an interactive, authenticated terminal that runs in a browser. It offers Bash and PowerShell on a temporary Azure host, so a learner or administrator can use Azure tools without installing them on their own computer.
Why it exists
It gives someone a ready-to-use Azure workstation from a browser. Cloud Shell authenticates to Azure, but it does not bypass Azure RBAC, subscription boundaries, confirmation prompts, or the need to understand what a command changes.
Key ideas
- A session runs on a temporary, per-user host and times out after 20 minutes without interactive activity. Do not treat it as a permanent server.
- Cloud Shell persists files in
$HOMEon a 5-GB Azure Files share. The host is free to use, but normal storage charges apply to the required storage account and file share. - Choose Bash to work with commands such as Azure CLI
az, or PowerShell to work with Az PowerShell cmdlets. The shell language and the Azure management tool are separate choices. - Cloud Shell is available from the portal and other Microsoft access points. It includes commonly used tools and a text editor, but installed versions and tools can change.
How it fits (diagram)
Northwind example
Luis opens Cloud Shell to inspect a failed Northwind deployment from a browser. Before running a command, he confirms the active subscription and resource group. He saves a small diagnostic script under $HOME, knowing it persists in the backing Azure Files share, but he keeps credentials out of the script. He uses only the permissions assigned to his account; Cloud Shell does not make him an owner of the production subscription.
Cloud Shell versus Azure CLI
| Term | What it is |
|---|---|
| Azure Cloud Shell | A hosted browser terminal environment. |
| [[azure-cli | Azure CLI]] |
Common confusion
- Browser access does not make a command harmless. A destructive command still affects the selected Azure scope if the user has permission.
- Closing a session does not undo Azure resource changes, and it does not remove files saved in the persistent share.
- Cloud Shell is useful for administration and learning; a version-controlled pipeline is usually a better place for repeatable production changes.
Related
azure-cli · azure-portal · arm
Sources and re-audit
- Microsoft Learn — What is Azure Cloud Shell?, checked 2026-09-16.