Domain 1.4: Application Identities — AZ-305 Practice Question 15

How to approach this question

Identify the two parts of secure access: Authentication (Identity) and Authorization (RBAC/Access Policy).

Full Answer

Enable a managed identity on the Azure App Service., Grant the managed identity 'Key Vault Secrets User' role (or access policy) on the Key Vault.

To securely access Key Vault without managing credentials, you first enable a Managed Identity (System-assigned or User-assigned) on the App Service. This handles the authentication. Second, you must authorize that identity by granting it the appropriate RBAC role (e.g., Key Vault Secrets User) or an Access Policy on the Key Vault.

Common mistakes

Thinking that enabling the identity automatically grants it access to resources. Authorization is always a separate, required step.

How to approach this question

Full Answer

Common mistakes

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 3

More questions from this exam