An Azure subscription contains a resource group named `rg-prod-data`. The resource group contains an Azure Storage account named `storelogs1`. A `ReadOnly` lock is applied directly to the resource group `rg-prod-data`. No other locks or tags are applied to the resource group or the storage account. An administrator needs to retrieve the access keys for `storelogs1` using the Azure portal. Does the lock applied to `rg-prod-data` prevent the administrator from retrieving the access keys for `storelogs1`?
Answer: Answer
Answer
The ReadOnly lock inherited by the storage account prevents the retrieval of the access keys.
The correct answer is that the lock prevents the retrieval of the keys. A ReadOnly lock applied to a resource group is inherited by all resources within that group. In addition to blocking write and delete operations, a ReadOnly lock blocks POST operations, which includes the request to retrieve (list) storage account access keys.
Step-by-Step Solution
Key Concept
Azure Resource Lock inheritance and ReadOnly lock constraints on POST operations