An administrator needs to rotate the access keys for an Azure Storage account named logisticsdata2026. The storage account is accessed by a web application that must remain online. The web application is currently configured to use key1.
Which two actions should the administrator perform to rotate the access keys without interrupting the web application's access to the storage account? (Select two.)
- Update the web application configuration to use key2.Answer
- Regenerate key1 after the web application has transitioned to key2.Answer
- CRegenerate key1 immediately while the web application is using it, and configure a new SAS token with no expiration date for backup access.
- DAssign the Reader role at the subscription level to the web application's managed identity to grant it direct access to blobs.
Answer
Update the web application configuration to use key2, and regenerate key1 after the web application has transitioned to key2.
To rotate storage account access keys without downtime, the application must be updated to use the secondary key before the primary key is regenerated. This ensures that the application's connection remains valid during the regeneration process. Once the application is successfully using the secondary key, the primary key can be regenerated safely.
Step-by-Step Solution
Key Concept
Manual rotation of Azure Storage account access keys without downtime