An Azure subscription contains a resource group named `rg-prod-data`. The resource group contains an Azure Storage account named `storelogs1`. A `ReadOnly` lock is applied directly to the resource group `rg-prod-data`. No other locks or tags are applied to the resource group or the storage account. An administrator needs to retrieve the access keys for `storelogs1` using the Azure portal. Does the lock applied to `rg-prod-data` prevent the administrator from retrieving the access keys for `storelogs1`?
Cevap: Cevap
Cevap
The ReadOnly lock inherited by the storage account prevents the retrieval of the access keys.
The correct answer is that the lock prevents the retrieval of the keys. A ReadOnly lock applied to a resource group is inherited by all resources within that group. In addition to blocking write and delete operations, a ReadOnly lock blocks POST operations, which includes the request to retrieve (list) storage account access keys.
Adım Adım Çözüm
Anahtar Kavram
Azure Resource Lock inheritance and ReadOnly lock constraints on POST operations