Soru

Zorluk: OrtaManage Storage Access Keys and Shared Access Signatures (SAS)

An administrator needs to rotate the access keys for an Azure Storage account named logisticsdata2026. The storage account is accessed by a web application that must remain online. The web application is currently configured to use key1.

Which two actions should the administrator perform to rotate the access keys without interrupting the web application's access to the storage account? (Select two.)

  1. Update the web application configuration to use key2.Cevap
  2. Regenerate key1 after the web application has transitioned to key2.Cevap
  3. C
    Regenerate key1 immediately while the web application is using it, and configure a new SAS token with no expiration date for backup access.
  4. D
    Assign the Reader role at the subscription level to the web application's managed identity to grant it direct access to blobs.

Cevap

Update the web application configuration to use key2, and regenerate key1 after the web application has transitioned to key2.
To rotate storage account access keys without downtime, the application must be updated to use the secondary key before the primary key is regenerated. This ensures that the application's connection remains valid during the regeneration process. Once the application is successfully using the secondary key, the primary key can be regenerated safely.

Adım Adım Çözüm

1
Transition the application authentication to the secondary key.
The web application continues to function normally using key2 while key1 becomes inactive from the application's perspective.
This prevents application downtime when key1 is regenerated.
2
Regenerate the primary key (key1) in the Azure Storage account.
A new value is generated for key1 while the application continues running on key2.
This completes the rotation of the primary key without impacting active application connections.

Anahtar Kavram

Manual rotation of Azure Storage account access keys without downtime
Bu soruyu puanla