You are developing a secure Azure Function App (V4 runtime). The Function App must retrieve a database connection string from an Azure Key Vault. To comply with security policies, the Function App must use a user-assigned managed identity to resolve Key Vault references.
Arrange the steps in the correct order to configure the Function App to use the user-assigned managed identity for resolving Key Vault references.
- 1Create a user-assigned managed identity and assign it to the Azure Function App.
- 2Configure the Function App's key vault reference identity property to use the user-assigned managed identity's resource ID.
- 3Grant the user-assigned managed identity the Key Vault Secrets User role on the target Key Vault.
- 4Add a new application setting to the Function App that references the Key Vault secret using the key vault reference syntax.
Cevap
To configure the Function App to use a user-assigned managed identity for Key Vault references, first create and assign the user-assigned managed identity to the Function App. Next, update the Function App configuration to set this identity as the key vault reference identity. Then, grant this identity the Key Vault Secrets User role on the Key Vault. Finally, add the application setting referencing the Key Vault secret.
To successfully configure a user-assigned managed identity for Key Vault references in Azure Functions, the identity must first be created and assigned to the Function App. Then, the Function App must be configured to use this user-assigned identity for resolving Key Vault references (via the keyVaultReferenceIdentity setting). Next, the identity must be granted read access to the Key Vault (using the Key Vault Secrets User role or access policies). Finally, the reference setting is added to the Function App's configuration.
Adım Adım Çözüm
Anahtar Kavram
Configuring Azure Functions to use user-assigned managed identities for Key Vault references.
Tahmini Süre:2m 0s