You are deploying a web application to Azure App Service. The application must retrieve database credentials from an Azure Key Vault. To follow organizational security policies, you decide to use a user-assigned managed identity to authenticate the application.
Which of the following actions are required to configure this security solution? (Select TWO.)
- Associate the user-assigned managed identity with the App Service instance.Cevap
- Configure an Azure Key Vault access policy or Azure RBAC role assignment that grants Secret Get permissions to the user-assigned managed identity.Cevap
- CEnable the system-assigned managed identity on the App Service and assign the Key Vault permissions to it.
- DCreate an access policy in Azure Key Vault that grants Secret Get permissions directly to the App Service Plan.
Cevap
The correct actions are to associate the user-assigned managed identity with the App Service instance, and to configure an Azure Key Vault access policy or Azure RBAC role assignment that grants Secret Get permissions to the user-assigned managed identity.
To authenticate using a user-assigned managed identity, you must first associate the identity with the App Service. Then, you must grant the identity permissions to the Key Vault using access policies or role assignments.
Adım Adım Çözüm
Anahtar Kavram
Configuring a user-assigned managed identity to authenticate and authorize access to Azure Key Vault.