An app needs to access Azure Blob Storage without storing a connection string. Which feature enables this?
- A Kubernetes secret
- B Container Apps service binding
- C System-assigned managed identity with Storage Blob Data Contributor role (correct answer)
- D ACR scoped token
Shortcut: ) without storing credentials. Assign the appropriate RBAC role to the identity.
System-assigned managed identity allows the Container App to authenticate to Azure services (Blob, Key Vault, etc.) without storing credentials. Assign the appropriate RBAC role to the identity.