How should a function authenticate to Azure Storage without a connection string?
- A Store the key in Key Vault and read it at startup
- B Identity-based connection: set <Connection>__serviceUri and grant the managed identity a data role (correct answer)
- C Use a SAS token in code
- D Use anonymous access
Shortcut: Identity-based connections replace connection strings. Setting the serviceUri app setting and assigning roles such as Storage Blob Data Contributor removes the secret entirely.