Which approach lets a function read a Key Vault secret without SDK code?
- A A Key Vault reference in app settings using @Microsoft.KeyVault(SecretUri=...) (correct answer)
- B Hardcoding the value
- C A SAS token
- D An input binding to Key Vault
Shortcut: App settings support Key Vault references resolved by the platform using the app's managed identity, so the secret surfaces as an ordinary environment variable.