You have an Azure subscription that contains an Azure App Service app named App1. You provision a multi-service Azure AI Services resource named CSAccount1. You need to configure App1 to access…

While managed identities are a secure practice, combining one with an X.509 certificate adds complexity and is not the simplest direct authentication method for an App Service to an AI service resource when a subscription key is available.

OAuth tokens are primarily for user or application authentication with identity providers like Azure AD, and while possible, they are not the standard or simplest method for direct service-to-service authentication to Azure AI Services compared to subscription keys.

Shared Access Signatures (SAS) tokens are generally used for granular, time-limited access to specific Azure storage resources, not as the primary authentication mechanism for a general Azure AI Services resource from an App Service.

Azure AI Services resources are typically secured using an endpoint URI and a subscription key (API key). Configuring the App Service app with these credentials is a straightforward and common method for authentication, requiring minimal setup and ongoing administrative effort for basic access.