AZ-400 · Question #57
Drag and Drop Question Your company has a project in Azure DevOps. You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will refere
The correct answer is A Key Vault advanced access policy; RBAC. The correct solution requires two configurations: A Key Vault Advanced Access Policy to enable Azure Resource Manager to access the Key Vault during template deployments (specifically the 'Enable access to Azure Resource Manager for template deployment' setting), and RBAC to gran
Question
Exhibit
Answer Area
Drag items
Correct arrangement
- A Key Vault advanced access policy
- RBAC
Explanation
The correct solution requires two configurations: A Key Vault Advanced Access Policy to enable Azure Resource Manager to access the Key Vault during template deployments (specifically the 'Enable access to Azure Resource Manager for template deployment' setting), and RBAC to grant the Azure DevOps service principal only the necessary permissions to perform the deployment - satisfying the principle of least privilege. The Advanced Access Policy is distinct from a standard Key Vault access policy because it specifically unlocks ARM template integration, which is required for referencing Key Vault secrets in ARM template parameters. A standard Key Vault access policy alone cannot enable the ARM template deployment integration, making it insufficient for this scenario.
Topics
Community Discussion
No community discussion yet for this question.