AZ-204 Certification Practice Question #125

Question

Your company is developing an Azure API hosted in Azure.
You need to implement authentication for the Azure API to access other Azure resources. You have the following requirements:
✑ All API calls must be authenticated.
✑ Callers to the API must not send credentials to the API.
Which authentication mechanism should you use?

Accepted Answer

To allow an Azure API to authenticate and access other Azure resources without having the callers send credentials to the API, a Managed Identity is the optimal solution. Managed identities are automatically managed by Microsoft Entra ID, allowing the API hosting service (such as Azure App Service or API Management) to authenticate securely with target Azure resources (such as Key Vault or SQL Database) without needing to configure or transmit any client credentials.

More AZ-204 practice questions