Question 223

You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager. You need to obtain an access token that uses the VM's system-assigned managed identity. Which two actions should you perform? Each correct answer presents part of the solution.

• AFrom the code on the VM, call Azure Resource Manager using an access token.
• BUse PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint.
• CUse PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint.
• DFrom the code on the VM, call Azure Resource Manager using a SAS token.
• EFrom the code on the VM, generate a user delegation SAS token.