Home › Azure AZ-204 › cloudcomputing › az204observabilityintegration › Which Azure feature lets a Function App authenti…
Which Azure feature lets a Function App authenticate to a downstream API hosted in another Azure subscription WITHOUT shared secrets?
AHardcode the cross-sub admin password in the Function
BShare the global admin password via env vars
CDisable RBAC on the target resource
DUse a managed identity on the Function App, grant it appropriate RBAC on the cross-subscription resource, and call via Entra ID
Answer & Solution
Correct answer: D. Use a managed identity on the Function App, grant it appropriate RBAC on the cross-subscription resource, and call via Entra ID
MSI + cross-subscription RBAC = no shared secrets. The other options leak credentials or remove auth.
Related questions
Which Application Insights concept lets a developer correlate a single user request acrossWhich Azure feature lets a developer set a budget threshold on a subscription and fire an An app needs to fire an event when a blob is uploaded to ANY of 5 storage accounts and rouWhich Azure pattern lets a function consume messages from a Service Bus queue while gracefWhich Azure tool aggregates logs from many resources, lets developers query with Kusto (KQWhich Azure service automatically scales Function App consumption based on event source baWhich Azure service caches frequently-accessed data in-memory with Redis-compatible APIs tWhich Azure messaging service supports sessions, ordered messages, dead-letter queues, and