Microsoft Certified: Identity and Access Administrator AssociateImplement and manage workload identitiesEasy
A company is implementing a security policy that mandates all workload identities must have their credentials rotated automatically every 90 days. You have several Azure Web Apps that use Managed Identities to access Azure Storage. How can you ensure these Web Apps comply with the credential rotation policy?
- AManaged Identities automatically handle credential rotation, requiring no manual intervention.
- BSwitch to using Azure AD application registrations with certificates and automate certificate rotation.
- CImplement a custom Azure Function to programmatically rotate the Managed Identity credentials.
- DManually rotate the client secrets of the Managed Identities every 90 days.
Show answer & explanationAnswer & explanation
Correct answer: A. Managed Identities automatically handle credential rotation, requiring no manual intervention.
Managed Identities for Azure resources automatically handle the rotation of their credentials. This is one of their primary benefits, eliminating the administrative overhead and security risks associated with manual credential management and ensuring compliance with rotation policies without explicit user action.
Why the other options are wrong
- B. While application registrations with certificates can be automated, Managed Identities are simpler and already meet the requirement without switching technologies or implementing additional automation.
- C. It is unnecessary to implement custom code for Managed Identity credential rotation, as it is handled automatically by Azure.
- D. Managed Identities do not have client secrets that need manual rotation; this option describes a service principal approach, not a managed identity.
Managed Identity Credential Rotation
The automatic process by which Azure handles the lifecycle and rotation of credentials used by Managed Identities, ensuring security without administrative overhead.
- Fully automated by Azure.
- Eliminates manual credential management tasks.
- Enhances security by regularly refreshing credentials.
- A key benefit of using Managed Identities.
Memory trick: Managed Identities Master Maintenance Marvelously.