Your company is developing an Azure API. You need to implement authentication for the Azure API. You have the following requirements: All API calls must be secu...
Microsoft AZ-204 Exam
Questions Number: 162 out of 355 Questions
45.63%
Question 162
Your company is developing an Azure API. You need to implement authentication for the Azure API. You have the following requirements: All API calls must be secure. - Callers to the API must not send credentials to the API. Which authentication mechanism should you use?
Use the authentication-managed-identity policy to authenticate with a backend service using the managed identity of the API Management service. This policy essentially uses the managed identity to obtain an access token from Azure Active Directory for accessing the specified resource. After successfully obtaining the token, the policy will set the value of the token in the Authorization header using the Bearer scheme. Reference: https://docs.microsoft.com/bs-cyrl-ba/azure/api-management/api-management-authentication-policies
