Which secret permissions should you use?

You create a Microsoft ASP.NET Core application.

You plan to use Azure Key Vault to provide secrets to the application as configuration data.

You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege.

Which secret permissions should you use?
A . List only
B. Get only
C. Get and List

View Answer

Answer: B

Explanation:

Application data plane permissions:

✑ Keys: sign

✑ Secrets: get

Reference: https://docs.microsoft.com/en-us/azure/key-vault/key-vault-secure-your-key-vault