Which authentication flow should a Container App use to call Azure SQL with no stored credentials?
- A SQL authentication with a password in Key Vault
- B Managed identity with an Entra ID access token (correct answer)
- C A connection string with an embedded key
- D Certificate stored in the image
Shortcut: The app requests a token for the SQL resource using its managed identity and connects as an Entra ID principal, so no password exists anywhere in the system.