A data scientist needs to access data in an Azure Data Lake Storage Gen2 account from Azure ML. You need to ensure the workspace uses the most secure method to access this data. What should you configure?
Trap 1: Shared Key
Shared keys are less secure than managed identities and are not recommended for production.
Trap 2: Public Access
Public access is insecure and violates data governance best practices.
Trap 3: Account SAS
SAS tokens introduce management overhead and expiration risks.
- A
Shared Key
Why wrong: Shared keys are less secure than managed identities and are not recommended for production.
- B
User-Assigned Managed Identity
Managed identities provide secure, secret-less authentication to Azure resources.
- C
Public Access
Why wrong: Public access is insecure and violates data governance best practices.
- D
Account SAS
Why wrong: SAS tokens introduce management overhead and expiration risks.