Explanation:
The correct answer is A: an Azure role assignment condition. This feature allows you to create fine-grained access controls based on specific conditions, such as requiring an object to have a specific tag to be accessible. This makes it the most appropriate solution for restricting user access to specific blobs based on blob index tags. Options B, C, and D do not provide the necessary level of tag-based filtering required for the scenario.
In an Azure Storage account with 5,000 blobs, how can you restrict user access to only specific blobs based on blob index tags?
A
Role assignment conditions provide fine-grained access control, allowing you to add checks for specific object tags.
B
Stored access policies define access levels for containers or blobs but do not support dynamic tag-based filtering.
C
Just-in-time VM access is irrelevant for blob storage, as it is designed for virtual machine access management.
D
Shared access signatures (SAS) offer temporary, granular permissions on blobs, including conditional access based on index tags.
No comments yet.