An Azure developer must ensure their web app meets the AZ-204 requirement for secure secret management. Which approach is the recommended best practice?
-
A
Store secrets in appsettings.json committed to source control
-
B
Use Azure Key Vault references in App Service configuration
-
C
Hard-code secrets in environment variables inside Dockerfile
-
D
Pass secrets as query string parameters to API calls