An architect needs to design authentication for a mobile app that accesses multiple Azure services (Blob Storage, Cosmos DB, Key Vault) without embedding credentials in the app. Which identity approach is recommended?
-
A
Store credentials in Azure Key Vault and retrieve at startup
-
B
Use Azure AD app registration with client credentials flow
-
C
Use Azure AD B2C with user delegation tokens scoped to each service
-
D
Assign a managed identity to the app and grant RBAC roles on each service