AI-300: Operationalizing Machine Learning and Generative AI SolutionsDemo

By Microsoft · Question Mode

QuestionQ3

Design and implement a GenAIOps infrastructure

An organization uses Microsoft Foundry to develop generative AI projects that access shared Azure resources, including storage accounts and vector databases.

The organization’s security policy requires eliminating secret key-based authentication and enforcing least-privilege access. Configure identity and access so that:

  • Services authenticate without stored credentials.
  • Permissions are appropriately scoped across projects and shared resources.

Configure the appropriate identity or access mechanism for each requirement. Each configuration mechanism may be used once, more than once, or not at all.

Drag & Drop
API key
Managed identity
Role-based access control (RBAC) role assignment
Service principal
Allow Microsoft Foundry workloads to access Azure resources with key-less authentication.
Control which users can manage projects and deployments.
Explanation

A managed identity lets a Foundry workload authenticate to Azure services through Microsoft Entra ID without storing API keys or other credentials. Azure RBAC role assignments define the permissions granted to users, managed identities, or other principals and can be scoped to a project, Foundry resource, resource group, or subscription to enforce least privilege for project and deployment management.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!