SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

By Microsoft · Question Mode

QuestionQ30

Manage identity, access, and governance

You have an Azure Logic Apps Consumption workflow that uses a Request trigger. Every supported authentication method is enabled on the Request trigger.

You need to ensure that the endpoint accepts OAuth-based requests only. The solution must minimize costs.

What should you do?

Explanation

For a Consumption workflow that starts with a Request trigger, OAuth 2.0 and shared access signature (SAS) are the relevant inbound authorization schemes. Enabling OAuth does not itself turn off SAS. Disabling SAS authentication blocks requests that use SAS keys or signatures, leaving OAuth-based access without the added cost of Azure API Management.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!