Question 1

Explanation

To access Azure Blob Storage from an application without embedding credentials, you should recommend using Managed Identities. Managed Identities for Azure Resources is a feature of Azure Active Directory (Azure AD) that provides Azure services with an automatically managed identity in Azure AD. This allows for secure and easy access to Azure services without the need for managing credentials.

Using Managed Identities, your application can authenticate to services that support Azure AD authentication, like Azure Blob Storage, without any credentials (like connection strings) in your code or configuration files. This not only enhances security by eliminating the need for credentials in the code but also simplifies the management of credentials, as they are automatically managed by Azure.

When your application is assigned a Managed Identity, Azure takes care of creating and managing the identity. Your application can use this identity to request tokens from Azure AD for accessing resources. This is particularly useful in scenarios where you need to access other Azure services securely and without hard-coding credentials.

More info: Managed identities for Azure resources | Microsoft Learn