A snow-plow depot’s Container Apps revision stores the ACR admin username and password in the app definition so every intern can read them. How should the host authenticate to pull from ACR instead?
Select an answer to reveal the explanation.
Short Explanation
Admin user and password in the app definition is a spare key taped to the windshield. Give the Container App a managed identity with AcrPull and let identity do the handshake—no shared password for interns to screenshot.
Full Explanation
Compute hosts should authenticate to private ACR repositories with a managed identity or service principal granted AcrPull, not by embedding the registry admin credentials in the app definition. Admin user credentials are shared secrets with broad access. Disabling registry auth or placing passwords in Dockerfiles worsens exposure rather than fixing pull authentication.