The snow-plow image lives in a private Azure Container Registry, and the Azure Container Instances group definition currently embeds the ACR admin password. How should the group authenticate for the pull instead?
Select an answer to reveal the explanation.
Short Explanation
Stop pasting the registry admin password into the group JSON. Give ACI a managed identity with AcrPull—identity badge at the door, not a sticky note with the master code.
Full Explanation
ACI can use a managed identity with the AcrPull role to retrieve images from a private registry without embedding admin credentials in the group definition. Putting passwords in CMD, sidecar env vars, or opening the registry publicly weakens or removes authentication rather than fixing the pull path.