An elm-bark archive must hold a signing key and a TLS certificate the app loads at runtime. Which store is appropriate?
Select an answer to reveal the explanation.
Short Explanation
Signing keys and TLS certs are vault citizens—Key Vault—not App Configuration strings or Insights properties. App Configuration is for non-secret settings; the vault is for the cryptographic stuff.
Full Explanation
Azure Key Vault supports secrets, cryptographic keys, and certificates. App Configuration is intended for application settings and feature flags, not as the primary store for signing keys or TLS certificates. Telemetry systems and anonymous Blob containers are inappropriate secret or certificate stores.