A jetty-plank inventory app receives https://<vault>.vault.azure.net/ and a managed identity. How should code address Key Vault secrets?
Select an answer to reveal the explanation.
Short Explanation
Vault URI plus credential into SecretClient—that is the address book entry. The managed identity is the badge; stuffing every secret into appsettings.json recreates the problem Key Vault solved.
Full Explanation
Applications construct a secrets client with the Key Vault URI and an Azure credential such as ManagedIdentityCredential or DefaultAzureCredential. The pattern keeps secret values in the vault rather than duplicating them into configuration files or source. Messaging services do not replace the Key Vault data plane client.