The grain-silo storage account key appeared in a support ticket. How should the security engineer rotate keys with minimal downtime?
Select an answer to reveal the explanation.
Short Explanation
Two keys are like two spare dock keys on a ring. Swing apps to key2, cut key1, then swing back—don’t sink the whole silo account.
Full Explanation
Each storage account exposes two access keys so operators can rotate without immediate outage: point clients at the unused key, regenerate the compromised key, then optionally flip back and regenerate the other. Deleting the account destroys data and identities tied to the resource. Regenerating both keys simultaneously while clients still use one of them causes widespread failures. Network firewall changes do not invalidate a leaked key.