An organization deploys a SOAR playbook in Microsoft Sentinel triggered when a Defender for AI alert fires for suspicious Azure OpenAI usage. The playbook must automatically revoke the API key used in the suspicious request. Which Logic App connector action should be used?

A is correct because Azure OpenAI API keys are managed through the Azure Resource Manager API. The Logic App Azure Resource Manager connector can invoke the 'regenerateKey' operation on the Azure OpenAI resource, which invalidates the existing API key, preventing further use by the compromised caller. B is incorrect because the Azure OpenAI key regeneration is accessed through the ARM API; using the ARM connector is the appropriate abstraction. C is incorrect because revoking a secret in Key Vault only helps if the application fetches the key from Key Vault at runtime; the ARM key regeneration is required regardless. D is incorrect because Microsoft Sentinel does not have a native 'block list' for Azure OpenAI API keys.