Microsoft Azure Security Technologies (AZ-500)

Which method should be used to dynamically construct a resource ID for a key vault secret during deployments?

1. Using parameters file

2. Creating a key vault access policy

3. Using a linked template

4. Implementing an automation account

The correct answer is: Using a linked template

Using a linked template allows for the dynamic construction of a resource ID during deployments in Azure, particularly for resources like key vault secrets. Linked templates provide a way to break complex deployments into smaller, manageable pieces, promoting reusability and organization. When deploying a resource, you often need to reference other resources programmatically, such as accessing the secrets in a Key Vault. A linked template can include parameters that dynamically build the resource ID based on the defined actions in the deployment. This method is useful in scenarios where the specific identifiers for resources might vary between environments or are generated at runtime. Utilizing a parameters file is beneficial for defining variable values in a deployment but does not inherently create a dynamic ID structure. Similarly, creating a key vault access policy primarily deals with permissions and access control rather than resource ID construction. Implementing an automation account focuses on automating tasks, which does not directly relate to constructing resource identifiers during deployments. In summary, linked templates facilitate the dynamic generation of resource IDs, making them the correct method for constructing a resource ID for a key vault secret during deployments.