You are creating an Azure Kubernetes Service (AKS) cluster that must access an Azure Container Registry. You want the AKS cluster to authenticate to the registry using the cluster's auto-generated service principal. Solution: create an Azure Active Directory role assignment. Does this solution meet the requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: No.
Why this is the answer
This solution does not meet the requirement because an Azure AD role assignment is not the correct mechanism for an AKS cluster's service principal to authenticate to an Azure Container Registry (ACR). While role assignments are used for granting permissions, the specific requirement is for AKS to pull images from ACR. The correct approach involves granting the AKS cluster's managed identity (or service principal, if not using managed identities) the AcrPull role on the ACR instance. This is typically done during AKS cluster creation or by updating the cluster's service principal permissions on the ACR.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed