Question

Your company stores application connection strings that reference the primary access key (key1) of an Azure Storage account. Security policy requires you to rotate the storage account keys periodically without causing an outage for the running applications. What is the correct procedure to rotate the keys while minimizing downtime?

Accepted Answer

Update all applications to use key2, then regenerate key1 in the storage account, and later regenerate key2 on the next rotation cycle.

Answer

Regenerate both key1 and key2 simultaneously, then update all applications with the new key1 value.

Answer

Delete the storage account and recreate it with new keys, then reconfigure all application connection strings.

Answer

Create a shared access signature (SAS) token to replace the access keys and disable key-based authentication.