PRODUCTION SCENARIO
A developer finds that a Foundry resource key was committed to a public sample repository last week. The key-based clients have to keep working today.
What has to happen first?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: Move clients to the second key, then regenerate the first
A resource carries two keys precisely so one can be regenerated without a service disruption: move the clients to the second key, then regenerate the exposed one. Disabling local authentication also stops key access, and it breaks every key-based client at once. Rewriting the latest commit leaves the key in history, forks, and caches. A private endpoint limits where the service is called from, not a credential that is already public.
Official Source: https://learn.microsoft.com/en-us/azure/ai-services/authentication ↗