App Configuration Access Key Authentication Disabled

LOW
Source
CloudSploit
ID
app-configuration-access-key-authentication-disabled

App Configuration Access Key Authentication Disabled

Ensures that access key authentication is disabled for App Configuration.

By default, requests can be authenticated with either Microsoft Entra credentials, or by using an access key. For enhanced security, centralized identity management, and seamless integration with Azure's authentication and authorization services, it is recommended to rely on Azure Active Directory (Azure AD) and disable local authentication for Azure App Configurations.

Ensure that Azure App Configurations have access key authentication disabled.