What should you create?

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.

You need to use automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.

What should you create?
A . a secret in Azure Key Vault
B . a role assignment
C . an Azure Active Directory (Azure AD) user
D . an Azure Active Directory (Azure AD) group

Answer: B

Explanation:

References: https://docs.microsoft.com/en-us/azure/aks/kubernetes-service-principal