A secret's value must be rotated automatically on a schedule. Which feature enables this without manual intervention?
- A Manual rotation with reminder alerts
- B Key Vault secret rotation policy with Azure Functions or Event Grid automation (correct answer)
- C Automatic rotation is built into Key Vault for all secrets
- D Soft delete with auto-renewal
Shortcut: Key Vault supports secret rotation policies that trigger Event Grid events at near-expiry. An Azure Function or Logic App handles the actual rotation (fetch new value, update secret), then updates the secret version.