An app must pull from a private ACR. Which approach avoids storing registry credentials?

1. A Store the ACR admin password as a Container Apps secret
2. ✓ B Assign the app a managed identity with AcrPull and reference it in the registry configuration (correct answer)
3. C Make the registry public
4. D Copy the image into the environment

Shortcut: Container Apps can authenticate to ACR with a system- or user-assigned managed identity granted AcrPull, eliminating stored registry credentials.