Contaniner app

Question

If I have a container app that will access to a key vault using a manage identity, the keyvualt can be in a different region as the container app is?

Answer 1

Correct - a container app can access a key vault in a different region using a managed identity, as long as both resources are within the subscription(s) associated with the same Entra tenant and the appropriate access policies or Azure RBAC roles are assigned. Azure Key Vault is a global service that can securely handle requests from resources in other regions. However, for optimal performance and reduced latency, you might want to keep the Key Vault and container app in the same region whenever possible.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin