Skip to content
datastudyguides

AI-200 · 1.1.3 · Develop containerized solutions on Azure

App Service containers

Deploy containers to Azure App Service, including configuring App Service to supply environment variables and secrets

Run a custom image in , configure its port and environment, and pull from securely with .

Deploy your own image

Azure App Service custom container flow: pull an image from Azure Container Registry with managed identity, configure the listening port and app settings, and use Key Vault references for secrets.

runs a custom image from and pulls it again when the app restarts. Continuous deployment can add a registry webhook so a pushed image triggers an update.

Pull from ACR with identity

Give the web app a , assign only AcrPull on the registry, and set acrUseManagedIdentityCreds to true.

az acr config authentication-as-arm update -r shopreg --status enabled

The registry must allow ARM audience tokens for managed identity image pulls. If this is disabled, pulls can fail with an UNAUTHORIZED token validation error even when the role assignment is correct.

Configure the running container

Set WEBSITES_PORT when the process listens on a port other than 80. become environment variables inside the container, but reserved registry credentials are not exposed to application code.

Keep secrets out of settings

Use a as the app setting value. The app still reads an environment variable, while App Service resolves the secret through the app identity.

Key points

  • Port: set when the container does not listen on 80
  • pull: AcrPull plus `acrUseManagedIdentityCreds`
  • Registry authentication: ARM audience tokens must be allowed
  • : exposed as environment variables to the container
  • Secrets: use a instead of storing the value
  • Image updates: restart to pull again or enable continuous deployment

Click an underlined term for a one-line explanation, or see them all in the glossary .

Exam trap

Pushing a new image does not update a running app: pulls on restart, so enable continuous deployment or restart it.

Sources · 3 Microsoft Learn pages Show ▾

Checked on October 4, 2026. Report a problem

Go deeper on Microsoft Learn

Checked against Microsoft Learn on October 4, 2026. Report a problem with this card

How well do you know this?