Q59
Single choice
You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains an Azure Cosmos DB database named DB1 and an Azure Kubernetes Service (AKS) cluster named AKS1. AKS1 uses a managed identity.
You need to ensure that AKS1 can access DB1. The solution must meet the following requirements:
1. Ensure that AKS1 uses the managed identity to access DB1.
2. Follow the principle of least privilege.
Which role should you assign to the managed identity of AKS1?