Implementing Managed Identities
With managed identities (previously called managed service identities), secrets and secret rotation are automatically handled by Azure. You do not even have access to the credentials. This is the recommended way to authenticate your apps with Key Vault and other resources that support ME-ID authentication.
If you are building an app using an Azure resource such as App Service that accesses anything via ME-ID authentication, using a managed identity is generally the recommended practice. You can provide the managed identity with all the permissions required without having to manage any of the credentials yourself. A link to a list of services that can use managed identities can be found in the Further reading section of this chapter.
Internally, managed identities are a special type of service principal (not app registration) that are only usable with Azure resources. It is important to understand the two types of managed identity, as discussed...
