Azure managed identity
Explain Azure managed identities and why they beat storing client secrets for Key Vault access.
Answers use simple, clear English.
Quick interview answer
Managed identity is an Entra identity for an Azure resource. The platform issues tokens so the app can access Key Vault/Storage/SQL via RBAC without a secret in config. Secrets can’t leak from appsettings if they aren’t there.
Detailed answer
Managed identity is an Entra identity for an Azure resource. The platform issues tokens so the app can access Key Vault/Storage/SQL via RBAC without a secret in config. Secrets can’t leak from appsettings if they aren’t there. Still assign least-privilege RBAC roles on the vault/secrets.
Real example & use case
App Service MI gets Key Vault Secrets User on one vault.
Pros & cons
Pros: passwordless service auth. Cons: local-dev needs alternate auth story.