9a4f3b2d-8c3e-4f6f-9a5b-2d7b6c4e1f90

[giscus[bot]]

9a4f3b2d-8c3e-4f6f-9a5b-2d7b6c4e1f90

Learn why Managed Identity should be your default authentication method in Azure projects.

https://www.ssw.com.au/rules/use-managed-identity-in-azure

[Aibono1225]

Good intro to Managed Identities. Just curious - are there any scenarios where they’re not a good fit? 🤔

[Ben0189]

Managed identities are usually the right choice for Azure-to-Azure communication, but they can be an investment for teams that are unfamiliar with the cloud setup. They also get more complex in enterprise applications, where you need extra design considerations around local development, CI/CD, and role assignments.

[andrewwaltosssw]

This makes sense in the same way we moved away from password strings to passcodes and MFA, moving away from connection strings in config is a step toward more maintainable and secure apps.

[stephanfakossw]

Great video and rule Ben

[TobyChurches]

Great video Ben! Seems like a no brainer. I havent really had to work in this space but its something that I would definitely consider if I were

[jakebayliss]

Awesome video and very well explained! Something to remember is that this is mainly for azure-to-azure comms - local dev and external services will be a bit different

[ricksu978]

Nice metaphor to explain managed identity in simple manner!

Sometimes it could be a pain to figure the correct role assignment

https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

[designbyalex]

Great rule and even better video! Learnt something today 🙏

[danielmackay]

Nice easy to understand video Ben! 👏

I see there is an option to create system vs user managed identities, when would I create one over another?

Would be helpful to have the C# code snippet you showed in the rule.

[vladislav-kir]

Great video from Ben! I loved the real world parallel about using keys vs biometric data

[jeoffreyfischer]

Quick and easy rule! Love it :) The video really helps understand what managed identities are and how to configure them

[RobJT-wq]

Awesome Rule Ben,

Managed Identities are my favourite.

[bahjatalaadelssw]

This is great, anything to that saves me from having to sign in to 4 apps everyday.

[Ben0189]

The challenges with managed identities:

1. Supporting local development scenarios where managed identities are not available
2. Ensuring correct role assignments following the principle of least privilege
3. Aligning CI/CD pipelines by assigning equivalent roles to the service principal

[jimmy1992abc]

When you throw your physical keys away, is there any backup for the managed identities (in case they were broken)? I believe there will be something.

[Ben0189]

Not really — managed identities themselves are generally managed by Azure and don’t “break” like a stored key or finger print device

[isaaclombardssw]

Haven't tried it personally, but it's a good rule and managed identities are a compelling solution!

[Ben0189]

When I dive deeper into implementing managed identities in enterprise projects, I run into a few key challenges:

1. Local dev without managed identity
2. Getting role assignments right (least privilege)
3. Aligning CI/CD service principal permissions

[Calinator444]

Awesome video Ben.

I've had some pain setting up app persmissions with Azure Managed identities before. I created an azure managed identity at the subscription level, which made the setup for my app confusing. Creating managed identities at the Resource Group level makes them easier to find.

[miichaelsmedley]

Knowing the identity is being managed in one place makes security easier. Good Rule.

[chrisschultzssw]

Great job with the video! As other have mentioned, I'd love to see more about CI/CD and System-assigned vs User-assigned.

[SamBWagner]

Nice video! Fun stuff

[ZenoWang1999]

One thing I noticed is that local debugging can be a bit tricky since Managed Identity isn't available outside Azure, so you need to set up DefaultAzureCredential as a fallback.

[thom-wang]

Haven't used Managed Identities yet. But this video truly opens up the gate for me. Great job, Ben!

[jimmidier]

This is valuable insight, good work Ben

[yaqi-lyu]

Nice introduction to the managed identity. Looking forward to seeing how to support local development.

[JeanThirion]

I love Managed Identities.

[PothieuG]

So convenient !
Hard to go back while you tasted Managed Identities.

[Freego1783]

Seems really convenient! I'll try to give it a go in my next project 😊

[kulesy]

I'm all up for moving secrets outside of your application. This seems like a great way to do that!

[tino-liu]

Oh great video! I should try this thing out