Managed identities for Azure resources is a feature of Azure Active Directory. The feature provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without any credentials in your code. There are two types of managed identities:
System Assigned Managed Identity
Enabled on the azure service instance
Created as part of the resource
Shared lifecycle with the resource, meaning when the resource is deleted the identity is also deleted as well
Cannot be shared (only associated with a single resource)
User Assigned Managed Identity:
Created as a standalone resource
Has an independent life-cycle. Not dependent on the resource
Can be shared with multiple resources
References:
Comments