Prefer Managed Identity over Shared Access Keys for Storage Account about docs-ifa

[pim-simons]

Indeed, add a user assigned managed identity to the Invictus for Azure deployment and use that to connect to all Invictus related components.

[pim-simons]

Maybe we can look at using Managed Identities on a broader scope than just Storage Account?
Should be possible to use this to call the API's also right?

[Pauwelz]

Perhaps, certainly if we use a User-Assigned one, we should be able to get all our Logic Apps to use the same one.
This was more from the customer perspective where they want it to be MI towards the Storage Account at first.

[stijnmoreels]

Thx, @Pauwelz , for all these security suggestions! There is indeed a great opportunity to improve this.
Thank you! 🏅