[unoti]

> I really dislike how Azure makes you juggle keys in order to make any two Azure things talk together.

Actually there is a better way. Look into “Managed Identity”. This allows you to grant access from one service to another, for example grant access to allow a specific VM to work with your storage account.

[bob1029]

This is what we are using for everything. It makes life so much easier.

So far, our new Azure tenant has absolutely zero passwords or shared secrets to keep track of.

Granting a function app access to SQL Server by way of the app's name felt like some kind of BS magic trick to me at first. But it absolutely works. Experiences like this give me hope for the future.