search

Mimetis / ProjectY

Project Y is a straightforward Landing Zones automated deployment tool dedicated to data processing.
MIT License
7 stars 5 forks source link

Using Azure Managed Identity Application #14

Open Mimetis opened 3 years ago

Mimetis commented 3 years ago

Idea

Can we replace the Service Principal with a Managed Identity ?

Today

For now, the Web Ui and the Web API are using a SPN to access all the azure services.

{
  "AzureAd": {
    "Instance": "https://login.microsoftonline.com/",
    "Domain": "microsoft.onmicrosoft.com",
    "TenantId": "XXXXXX-XXXX-XXXX-XXXX-XXXXXX",
    "ClientId": "CCCCCC-CCCC-CCCC-CCCC-CCCCCC",
    "ClientObjectId": "UUUUUU-UUUU-UUUU-UUUU-UUUUU",
    "CallbackPath": "/signin-oidc",
    "SubscriptionId": "SSSSSSS-SSSSS-SSSSS-SSSSS-SSSSSSS",
    "ClientSecret": "azdazdazdadzazdazdzadazdzazdzadazdazdza"
  }
}

Expectation

Can we use the Azure Managed Application with Managed Identity instead of a simple Azure Application using a Service Principal ? (and stop storing a client secret in app settings)