microsoft / api-guidelines

Microsoft REST API Guidelines
Other
22.69k stars 2.71k forks source link

Make auth guidelines more explicit #544

Open tg-msft opened 5 months ago

tg-msft commented 5 months ago

We should add guidelines that require new services to start with managed identity, explicitly discourage the use of connection strings, etc. We're always telling that to service teams during reviews, but making it explicit would be helpful too.