Secretless access to Azure SQL server using Managed Identity
summary
Shows how to replace passworded connection strings to Azure SQL with Managed Identity and Azure AD auth using Microsoft.Data.SqlClient v3.0.0 which handles token renewal. Demo wires an App Service (system-assigned identity) to a SQL Server set with an Azure AD admin, creates a DB user named after the identity, grants db_datareader/db_datawriter, and runs SELECT 1 — connection succeeds with authentication=Active Directory Managed Identity (or Active Directory Default for local dev). Notes: RBAC growth and extra developer AD permissions are required.
AI-written summary · about
chapters (3)
related talks
48mAn in-depth review of the latest advancements in authentication for Azure SQL and SQL Server 2022
19mKeyless Connections to Azure Cosmos DB
26mAzure Managed Identities: Why are you still using anything else?!?
46mUnderstanding Azure Active Directory for Data Professionals
01h 05mBuilding Secure Microservices in Azure
51mService Principals and Managed Identities - the Identity tools every Azure developer should know
51mNavigating Modern Authentication in SQL
55mOffensive Azure Security