Keeping a Close Eye on Applications

Aad: Managed identities for clients authentication are absolutely the way to go. AAD handles the credentials you don't have to, there's nothing you need to store somewhere. Key Vault just turns a crypto problem into an authorization problem; that's all it does. And I'll give you as long as it's done correctly for client authentication - and I'm not really concerned too much about managed identities on Azure VMs.