User-Assigned Managed Identity configured No passwords stored in connection strings Azure AD authentication to SQL Database Principle of least privilege (db_datareader, db_datawriter only) ...