Which is best alternative authentication when we are pulling data from 30 different sources other than Managed Identity or Local Authentication

Sai Harsha Vardhan Settipalli 21 Reputation points
2024-03-26T10:58:47.6466667+00:00

I am having 30 different source storages from there I am pulling information using SPN Key but S360 is raising vulnerability to disable local authentication and using managed identity also having some issue at our end(process issue). So, I am requesting everyone to suggest me one better approach other than managed identity to overcome this issue. We cannot approach all 30 source teams to update keys at any point of time.

Info: If we use managed Identity every time we need to get the role to our managed Identity. Correct me if I am wrong in managed Identity case.

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,428 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
6,882 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,476 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. hossein jalilian 2,535 Reputation points
    2024-03-28T08:55:41.69+00:00

    Thanks for posting your question in the Microsoft Q&A forum.

    I have two suggestions to address your issue:

    Service Principal with Key Vault: Securely store SPN keys in Azure Key Vault and authenticate using a Service Principal. This ensures sensitive credentials are protected and accessed securely when needed.

    Centralized Management: Utilize Key Vault for centralized management of secrets across multiple data sources. This streamlines credential management without requiring involvement from each source team individually, enhancing security and operational efficiency.


    Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful