I’m considering an initiative to get rid of secrets in all of our Azure resources using MSI, primarily. I’d set up MSI everywhere we’re using text credentials and client secrets, and let MSI do the heavy lifting.

Is there a resource for which MSI cannot be used for authentication, and some client secret has to be maintained?

For bonus points: is there some Azure resource that MSI won’t work for to get rid of the secret, but there’s another approach that will work?

NO MORE SECRETS