<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Azure Managed Identities on aklefdal&#39;s tech blog</title>
    <link>https://aklefdal.com/tags/azure-managed-identities/</link>
    <description>Recent content in Azure Managed Identities on aklefdal&#39;s tech blog</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Mon, 17 Mar 2025 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://aklefdal.com/tags/azure-managed-identities/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Password-less access from pipeline to database</title>
      <link>https://aklefdal.com/2025/03/password-less-access-from-pipeline-to-db/</link>
      <pubDate>Mon, 17 Mar 2025 00:00:00 +0000</pubDate>
      <guid>https://aklefdal.com/2025/03/password-less-access-from-pipeline-to-db/</guid>
      <description>&lt;h2 id=&#34;the-goal&#34;&gt;The goal&lt;/h2&gt;&#xA;&lt;p&gt;The goal is to be able to run database migrations as part of a Azure DevOps Pipeline with using a stored secret anywhere. The databases are Azure Sql Databases, connected to a VNET, with no public access. There are two major problems to solve:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Network access&lt;/li&gt;&#xA;&lt;li&gt;Authentication&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;background&#34;&gt;Background&lt;/h2&gt;&#xA;&lt;p&gt;My current project is at a company with a software solution that has been in development for more than 20 years. Traditionally it ran on-premise, that is at the customer&amp;rsquo;s site. This is still the case for a few customers, but most customers are now using the service served from a cloud-hosted solution - Software-as-a-Service - SaaS&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
