Use MSI Service Principal

[spaelling]

At deployment an MSI (Managed Service Identity) is created. This identity can be assigned a role on automation account or other azure resources.

See this explaining how to get a token. This way a SP does not have to be created, and we will never touch any passwords (client secrets)