Developers often inherit security risk the moment a credential lands in code or configuration. This session shows how to build secretless Azure applications by relying on managed identities, which replace secrets like access keys and passwords and can be granted permissions using Azure role-based access control (RBAC).

You’ll also see how Private Endpoints / Private Link shrink your attack surface by keeping service traffic on private connectivity, plus how the private endpoint connection approval flow changes depending on RBAC permissions (automatic vs manual approval).

By the end, attendees will be able to map an app’s dependencies to least-privilege RBAC assignments and pair them with private network access patterns—reducing credential leakage and unintended exposure while keeping developer workflows practical.