azure - Azure 中服务主体和托管身份之间的区别

Question

我想知道是否始终建议在 Azure 中使用托管身份(主要是系统分配的身份或服务主体)？与托管身份相比，什么时候应该在 Azure 中使用服务主体，其中一种相对于另一种的优势是什么？任何帮助将不胜感激。

Answer 1

Internally, managed identities are service principals of a special type, which are locked to only be used with Azure resources. When the managed identity is deleted, the corresponding service principal is automatically removed. Also, when a User-Assigned or System-Assigned Identity is created, the Managed Identity Resource Provider (MSRP) issues a certificate internally to that identity.

Source: What are managed identities for Azure resources?

和

So what’s the difference?
Put simply, the difference between a managed identity and a service principal is that a managed identity manages the creation and automatic renewal of a service principal on your behalf.

Source: What’s an Azure Service Principal and Managed Identity?