Hi! I'm working in a restricted customer environment but we've managed to get us at least some privileges to do stuff in their Azure. I'm trying to setup an AKS there and I've managed to confirm that yes, I have necessary privileges to do just that but only when binding AKS to managed identities instead of service principals (which is apparently also the recommended way these days). I've been going around Pulumi documentation, examples etc and haven't yet found a reasonable way to create an AKS cluster with Pulumi which uses managed identities. I'm pretty certain this should be possible so I decided to ask here if someone could just point me in the correct direction with this. Cheers!