This message was deleted.

Yes. Same goes for any cloud provider: create an account for your IaC and automation, and give it the privileges it needs. In sensitive or secure areas and industries, it's sensible to create multiple IaC service accounts like this, so that each one can control only a limited set of accounts or resources, as appropriate.

@little-cartoon-10569 On Azure you would not create a user account, no. That's what "app registrations" are there for.

Nice. It's pretty clunky to have to use up a user for an API integration. Pretty expensive too.. OpsGenie, I'm looking at you.