MCRA Azure native controls

[@lhome8599]

Good progress but still missing controls around Service Principal, sure there is Workload Identities for internally registered apps, but then for external app integration, you are basically handing off the keys to your vendors and praying that they also have Workload Identities. Why is Workload Identities an extra license is another issue.