Managed identity should be used in your web app

[feliperomero3]

Description

For enhanced authentication security, use a managed identity.
On Azure, managed identities eliminate the need for developers to have to manage credentials by providing an identity for the Azure resource in Azure AD and using it to obtain Azure Active Directory (Azure AD) tokens.

Remediation steps

Manual remediation

To create a managed identity for your web app:

1. Go to the App Service for your API app
2. Scroll to the Settings group in the left navigation
3. Select Identity
4. Use System assigned or User assigned identity following the steps described in this doc: https://aka.ms/managed-identity

Retrofit all the necessary changes into the ARM template of the solution.

[feliperomero3]

The App Service Managed Identity will be used to authenticate the App Service to Azure SQL. This way we can remove the connection string.