An application running on an Azure VM needs to authenticate to Azure Key Vault to retrieve a secret, without the developer embedding any credential in the application code. Which Entra ID feature is purpose-built for this?

• AA managed identity for Azure resources, which lets the VM authenticate to Azure services using an automatically managed identity with no credential embedded in code
• BA shared Global Administrator account
• CA hardcoded client secret stored in the application's source code
• DConditional Access