Good one

Would you follow the same pattern for giving the container app access to azure app config? Basically give the container app identity access to app config, then ref the client id of the identity via a env variable in the container?

I wish you explained what exactly that "script" is? great series though.

Is it possible to make the container app a 'trusted Microsoft service' to avoid setting up a virtual network when accessing a key vault behind a firewall?

How to pull an image from ACR to ACI using managed identity in azure devops and terraform? Please reply as soon as possible..