3Implement Azure Security

• 3.1Authentication and Authorization (Entra ID, MSAL)

  Understand implementing auth: app authentication with Microsoft Entra ID, acquiring OAuth2 tokens with MSAL, app registrations and scopes/roles, and protecting APIs. The starting point for "Implement Azure security" in AZ-204.

• 3.2Secret Management (Key Vault, Managed Identity)

  Understand secret management with Azure Key Vault, key-free authentication via managed identities, and Key Vault references from App Service/Functions.