Generate cloud provider credentials with Vault | Vault | HashiCorp Developer
Vault can dynamically generate Azure service principal for applications to use.
developer.hashicorp.com