Azure AD with Azure SQL Database (Best Security approach in Connection String)

Question

Hi,

In Azure SQL Database (Single Instance) what is the best approach for connecting to a Database ?

I want to maintain a connection string with Azure SQL DB without exposing the credentials. i.e.

Not using SQL authentication, wherein we provide username and password for logins and are only valid in the context of a specific database within the server

Need to use Azure AD authentication, use identities managed by Azure AD.

However I'm able to implement this (https://learn.microsoft.com/en-in/azure/sql-database/active-directory-interactive-connect-azure-sql-db) where we connect with Azure AD credentials.

But I need to maintain a connection string which is always active if I give Azure AD credentials in connection string it will get disconnected as Azure Session token might expire at some point of time.

Any Suggestion here how to achieve this maintain Azure SQL connection without exposing Azure AD credentials ?

(https://learn.microsoft.com/en-us/azure/sql-database/sql-database-security-tutorial#secure-connection-strings)

Answer 1

This website is showing the 3 main options you could use:
1

Answer 2

I'm also interested in this situation.