An eligible Azure workload needs to authenticate to another supported service without storing a client secret. Which identity feature should be evaluated?

1. Anonymous administrative access
2. Managed identities
3. A human password committed to source
4. A retention label