An Azure API must connect to SQL without storing a database password. Which supported design should be evaluated?

1. Azure management Reader assumed to grant every SELECT
2. An anonymous database connection
3. A Global Administrator password in application source
4. Managed identity authentication with appropriate Entra setup and database permissions