A new feature, primarily oriented for developers, has been released on Azure and is called Managed Service Identity.
The idea is to be able to call a cloud services but hiding the credentials used (as you should do for any PowerShell scripts by the way 
).
After activating Azure Managed Service Identity, Azure will automatically creates a service principal for the Azure service you are going to call with your code (virtual machine, app service or functions – more to come), then you just need to use this Service Principal in your code.
To start with Azure Managed Service Identity go to https://docs.microsoft.com/en-us/azure/active-directory/msi-overview