This capability enables AKS applications to access cloud resources securely using Azure Active Directory (AAD). AAD greatly simplifies access control since it can be used as the identity provider to any type of resource, including cluster, node, pod, etc. Customers simply need to configure identities and bind them to a resource. After an identity is bound to a pod, containerized applications can then access the pod and any other resources in the cloud that use AAD as an identity provider.
Learn more.