TL;DR The Terraform state has more benefits than drawbacks, and it should not be considered a disadvantage in a well managed infrastructure as code environment!

TL;DR Remember to associate a user defined route and enable service endpoints on your API Management (APIM) subnet when deploying in an internal network in a Virtual WAN or other forced routing scenario.

TL;DR Remember to associate a user defined route and enable service endpoints on your API Management (APIM) subnet when deploying in an internal network in a Virtual WAN or other forced routing scenario.

TL;DR Stop providing your Terraform identities with owner permissions on your subscriptions!

TL;DR Utilize user-assigned or system-assigned managed identities where this supports your use case.

TL;DR Terraform supports using Entra ID authentication to Azure Storage Accounts, and you can easily enable it.