Supports a cache rule with a prefix (works around an upstream bug) Supports EntraID authentication (automatic through machine identity, or manually configured), so you can use the much cheaper ACR ...