I’ve never been able to stomach Azure (as much as I like Microsoft’s tools) because it lacks anything like AWS IAM. Without it having actual, pragmatic security let alone simple, cost effective audit documentation seems like so much more of a headache.