Your app needs to access a storage account. What is the best way to grant it the access to minimize the number of secrets used when you also need to limit the access to be available for next 30 days only?