Allow Environment or Label specific permission options
I am planning to store Development, Test, and Production configuration in a single App Configuration instance using Labels. Clients will access the configuration using Managed Identity and I want to restrict access to "Production" Label.
For security reason separation in different AppConfiguration instances in preferable, because it allows to utilize VNET (work item in progress) and other security-in-depth practices.
We are working on improving our tools for cross-instance management to mitigate some of the inconvenience.