Advanced AI Prompt for Azure Key Vault Access Policy for Specific Applications

Act as an Azure Infrastructure Automation Engineer. Generate a Terraform HCL snippet to configure a highly restrictive Azure Key Vault Access Policy for the vault [VAULT_NAME]. Assign the managed application identity (Object ID [APP_OBJECT_ID]) exactly the following secret permissions: [SECRET_PERMISSIONS] (e.g., `get`, `list`). Explicitly omit any `certificate_permissions` and `key_permissions` blocks to enforce the principle of least-privilege. To harden the vault against public exposure, include a `network_acls` block that restricts access strictly to a designated VNet subnet and sets the `default_action` to `Deny`.