A machine identity is a digital identity used by a non-human computing entity—such as a workload, application, container, device, script or automated process—to authenticate and act on a system. It should be distinguished from the key, certificate, token or secret used to authenticate it.
Machine identities require ownership, purpose, lifecycle, least-privilege access, credential rotation and monitoring, but their lifecycle rarely originates in HR.