How to Authentication IoT Central devices with other Azure services? (example: download OTA bin)

Question

In the reference architectures for IOT Hub\\Central you can easily see how the SAS or X509 Cert is used for device authentication. As an example, look at this MXChip OTA Ex