AZ-2001: Implement security through a pipeline using Azure DevOps

• Configuring secure access to pipeline resources
• Configure and validate permissions
• Set up a project and repository structure to support secure pipelines
• Extending a pipeline to use multiple templates
• Identity management for projects, pipelines, and agents

Implementing security through a pipeline using Azure DevOps

• Setting up a project and repository structure to support secure pipelines: This module is designed to help students understand the importance of setting up a secure project and repository structure to support pipelines in Azure DevOps. It covers the basic concepts and best practices for organizing the project and repository structure and moving the security repository outside of the application project.
• Configuring secure access to pipeline resources: This module is designed to help students understand the importance of pipeline security and how to protect pipeline resources using Azure DevOps. It covers basic concepts and best practices for secure agent groups, secret variables, files and storage, service connections, environments, and repositories.
• Identity management for projects, pipelines, and agents:
  This module is designed to help students understand the importance of managing project, pipeline, and agent identity in Azure DevOps. It covers the basic concepts and best practices for setting up a Microsoft-hosted pool, project agents, and agent identities, as well as scoping a service connection and converting it to a managed identity.
• Setting Up and Validating Permissions: This covers basic concepts and best practices for setting up and validating user permissions, pipeline permissions, branch and approval checks, and permissions auditing and management.
• Extending a pipeline to use multiple templates: This module is designed to help students understand the importance of extending a pipeline to multiple templates and how to do so using Azure DevOps. It covers basic concepts and best practices for creating nested templates, rewriting the main deployment pipeline, configuring the pipeline and application to use tokenization, removing plain text secrets, restricting agent registration, and conditionally identifying and removing script tasks.
• Configuring secure access to Azure Repos from pipelines: This module is designed to help students understand the importance of securing access to Azure Repos from pipelines and how to do so using Azure DevOps. It covers the basic concepts and best practices for securing access to packages, credential secrets, service secrets, and Azure Key Vault.
• Configuring pipelines to safely use variables and parameters: This module is designed to help students understand the importance of configuring pipelines to safely use variables and parameters in Azure DevOps. It covers the basic concepts and best practices for ensuring that parameters and variables retain their type, identifying and restricting unsafe use of parameters and variables, moving parameters to a type-safe YAML file, limiting variables that can be set at queue time, and validating that required variables are present and set correctly.

Candidates for this credential should be familiar with continuous integration and continuous deployment (CI/CD) tools, including Azure Pipelines.

• Course: English / Spanish
• Labs: English / Spanish

This course is part of the Microsoft Applied Skills Credentials.

To earn this Microsoft applied skills credential, learners must demonstrate the ability to deploy a secure Azure Pipelines instance.

Applied Skills: Explore all credentials in one guide