AZ-2001: Implement security through a pipeline using Azure DevOps

Course Description: AZ-2001: Implement Security Through a Pipeline Using Azure DevOps

To earn this Microsoft applied skills credential, students must demonstrate the ability to deploy a secure Azure Pipelines instance.

This course will teach you how to configure and secure Azure Pipelines, and you'll also have opportunities to practice practical skills. These skills include configuring secure access to pipeline resources, configuring and validating permissions, setting up a project and repository structure, extending a pipeline, configuring pipelines to use variables and parameters securely, and managing the identity of projects, pipelines, and agents.

Intermediate - Azure, Azure DevOps - Administrator - DevOps

Goals

• Configuring secure access to pipeline resources
• Configure and validate permissions
• Set up a project and repository structure to support secure pipelines
• Extending a pipeline to use multiple templates
• Identity management for projects, pipelines, and agents

Training Route

Implementing security through a pipeline using Azure DevOps

• Setting Up a Project and Repository Structure to Support Secure Pipelines: This module is designed to help students understand the importance of setting up a secure project and repository structure to support pipelines in Azure DevOps. It covers the basic concepts and best practices for organizing the project and repository structure and moving the security repository outside of the application project.
• Configuring Secure Access to Pipeline Resources: This module is designed to help students understand the importance of pipeline security and how to secure pipeline resources using Azure DevOps. It covers basic concepts and best practices for secure agent pools, secret variables, files and storage, service connections, environments, and repositories.
• Identity management for projects, pipelines, and agents:
  This module is designed to help students understand the importance of managing project, pipeline, and agent identities in Azure DevOps. It covers the basic concepts and best practices for configuring Microsoft-hosted pools, project agents, and agent identities, as well as configuring the scope of a service connection and converting it into a managed identity.
• Configuring and Validating Permissions: This guide covers basic concepts and best practices for configuring and validating user permissions, pipeline permissions, approval and branch checks, and auditing and managing permissions.
• Extending a Pipeline to Use Multiple Templates: This module is designed to help students understand the importance of extending a pipeline to multiple templates and how to do so using Azure DevOps. It covers basic concepts and best practices for creating nested templates, rewriting the main deployment pipeline, configuring the pipeline and application to use tokenization, removing plaintext secrets, restricting agent logging, and conditionally identifying and removing script tasks.
• Configuring Secure Access to Azure Repos from Pipelines: This module is designed to help students understand the importance of securing access to Azure Repos from pipelines and how to do so using Azure DevOps. It covers the basic concepts and best practices for securing access to packages, credential secrets, service secrets, and Azure Key Vault.
• Configuring Pipelines to Use Variables and Parameters Safely: This module is designed to help students understand the importance of configuring pipelines to use variables and parameters safely in Azure DevOps. It covers the basic concepts and best practices for ensuring that parameters and variables retain their types, identifying and restricting unsafe use of parameters and variables, moving parameters to a type-safe YAML file, limiting the variables that can be set at queue time, and validating that required variables are present and set correctly.

Prerequisites

Candidates for this credential should be familiar with continuous integration and continuous deployment (CI/CD) tools, including Azure Pipelines.

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Applied Skills

This course is part of the Microsoft Applied Skills Credentials.

To earn this Microsoft applied skills credential, students must demonstrate the ability to deploy a secure Azure Pipelines instance.

Applied Skills: Explore all credentials in one guide