AZ-2001: Implement security through a pipeline using Azure DevOps

AZ-2001 Course: Implement security through a pipeline using Azure DevOps

To earn this Microsoft applied skills credential, students must demonstrate the ability to deploy a secure Azure Pipelines instance.

This course helps you prepare for the Implementing Security Across a Pipeline Using Azure DevOps assessment. Learn how to configure and secure Azure Pipelines. You'll also have opportunities to practice your skills. These skills include configuring secure access to pipeline resources, configuring and validating permissions, setting up a project and repository structure, extending a pipeline, configuring pipelines to securely use variables and parameters, and managing identities for projects, pipelines, and agents.

Level: Intermediate - Role: Administrator - Product: Azure, Azure DevOps

Azure DevOps - Security in pipeline - DevSecOps implementation - CI/CD protection - Security integration - Azure training - Secure development

Objectives of the AZ-2001 training

• Configuring secure access to pipeline resources
• Configure and validate permissions
• Configure a project and repository structure to support secure pipelines
• Extend a pipeline to use multiple templates
• Identity management for projects, pipelines, and agents

Course Content AZ-2001 Implementing Security Through a Pipeline Using Azure DevOps

Configure a project and repository structure to support secure pipelines

• Introduction
  
• Organize project and repository structure
  
• Configure secure projects and repositories
  
• Lab - Configure a project and repository structure to support secure pipelines

Configure secure access to pipeline resources

• Introduction
  
• Configure agent pools
  
• Use secret variables and variable groups
  
• Understand secure files
  
• Configure service connections
  
• Manage environments
  
• Secure repositories
  
• Lab - Configure agents and agent pools for secure pipelines

Manage identity for projects, pipelines, and agents

• Introduction
  
• Configure a Microsoft-hosted pool
  
• Configure agents for projects
  
• Configure agent identities
  
• Configure the scope of a service connection
  
• Understand and convert to a Managed Identity
  
• Lab - Manage identity for projects and pipelines

Configure and validate permissions

• Introduction
  
• Configure and validate user permissions
  
• Configure and validate pipeline permissions
  
• Configure and validate approval and branch checks
  
• Manage and audit permissions
  
• Lab - Configure and validate permissions

Extend a pipeline to use multiple templates

• Introduction
  
• Create a nested template
  
• Rewrite the main deployment pipeline
  
• Configure the pipeline and the application to use tokenization
  
• Remove plain text secrets
  
• Restrict agent logging
  
• Identify and conditionally remove script tasks
  
• Lab - Extend a pipeline to use multiple templates

Configure secure access to Azure Repos from pipelines

• Introduction
  
• Configure pipeline access to packages
  
• Configure pipeline access to credential secrets
  
• Configure pipeline access to secrets for services
  
• Use Azure Key Vault to secure secrets
  
• Explore and secure log files
  
• Lab - Integrate Azure Key Vault with Azure Pipelines

Configure pipelines to securely use variables and parameters

• Introduction
  
• Ensure parameter and variable types
  
• Identify and restrict insecure use of parameters and variables
  
• Move parameters into a YAML file
  
• Limit queue time variables
  
• Validate mandatory variables
  
• Lab - Configure pipelines to securely use variables and parameters

Prerequisites

Candidates for this credential must be familiar with continuous integration and continuous deployment (CI/CD) tools, including Azure Pipelines.

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Applied Skills

This course is part of the Microsoft Applied Skills Credentials.

To earn this Microsoft applied skills credential, students must demonstrate the ability to deploy a secure Azure Pipelines instance.

Applied Skills: Explore all credentials in one guide