Implement security through a pipeline using Azure DevOps (AZ-2001)

Course Overview

Configure a project and repository structure to support secure pipelines

• Organize project and repository structure
• Configure secure projects and repositories

Manage identity for projects, pipelines, and agents

• Configure a Microsoft-hosted pool
• Configure agents for projects
• Configure agent identities
• Configure the scope of a service connection
• Understand and convert to a Managed Identity

Configure secure access to pipeline resources

• Configure agent pools
• Use secret variables and variable groups
• Understand secure files
• Configure service connections
• Manage environments
• Secure repositories

Configure and validate permissions

• Configure and validate user permissions
• Configure and validate pipeline permissions
• Configure and validate approval and branch checks
• Manage and audit permissions

Extend a pipeline to use multiple templates

• Create a nested template
• Rewrite the main deployment pipeline
• Configure the pipeline and the application to use tokenization
• Remove plain text secrets
• Restrict agent logging
• Identify and conditionally remove script tasks

Configure secure access to Azure Repos from pipelines

• Configure pipeline access to packages
• Configure pipeline access to credential secrets
• Configure pipeline access to secrets for services
• Use Azure Key Vault to secure secrets
• Explore and secure log files
• Configure pipelines to securely use variables and parameters

Ensure parameter and variable types

• Identify and restrict insecure use of parameters and variables
• Move parameters into a YAML file
• Limit queue time variables
• Validate mandatory variables

Prerequisites

Students should have,

• Basic knowledge of Azure DevOps CI/CD tools, including Azure Pipelines.
• Basic knowledge of Azure Portal to create resources.
• Basic knowledge of security concepts like identities and permissions.
• Experience using the Azure portal to create resources like Azure Key Vault and set permissions.