Implement security through a pipeline using Azure DevOps (AZ-2001)

Course 8684

  • Duration: 1 day
  • Language: English
  • Level: Intermediate

This course acts as a pivotal step from foundational to intermediate IT skills, essential for roles in development, infrastructure, and security. Participants will gain hands-on experience in configuring and securing pipelines through Azure DevOps.

Covering topics such as secure resource access, permissions validation, project structuring, pipeline extension, and secure variable usage, this course empowers learners to manage identities across projects, pipelines, and agents.

Azure DevOps Pipeline Security Training Delivery Methods

  • In-Person

  • Online

  • Upskill your whole team with Private Team Training

Azure DevOps Pipeline Security Training Information

In this course, you will learn how to:

  • Gain foundational knowledge transitioning to intermediate IT skills.
  • Hands-on practice in configuring secure project and repository structures.
  • Proficiency in managing identity across projects, pipelines, and agents.
  • Practical experience in configuring secure access to pipeline resources.
  • Understand permissions configuration and validation.
  • Learn how to extend pipelines using multiple templates for enhanced functionality.

Training Prerequisites

  • Basic knowledge of Azure DevOps CI/CD tools, including Azure Pipelines.
  • Basic knowledge of Azure Portal to create resources.
  • Basic knowledge of security concepts like identities and permissions.
  • Experience using the Azure portal to create resources like Azure Key Vault and set permissions.

Azure DevOps Pipeline Security Training Outline

Configure a project and repository structure to support secure pipelines

  • Separate a project into team projects and repositories.
  • Separate secure files between projects.
  • Move the security repository away from a project.
  • Assign project and repository permissions.
  • Organise a project and repository structure.

Manage identity for projects, pipelines, and agents

  • Configure a Microsoft-hosted pool.
  • Configure agents for projects.
  • Configure agent identities.
  • Configure the scope of a service connection.
  • Convert to a managed identity in Azure DevOps.

Configure secure access to pipeline resources

  • Identify and mitigate common security threats.
  • Configure pipeline access to specific agent pools.
  • Manage secret variables and variable groups.
  • Secure files and storage.
  • Configure service connections.
  • Manage environments.
  • Secure repositories.

Configure and validate permissions

  • Configure and validate user permissions.
  • Configure and validate pipeline permissions.
  • Configure and validate approval and branch checks.
  • Manage and audit permissions in Azure DevOps.

Extend a pipeline to use multiple templates

  • Create nested templates.
  • Rewrite the main deployment pipeline.
  • Configure the pipeline and the application to use tokenisation.
  • Remove plain text secrets.
  • Restrict agent logging.
  • Identify and conditionally remove script tasks in Azure DevOps.

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

Azure DevOps Pipeline Security FAQs

This course is designed for students who are planning to take the Implement security through a pipeline using Azure DevOps assessment or students who are performing Azure DevOps and Azure Pipelines secure tasks in their day-to-day jobs.

No. Applied Skills credentials are not replacing Certifications. We are expanding our credentialing portfolio to better meet the needs of our learners and customers by allowing people to validate very specific skill sets with this new offering.

Certifications are role-based and evaluate a broader range of skills needed to be successful in critical roles that organisations need to be successful in today’s rapidly changing technical environment.

Applied Skills credentials are scenario-based and evaluate a narrower skill set specific to a critical business problem or challenge that organisations are facing.

If you want to demonstrate that you have the range of skills needed to succeed in a given job role, a Certification is the right way to go. If you want to validate your skills on a specific business problem or scenario your organisation faces, an Applied Skills credential will make more sense.

Here are some key differentiators between Certifications and Applied Skills:

  • Breadth of skills validated: Certifications typically validate 4-6 skill sets, while Applied Skills validate one specific skill set.
  • Focus: Certifications are job role-based, while Applied Skills are product-based.
  • Purpose: Certifications are intended to validate skills needed for the technical aspects of job roles that leverage Microsoft solutions and technologies. Applied Skills are intended to validate specific scenarios that may be hindering an organisation’s digital transformation goals.

Many of the Applied Skills credentials can be used to help you prepare for Certification exams. Because Applied Skills are awarded based on performance within a lab, that experience may set you up for success on a Certification. All role-based Certification exams require experience, so earning an Applied Skills credential is one way to get some of the experience needed to pass the exam. However, not all skills assessed on a Certification exam will have an associated Applied Skills assessment lab, so you should not rely on Applied Skills alone. Visit how to prepare for a Certification exam.

If you want to demonstrate that you have skill sets that were not assessed by the Certification, are Certification “adjacent,” or are needed for a specific project that you would like to do or are working on. An Applied Skill credential would be a great way to show your employer and peers that you have those skills and the skills validated by your Certification.

It depends on your technical expertise and why you want to earn a Microsoft credential.

If you are exploring technology or just beginning your learning journey in technology, starting with a fundamentals certification makes the most sense because it focuses on ensuring you have the foundational knowledge you need to get started in technology.

If you have experience and want to explore how Microsoft technologies and solutions are used to solve critical business problems, an Applied Skills credential is a great way to validate fundamental world skills focused on specific projects or scenarios.

If you have some experience and are pursuing a job that leverages Microsoft solutions, a role-based certification is the logical solution to validate role-based skills. Note that some Applied Skills credentials relate to our certifications and may provide another way to prepare for a certification exam.