Duration
1 day
Overview
This learning path helps you prepare for the Implement security through a pipeline assessment using Azure DevOps. Learn how to configure and secure Azure Pipelines. You'll also get opportunities to practice hands-on skills. These skills include configuring secure access to pipeline resources, configuring, and validating permissions, configuring a project and repository structure, extending a pipeline, configuring pipelines to use variables and parameters securely, and managing identity for projects, pipelines, and agents.
Prerequisites
- An Azure Subscription. You need to bring your own subscription.
- Basic knowledge of Azure DevOps.
- Basic knowledge of security concepts like identities and permissions.
- Experience using the Azure portal to create resources like Azure Key Vault and set permissions.
Introduction
- Configure pipeline access to specific agent pools.
- Configure agents for projects and agent identities.
- Configure pipeline access to packages.
- Manage secret variables and variable groups.
- Configure service connections.
- Manage environments.
- Secure repositories.
- Ensure that secrets are in the Azure Key Vault.
- Configure and validate user and pipeline permissions.
- Configure and validate approval and branch checks.
- Manage and audit permissions in Azure DevOps.
- Separate secure files between projects.
- Create nested templates.
- Limit variables that can be set at queue time.
- Convert to a managed identity in Azure DevOps.
- Organize project and repository structure
- Create a single project that contains many repos and teams
- Create many projects, each with its own set of teams, repos, builds, work items, and other elements
- Organize and secure repositories
- Possible project and repository structures
- Create a project and repository structure
- Configure secure projects and repositories
- Fundamental concepts for giving permissions
- Benefits of separating a project
- Separate a project into team projects
- Separate a project into several repositories
- Separate secure files between different team projects
- Lab - Configure a project and repository structure to support secure pipelines
Summary
Our banking institution needed to set up a secure project and repository structure in Azure DevOps that will allow each development team to work independently while ensuring their code is secure and meets all compliance and banking regulations. We created a secure project and repository structure in Azure DevOps with organizations, projects, teams, and repositories, and used them to organize the work of each development team. We were able to separate a project into team projects, create multiple repositories in a project, move the security repository away from a project, separate secure files, and set project and repository permissions.
Without a well-organized project and repository structure, it would be difficult to have visibility, collaborate, and manage the work of several development teams working on different projects and applications. Also, without a secure project and repository structure, code and secure files could be subject to malicious or unintentional changes from unauthorized users. A secure pipeline wouldn't be possible, nor would cybersecurity and banking regulations be met. It is possible to secure pipelines and protect code and data from ending in the wrong hands by configuring an organized project and repository structure in Azure DevOps.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.