Applied Skills

AZ-2001 : Implement security through a pipeline using Azure DevOps

Fees

Rs45,000.00

Course Duration

1 Day

Delivery

ILT

LinkButton

Overview

This learning path helps you prepare for the Implement security through a pipeline assessment using Azure DevOps. Learn how to configure and secure Azure Pipelines. You'll also get opportunities to practice hands-on skills. These skills include configuring secure access to pipeline resources, configuring, and validating permissions, configuring a project and repository structure, extending a pipeline, configuring pipelines to use variables and parameters securely, and managing identity for projects, pipelines, and agents.

LinkButton

Course Curriculum

1. Configure a project and repository structure to support secure pipelines

This module is designed to help learners understand the importance of configuring a secure project and repository structure to support pipelines in Azure DevOps. The module covers fundamental concepts and best practices for organizing the project and repository structure and moving the security repository away from the application project.

2. Configure secure access to pipeline resources

This module is designed to help learners understand the importance of pipeline security and how to secure pipeline resources using Azure DevOps. The module covers fundamental concepts and best practices for secure agent pools, secret variables, files and storage, service connections, environments, and repositories.

3. Manage identity for projects, pipelines, and agents

This module is designed to help learners understand the importance of managing identity for projects, pipelines, and agents in Azure DevOps. The module covers fundamental concepts and best practices for configuring a Microsoft-hosted pool, configuring agents for projects, configuring agent identities, configuring the scope of a service connection, and converting to a managed identity.

4. Configure and validate permissions

This module covers fundamental concepts and best practices for configuring and validating user permissions, pipeline permissions, approval and branch checks, and auditing and managing permissions.

5. Extend a pipeline to use multiple templates

This module is designed to help learners understand the importance of extending a pipeline to multiple templates and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for creating nested templates, rewriting the main deployment pipeline, configuring the pipeline and the application to use tokenization, removing plain text secrets, restricting agent logging, and identifying and conditionally removing script tasks.

6. Configure secure access to Azure Repos from pipelines

This module is designed to help learners understand the importance of securing access to Azure Repos from pipelines and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for securing access to packages, credential secrets, secrets for services, and Azure Key Vault.

7. Configure pipelines to securely use variables and parameters

This module is designed to help learners understand the importance of configuring pipelines to use variables and parameters securely in Azure DevOps. The module covers fundamental concepts and best practices for ensuring that parameters and variables retain their type, identifying and restricting insecure use of parameters and variables, moving parameters into a YAML file that protects their type, limiting variables that can be set at queue time, and validating that mandatory variables are present and set correctly.

LinkButton

What You'll Learn

Separate a project into team projects and repositories.
Separate secure files between projects.
Move the security repository away from a project.
Assign project and repository permissions.
Organize a project and repository structure.
Identify and mitigate common security threats.
Configure pipeline access to specific agent pools.
Manage secret variables and variable groups.
Secure files and storage.
Configure service connections.
Manage environments.
Secure repositories.
Configure a Microsoft-hosted pool.
Configure agents for projects.
Configure agent identities.
Configure the scope of a service connection.
Convert to a managed identity in Azure DevOps.
Configure and validate user permissions.
Configure and validate pipeline permissions.
Configure and validate approval and branch checks.
Manage and audit permissions in Azure DevOps.
Create nested templates.
Rewrite the main deployment pipeline.
Configure the pipeline and the application to use tokenization.
Remove plain text secrets.
Restrict agent logging.
Identify and conditionally remove script tasks in Azure DevOps.
Configure pipeline access to packages.
Configure credential secrets, and secrets for services.
Ensure that the secrets are in the Azure Key Vault.
Ensure that secrets aren't in the logs.
Ensure that parameters and variables retain their type.
Identify and restrict insecure use of parameters and variables.
Move parameters into a YAML file that protects their type.
Limit variables that can be set at queue time.
Validate that mandatory variables are present and set correctly in Azure DevOps.

LinkButton

Who Should Attend

N/A

LinkButton

Prerequisites

An Azure Subscription. You need to bring your own subscription.
Basic knowledge of Azure DevOps.
Basic knowledge of security concepts like identities and permissions.
Experience using the Azure portal to create resources like Azure Key Vault and set permissions.

LinkButton

Training Schedule

LinkButton

Exam & Certification

LinkButton

Learning Journey

LinkButton

Frequently Asked Questions

Frequently Asked Questions (FAQs)

Why get Microsoft certified?

Microsoft certifications validate your skills and expertise in Microsoft technologies and solutions, demonstrating your ability to design, implement, and manage cutting-edge technologies.
These certifications are globally recognized and highly sought after by employers, as they signify your proficiency in using Microsoft products and services to drive innovation and solve business challenges.
Microsoft-certified professionals are in high demand, opening doors to new career opportunities and higher earning potential.
What to expect for the examination?

Microsoft certification exams are designed to assess your knowledge and skills in specific Microsoft technologies and solutions.
Exams typically consist of multiple-choice, multiple-select, and case study questions, and some may include lab simulations to evaluate your practical skills.
Note: Certification requirements and policies may be updated by Microsoft from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
How long is Microsoft certification valid for?

Most Microsoft role-based and specialty certifications are valid for one year from the date of passing the exam.
To maintain your certification, you will need to renew it annually by passing a free online assessment on Microsoft Learn.
However, Microsoft Applied Skills credentials and Fundamentals certifications do not expire.
Note: Certification requirements and policies may be updated by Microsoft from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
Why take this course with Trainocate?

Here’s what sets us apart:
- Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 24 countries (and counting!).
- Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.
- Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.
- Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.
- Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.
- Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

LinkButton

Browse All Courses

Overview Course Curriculum Training Schedule Exam & Certification FAQs

What You'll Learn

Separate a project into team projects and repositories.
Separate secure files between projects.
Move the security repository away from a project.
Assign project and repository permissions.
Organize a project and repository structure.
Identify and mitigate common security threats.
Configure pipeline access to specific agent pools.
Manage secret variables and variable groups.
Secure files and storage.
Configure service connections.
Manage environments.
Secure repositories.
Configure a Microsoft-hosted pool.
Configure agents for projects.
Configure agent identities.
Configure the scope of a service connection.
Convert to a managed identity in Azure DevOps.
Configure and validate user permissions.
Configure and validate pipeline permissions.
Configure and validate approval and branch checks.
Manage and audit permissions in Azure DevOps.
Create nested templates.
Rewrite the main deployment pipeline.
Configure the pipeline and the application to use tokenization.
Remove plain text secrets.
Restrict agent logging.
Identify and conditionally remove script tasks in Azure DevOps.
Configure pipeline access to packages.
Configure credential secrets, and secrets for services.
Ensure that the secrets are in the Azure Key Vault.
Ensure that secrets aren't in the logs.
Ensure that parameters and variables retain their type.
Identify and restrict insecure use of parameters and variables.
Move parameters into a YAML file that protects their type.
Limit variables that can be set at queue time.
Validate that mandatory variables are present and set correctly in Azure DevOps.

Who Should Attend

N/A

Prerequisites

An Azure Subscription. You need to bring your own subscription.
Basic knowledge of Azure DevOps.
Basic knowledge of security concepts like identities and permissions.
Experience using the Azure portal to create resources like Azure Key Vault and set permissions.

Learning Journey

Coming Soon...

1. Configure a project and repository structure to support secure pipelines

2. Configure secure access to pipeline resources

3. Manage identity for projects, pipelines, and agents

4. Configure and validate permissions

This module covers fundamental concepts and best practices for configuring and validating user permissions, pipeline permissions, approval and branch checks, and auditing and managing permissions.

5. Extend a pipeline to use multiple templates

6. Configure secure access to Azure Repos from pipelines

7. Configure pipelines to securely use variables and parameters

Frequently Asked Questions (FAQs)

Why get Microsoft certified?

Microsoft certifications validate your skills and expertise in Microsoft technologies and solutions, demonstrating your ability to design, implement, and manage cutting-edge technologies.
These certifications are globally recognized and highly sought after by employers, as they signify your proficiency in using Microsoft products and services to drive innovation and solve business challenges.
Microsoft-certified professionals are in high demand, opening doors to new career opportunities and higher earning potential.
What to expect for the examination?

Microsoft certification exams are designed to assess your knowledge and skills in specific Microsoft technologies and solutions.
Exams typically consist of multiple-choice, multiple-select, and case study questions, and some may include lab simulations to evaluate your practical skills.
Note: Certification requirements and policies may be updated by Microsoft from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
How long is Microsoft certification valid for?

Most Microsoft role-based and specialty certifications are valid for one year from the date of passing the exam.
To maintain your certification, you will need to renew it annually by passing a free online assessment on Microsoft Learn.
However, Microsoft Applied Skills credentials and Fundamentals certifications do not expire.
Note: Certification requirements and policies may be updated by Microsoft from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
Why take this course with Trainocate?

Here’s what sets us apart:
- Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 24 countries (and counting!).
- Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.
- Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.
- Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.
- Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.
- Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.