Reviews 5,0
Reviews 5,0
AZ-2001 Implement security through a pipeline using Azure DevOps
Embedding security into the software delivery process is no longer optional – it has become a core requirement in modern IT. Automated pipelines that unite development, operations, and security form the backbone of reliable, traceable deployments.
Key topics
- Applying security measures within CI/CD pipelines.
- Setting up automated checks and enforcing policy rules.
- Managing identities and access permissions effectively.
- Handling secrets, credentials, and secure configurations.
- Ensuring compliance, audit trails, and continuous monitoring.
Prerequisites
A working knowledge of DevOps concepts, version control, and cloud environments is expected, along with practical experience in build and release pipelines.
Target audience
Technical professionals in development, operations, and cloud engineering who are responsible for building and maintaining secure, stable deployment workflows.
Reliable pipelines balance velocity with rigor. Defined structures, automated safeguards, and full-chain visibility create the confidence needed to deliver digital solutions with quality and resilience.
- Setting up project and repository layouts
- Applying security settings to projects and repositories
- Setting up a Microsoft-hosted agent pool
- Assigning agents to specific projects
- Managing identity settings for agents
- Defining the scope of service connections
- Working with and adopting managed identities
- Setting up and managing agent pools
- Working with secrets and variable groups
- Fundamentals of secure file handling
- Setting up and managing service connections
- Configuring deployment environments
- Applying security measures to repositories
- Setting up and auditing user access rights
- Establishing and verifying pipeline access controls
- Defining approval rules and branch validation
- Maintaining and auditing permission structures
- Building nested pipeline templates
- Redesigning the central distribution pipeline
- Integrating tokenization into pipelines and applications
- Identifying and eliminating plaintext secrets
- Limiting logging output from agents
- Analyzing and selectively removing script tasks
- Setting up package access for pipelines
- Managing login secrets for pipeline access
- Providing service-related secrets to pipelines
- Protecting secrets with Azure Key Vault
- Reviewing and securing log files
- Enforcing type safety for parameters and variables
- Detecting and limiting unsafe parameter usage
- Externalizing parameters into YAML files
- Restricting queue-time variable access
- Verifying required variables are set
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
