Course Overview
Validate your technical skills and open doors to new possibilities of advancement with Microsoft Applied Skills.
This learning path helps you prepare for the Implement security through a pipeline assessment using Azure DevOps. Learn how to configure and secure Azure Pipelines. You’ll also get opportunities to practice hands-on skills. These skills include configuring secure access to pipeline resources, configuring, and validating permissions, configuring a project and repository structure, extending a pipeline, configuring pipelines to use variables and parameters securely, and managing identity for projects, pipelines, and agents.
The opportunity is yours to lead the era of AI with Microsoft. Power your organization’s AI transformation with Microsoft Cloud. The AI you can trust.
What are the skills covered
- Configure secure access to pipeline resources
- Configure and validate permissions
- Configure a project and repository structure to support secure pipelines
- Extend a pipeline to use multiple templates
- Manage identity for projects, pipelines, and agents
Who should attend this course
- Administrator
Course Curriculum
What are the Prerequisites
- An Azure Subscription. You need to bring your own subscription.
- Basic knowledge of Azure DevOps.
- Basic knowledge of security concepts like identities and permissions.
- Experience using the Azure portal to create resources like Azure Key Vault and set permissions.
Download Course Syllabus
Course Modules
This module is designed to help learners understand the importance of configuring a secure project and repository structure to support pipelines in Azure DevOps. The module covers fundamental concepts and best practices for organizing the project and repository structure and moving the security repository away from the application project.
Learning objectives
In this module, you practice how to:
- Separate a project into team projects and repositories.
- Separate secure files between projects.
- Move the security repository away from a project.
- Assign project and repository permissions.
- Organize a project and repository structure.
Prerequisites
- Basic knowledge of Azure DevOps to manage projects and repositories.
- Basic knowledge of security concepts for project repositories.
This module is designed to help learners understand the importance of pipeline security and how to secure pipeline resources using Azure DevOps. The module covers fundamental concepts and best practices for secure agent pools, secret variables, files and storage, service connections, environments, and repositories.
Learning objectives
In this module, you practice how to:
- Identify and mitigate common security threats.
- Configure pipeline access to specific agent pools.
- Manage secret variables and variable groups.
- Secure files and storage.
- Configure service connections.
- Manage environments.
- Secure repositories.
Prerequisites
- Basic knowledge of Azure DevOps to manage agents and service connections.
- Basic knowledge of security concepts like secret variables and secure files.
This module is designed to help learners understand the importance of managing identity for projects, pipelines, and agents in Azure DevOps. The module covers fundamental concepts and best practices for configuring a Microsoft-hosted pool, configuring agents for projects, configuring agent identities, configuring the scope of a service connection, and converting to a managed identity.
Learning objectives
In this module, you practice how to:
- Configure a Microsoft-hosted pool.
- Configure agents for projects.
- Configure agent identities.
- Configure the scope of a service connection.
- Convert to a managed identity in Azure DevOps.
Prerequisites
- Basic knowledge of Azure DevOps to manage agents and service connections.
- Basic knowledge of security concepts like agent identities and managed identity.
- Experience using the Azure portal to create managed identities.
This module covers fundamental concepts and best practices for configuring and validating user permissions, pipeline permissions, approval and branch checks, and auditing and managing permissions.
Learning objectives
In this module, you practice how to:
- Configure and validate user permissions.
- Configure and validate pipeline permissions.
- Configure and validate approval and branch checks.
- Manage and audit permissions in Azure DevOps.
Prerequisites
- Basic knowledge of Azure DevOps to manage branches.
- Basic knowledge of security concepts like user and pipeline permissions.
This module is designed to help learners understand the importance of extending a pipeline to multiple templates and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for creating nested templates, rewriting the main deployment pipeline, configuring the pipeline and the application to use tokenization, removing plain text secrets, restricting agent logging, and identifying and conditionally removing script tasks.
Learning objectives
In this module, you practice how to:
- Create nested templates.
- Rewrite the main deployment pipeline.
- Configure the pipeline and the application to use tokenization.
- Remove plain text secrets.
- Restrict agent logging.
- Identify and conditionally remove script tasks in Azure DevOps.
Prerequisites
- Basic knowledge of Azure Pipelines and YAML.
- Basic knowledge of security concepts for pipelines.
- Experience with application logs and troubleshooting.
This module is designed to help learners understand the importance of securing access to Azure Repos from pipelines and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for securing access to packages, credential secrets, secrets for services, and Azure Key Vault.
Learning objectives
In this module, you practice how to:
- Configure pipeline access to packages.
- Configure credential secrets, and secrets for services.
- Ensure that the secrets are in the Azure Key Vault.
- Ensure that secrets aren’t in the logs.
Prerequisites
- Basic knowledge of Azure Pipelines and YAML.
- Basic knowledge of security concepts like Azure Key Vault and permissions.
This module is designed to help learners understand the importance of configuring pipelines to use variables and parameters securely in Azure DevOps. The module covers fundamental concepts and best practices for ensuring that parameters and variables retain their type, identifying and restricting insecure use of parameters and variables, moving parameters into a YAML file that protects their type, limiting variables that can be set at queue time, and validating that mandatory variables are present and set correctly.
Learning objectives
In this module, you practice how to:
- Ensure that parameters and variables retain their type.
- Identify and restrict insecure use of parameters and variables.
- Move parameters into a YAML file that protects their type.
- Limit variables that can be set at queue time.
- Validate that mandatory variables are present and set correctly in Azure DevOps.
Prerequisites
- Basic knowledge of Azure Pipelines and YAML.
Request More Information
Training Options
- ILT: Instructor-Led Training
- VILT: Virtual Instructor-Led Training
RM1,200.00Enroll Now
RM1,200.00Enroll Now
RM1,200.00Enroll Now
RM1,200.00Enroll Now
RM1,200.00Enroll Now
RM1,200.00Enroll Now
Exam & Certification
To earn this Microsoft Applied Skills credential, learners demonstrate the ability to implement secure Azure Pipelines.
Candidates for this credential should be familiar with continuous integration and continuous deployment (CI/CD) tools, including Azure Pipelines.
Tasks performed
- Configure secure access to pipeline resources
- Configure and validate permissions
- Configure a project and repository structure to support secure pipelines
- Extend a pipeline to use multiple templates
- Manage identity for projects, pipelines, and agents
Training & Certification Guide
In-demand Cloud Technology Skills – Insights from Malaysia’s Job Market
As Malaysia accelerates its digital transformation journey, cloud technology has emerged as a critical component of the nation’s economic growth. The adoption of cloud services is driving innovation across various sectors, from finance to manufacturing, and creating a robust demand for skilled cloud professionals.
This article dives into the most in-demand cloud technology skills in Malaysia, backed by market data and insights from industry reports, and highlights the key roles that are shaping the future of cloud technology.
Master Your Cloud Career: Essential Azure Certifications for 2024
Targeting the most valuable Azure certifications for 2024? In the evolving landscape of cloud computing, Azure certifications stand out by offering professionals the leverage to thrive. This article presents a focused rundown of crucial Azure certifications, shining a light on their career-boosting effects and elucidating steps to get certified. No fluff – just actionable insights to empower your journey in the cloud.
AI Mastery Program: Learn AI with Microsoft in 2024
Artificial Intelligence (AI) has been one of the hottest topics in the tech industry for the past decade. With its rapid advancements and potential to impact our daily lives, learning AI has become a highly sought-after skill.
We are thrilled to announce the launch of our Microsoft AI Mastery Program in 2024, made possible through our partnership with Microsoft, a renowned leader in AI technology. This program is tailored for individuals and tech professionals passionate about acquiring and mastering the fundamental and advanced principles of AI.
Azure Strategy & Implementation Guide
Get a step-by-step introduction to using Azure for your cloud infrastructure with this Pack e-book. Read the latest edition of the Azure Strategy and Implementation Guide for detailed guidance on how to create a successful cloud adoption strategy with new innovations, capabilities, and security features from Microsoft Azure.
Microsoft Azure SQL Jumpstart Guide
Find out how to get started launching your first Azure SQL database or find ways to make your existing SQL database work harder. Download the Azure SQL Jumpstart Guide for detailed instructions and in-depth insights to help you make your Azure SQL deployment, migration, or enhancement run smoothly.
Low-code Application Development – Microsoft PowerApps and Azure
Build production-ready apps faster with a low-code environment. Quickly stand up your applications with Power Apps and get more time to apply your technical expertise to extending and optimizing those apps in Azure.
Azure Cloud Native Architecture Mapbook
Grow your cloud architecture skills with guidance from Azure Experts. Go beyond developing cloud-native applications to planning and implementing cloud application infrastructure. In this free e-book from Packt Publishing, you’ll find best practices for infrastructure design and patterns for building a complete solution.
Windows Virtual Desktop Security
Find out how to secure your Windows Virtual Desktop environment when migrating your virtual desktop infrastructure (VDI) to Azure. Read this security handbook to get technical hands-on guidance on how to help protect your apps and data in your Windows Virtual Desktop deployment.
Discover how to get more value from your on premises Windows Server and SQL Server investments and move some or all of your workloads to the cloud using your existing skills. See how to start using the cloud to support new ways of doing business and help ensure business continuity even if you need to keep some of your IT assets on-premises due to regulatory or data governance requirements.
Discover how to build highly scalable applications using containers and how to deploy and manage those containers at scale with Kubernetes on Azure. Read the completely reviewed and updated Packet e-book, Hands-On Kubernetes on Azure, Third Edition and discover what’s new, including security enhancements, continuous integration and continuous delivery (CI/CD) automation, and the latest supported technologies. Gain insight into building reliable applications in the new foreword by Kubernetes co-founder Brendan Burns.
Azure Synapse Analytics Proof of Concept Playbook
Learn how to perform a proof of concept efficiently and economically with Azure Synapse Analytics. Read the Azure Synapse Analytics Proof of Concept Playbook to understand the key concepts involved in deploying data warehousing, data lake, and big data workloads with Azure Synapse and get the evidence you need to make the case for implementation at your organization.
Spend less time managing server infrastructure and more time building great apps. Get your solutions to market faster using Azure Functions, a fully managed compute platform for processing data, integrating systems, and building simple APIs and microservices. The Azure Serverless Computing Cookbook will, through the development of basic back-end wep API that performs simple operations, helps you understand how to persist data in Azure Storage services.
