AZ-2001 Implement security through a pipeline using Azure DevOps

Price
Net: €
VAT: €

Price
Price on Request

Duration
1 day

For companies and job seekers:
this course is 100% fundable!
 

Location

Course Language
English

Training Solutions
Online Live

Request a consultation Add to favorites Print as PDF

Secure software delivery is a key success factor in modern IT landscapes. Automated workflows combine development, operation, and security to create stable, traceable processes. The focus is on integrated security throughout the entire development cycle.

Key topics

  • Security strategies in CI/CD pipelines.
  • Automated checks and guidelines.
  • Identity and access management.
  • Secrets, keys, and secure configurations.
  • Compliance, monitoring, and traceability.

Prerequisites
Basic knowledge of DevOps methods, version management, and cloud environments, as well as a technical understanding of build and release processes.

Target audience
IT professionals from development, operations, and cloud engineering with responsibility for stable, secure deployment processes.

Modern pipelines combine speed with security. Clear structures, automated controls, and end-to-end transparency strengthen trust, quality, and scalability of digital solutions in dynamic cloud environments.

Print as PDF
Course content
  • Organizing the project and repository structure
  • Configuring secure projects and repositories
  • Configure a Microsoft-hosted pool
  • Configuring agents for projects
  • Configure agent identities
  • Configure the scope of a service connection
  • Understanding and converting to a managed identity
  • Configure agent pools
  • Using secret variables and variable groups
  • Understanding secure files
  • Configuring service connections
  • Managing environments
  • Securing repositories
  • Define and verify user permissions
  • Configure and validate pipeline permissions
  • Configure and validate approval and branching checks
  • Manage and review permissions
  • Creating a nested template
  • Rewriting the main distribution pipeline
  • Configuring the pipeline and application to use tokenization
  • Removing plaintext secrets
  • Restricting agent logging
  • Identifying and conditionally removing script tasks
  • Configuring pipeline access to packages
  • Configuring pipeline access to login secrets
  • Configure pipeline access to secrets for services
  • Use Azure Key Vault to secure secrets
  • Examine and secure log files
  • Ensuring parameter and variable types
  • Identifying and restricting the unsafe use of parameters and variables
  • Move parameters to a YAML file
  • Limiting variables for queue times
  • Validating mandatory variables

Frequently Asked Questions

  • Modern software development integrates development, operations, and IT security. This training course demonstrates how security measures can be integrated into DevOps processes from the very beginning and implemented automatically.
  • The focus is on CI/CD pipelines, Azure Key Vault, secret management, security policies, compliance, and the automated securing of build and release processes.
  • Instead of conducting security tests only at the end of a project, they are integrated directly into the development and deployment process. This allows risks to be identified and addressed early on.
  • This training course covers the secure handling of passwords, certificates, tokens, and keys, as well as their secure integration into Azure DevOps pipelines.
  • This section covers the integration of Azure DevOps with Azure Key Vault, Microsoft Defender for Cloud, and other Azure security services for automated deployments.
  • It is designed for modern development and cloud projects that aim to implement secure CI/CD processes, automated deployments, and DevSecOps practices.
  • Automated tests detect security vulnerabilities, misconfigurations, and policy violations early in the development process, thereby improving the quality of software projects.
  • This training course provides hands-on knowledge on planning, securing, and automating secure Azure DevOps pipelines, as well as on implementing modern DevSecOps methods.
Berlin
Bremen
Dortmund
Dusseldorf
Frankfurt
Hamburg
Hanover
Cologne
Leipzig
Munich
Nuremberg
Stuttgart

Do you have any further questions? Please contact us.