<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="34134" language="fr" source="https://portal.flane.ch/swisscom/fr/xml-course/microsoft-az-2001" lastchanged="2026-01-23T15:37:52+01:00" parent="https://portal.flane.ch/swisscom/fr/xml-courses"><title>Implement security through a pipeline using Azure DevOps</title><productcode>AZ-2001</productcode><vendorcode>MS</vendorcode><vendorname>Microsoft</vendorname><fullproductcode>MS-AZ-2001</fullproductcode><version>A</version><essentials>&lt;ul&gt;
&lt;li&gt;An Azure Subscription. You need to bring your own subscription.&lt;/li&gt;&lt;li&gt;Basic knowledge of Azure DevOps.&lt;/li&gt;&lt;li&gt;Basic knowledge of security concepts like identities and permissions.&lt;/li&gt;&lt;li&gt;Experience using the Azure portal to create resources like Azure Key Vault and set permissions.&lt;/li&gt;&lt;/ul&gt;</essentials><contents>&lt;h4&gt;Configure a project and repository structure to support secure pipelines&lt;/h4&gt;&lt;ul&gt;
&lt;li&gt;Introduction&lt;/li&gt;&lt;li&gt;Organize project and repository structure&lt;/li&gt;&lt;li&gt;Configure secure projects and repositories&lt;/li&gt;&lt;li&gt;Lab - Configure a project and repository structure to support secure pipelines&lt;/li&gt;&lt;li&gt;Module assessment&lt;/li&gt;&lt;li&gt;Summary&lt;/li&gt;&lt;/ul&gt;
&lt;h4&gt;Configure secure access to pipeline resources&lt;/h4&gt;&lt;ul&gt;
&lt;li&gt;Introduction&lt;/li&gt;&lt;li&gt;Configure agent pools&lt;/li&gt;&lt;li&gt;Use secret variables and variable groups&lt;/li&gt;&lt;li&gt;Understand secure files&lt;/li&gt;&lt;li&gt;Configure service connections&lt;/li&gt;&lt;li&gt;Manage environments&lt;/li&gt;&lt;li&gt;Secure repositories&lt;/li&gt;&lt;li&gt;Lab - Configure agents and agent pools for secure pipelines&lt;/li&gt;&lt;li&gt;Module assessment&lt;/li&gt;&lt;li&gt;Summary&lt;/li&gt;&lt;/ul&gt;
&lt;h4&gt;Manage identity for projects, pipelines, and agents&lt;/h4&gt;&lt;ul&gt;
&lt;li&gt;Introduction&lt;/li&gt;&lt;li&gt;Configure a Microsoft-hosted pool&lt;/li&gt;&lt;li&gt;Configure agents for projects&lt;/li&gt;&lt;li&gt;Configure agent identities&lt;/li&gt;&lt;li&gt;Configure the scope of a service connection&lt;/li&gt;&lt;li&gt;Understand and convert to a Managed Identity&lt;/li&gt;&lt;li&gt;Lab - Manage identity for projects and pipelines&lt;/li&gt;&lt;li&gt;Module assessment&lt;/li&gt;&lt;li&gt;Summary&lt;/li&gt;&lt;/ul&gt;
&lt;h4&gt;Configure and validate permissions&lt;/h4&gt;&lt;ul&gt;
&lt;li&gt;Introduction&lt;/li&gt;&lt;li&gt;Configure and validate user permissions&lt;/li&gt;&lt;li&gt;Configure and validate pipeline permissions&lt;/li&gt;&lt;li&gt;Configure and validate approval and branch checks&lt;/li&gt;&lt;li&gt;Manage and audit permissions&lt;/li&gt;&lt;li&gt;Lab - Configure and validate permissions&lt;/li&gt;&lt;li&gt;Module assessment&lt;/li&gt;&lt;li&gt;Summary&lt;/li&gt;&lt;/ul&gt;
&lt;h4&gt;Extend a pipeline to use multiple templates&lt;/h4&gt;&lt;ul&gt;
&lt;li&gt;Introduction&lt;/li&gt;&lt;li&gt;Create a nested template&lt;/li&gt;&lt;li&gt;Rewrite the main deployment pipeline&lt;/li&gt;&lt;li&gt;Configure the pipeline and the application to use tokenization&lt;/li&gt;&lt;li&gt;Remove plain text secrets&lt;/li&gt;&lt;li&gt;Restrict agent logging&lt;/li&gt;&lt;li&gt;Identify and conditionally remove script tasks&lt;/li&gt;&lt;li&gt;Lab - Extend a pipeline to use multiple templates&lt;/li&gt;&lt;li&gt;Module assessment&lt;/li&gt;&lt;li&gt;Summary&lt;/li&gt;&lt;/ul&gt;
&lt;h4&gt;Configure secure access to Azure Repos from pipelines&lt;/h4&gt;&lt;ul&gt;
&lt;li&gt;Introduction&lt;/li&gt;&lt;li&gt;Configure pipeline access to packages&lt;/li&gt;&lt;li&gt;Configure pipeline access to credential secrets&lt;/li&gt;&lt;li&gt;Configure pipeline access to secrets for services&lt;/li&gt;&lt;li&gt;Use Azure Key Vault to secure secrets&lt;/li&gt;&lt;li&gt;Explore and secure log files&lt;/li&gt;&lt;li&gt;Lab - Integrate Azure Key Vault with Azure Pipelines&lt;/li&gt;&lt;li&gt;Module assessment&lt;/li&gt;&lt;li&gt;Summary&lt;/li&gt;&lt;/ul&gt;
&lt;h4&gt;Configure pipelines to securely use variables and parameters&lt;/h4&gt;&lt;ul&gt;
&lt;li&gt;Introduction&lt;/li&gt;&lt;li&gt;Ensure parameter and variable types&lt;/li&gt;&lt;li&gt;Identify and restrict insecure use of parameters and variables&lt;/li&gt;&lt;li&gt;Move parameters into a YAML file&lt;/li&gt;&lt;li&gt;Limit queue time variables&lt;/li&gt;&lt;li&gt;Validate mandatory variables&lt;/li&gt;&lt;li&gt;Lab - Configure pipelines to securely use variables and parameters&lt;/li&gt;&lt;li&gt;Module assessment&lt;/li&gt;&lt;li&gt;Summary&lt;/li&gt;&lt;/ul&gt;</contents><essentials_plain>- An Azure Subscription. You need to bring your own subscription.
- Basic knowledge of Azure DevOps.
- Basic knowledge of security concepts like identities and permissions.
- Experience using the Azure portal to create resources like Azure Key Vault and set permissions.</essentials_plain><contents_plain>Configure a project and repository structure to support secure pipelines


- Introduction
- Organize project and repository structure
- Configure secure projects and repositories
- Lab - Configure a project and repository structure to support secure pipelines
- Module assessment
- Summary

Configure secure access to pipeline resources


- Introduction
- Configure agent pools
- Use secret variables and variable groups
- Understand secure files
- Configure service connections
- Manage environments
- Secure repositories
- Lab - Configure agents and agent pools for secure pipelines
- Module assessment
- Summary

Manage identity for projects, pipelines, and agents


- Introduction
- Configure a Microsoft-hosted pool
- Configure agents for projects
- Configure agent identities
- Configure the scope of a service connection
- Understand and convert to a Managed Identity
- Lab - Manage identity for projects and pipelines
- Module assessment
- Summary

Configure and validate permissions


- Introduction
- Configure and validate user permissions
- Configure and validate pipeline permissions
- Configure and validate approval and branch checks
- Manage and audit permissions
- Lab - Configure and validate permissions
- Module assessment
- Summary

Extend a pipeline to use multiple templates


- Introduction
- Create a nested template
- Rewrite the main deployment pipeline
- Configure the pipeline and the application to use tokenization
- Remove plain text secrets
- Restrict agent logging
- Identify and conditionally remove script tasks
- Lab - Extend a pipeline to use multiple templates
- Module assessment
- Summary

Configure secure access to Azure Repos from pipelines


- Introduction
- Configure pipeline access to packages
- Configure pipeline access to credential secrets
- Configure pipeline access to secrets for services
- Use Azure Key Vault to secure secrets
- Explore and secure log files
- Lab - Integrate Azure Key Vault with Azure Pipelines
- Module assessment
- Summary

Configure pipelines to securely use variables and parameters


- Introduction
- Ensure parameter and variable types
- Identify and restrict insecure use of parameters and variables
- Move parameters into a YAML file
- Limit queue time variables
- Validate mandatory variables
- Lab - Configure pipelines to securely use variables and parameters
- Module assessment
- Summary</contents_plain><duration unit="d" days="1">1 jour</duration><pricelist><price country="IT" currency="EUR">490.00</price><price country="DE" currency="EUR">690.00</price><price country="AT" currency="EUR">690.00</price><price country="SE" currency="EUR">690.00</price><price country="NL" currency="EUR">645.00</price><price country="PL" currency="PLN">1400.00</price><price country="US" currency="USD">675.00</price><price country="CA" currency="CAD">675.00</price><price country="GB" currency="GBP">940.00</price><price country="CH" currency="CHF">870.00</price><price country="SI" currency="EUR">690.00</price><price country="FR" currency="EUR">950.00</price></pricelist><miles/></course>