Implement Security Through Pipelines with DevOps: Strengthen Your Development Process.

Learn how to integrate security into every stage of your development lifecycle with this course on implementing security through pipelines using DevOps. Designed for DevOps professionals and security engineers, this Microsoft Applied Skills credential teaches you to automate security practices and ensure your applications are protected from vulnerabilities.

Gain hands-on experience in securing pipelines, detecting threats early, and enhancing the overall security posture of your DevOps workflows.

Microsoft Applied Skills – the new credentials to verify in-demand technical skills. Get trained and certified in 2024 with Microsoft Malaysia’s Learning Partner of the Year 2024 today.

Overview

Validate your technical skills and open doors to new possibilities of advancement with Microsoft Applied Skills.

This learning path helps you prepare for the Implement security through a pipeline assessment using Azure DevOps. Learn how to configure and secure Azure Pipelines. You’ll also get opportunities to practice hands-on skills. These skills include configuring secure access to pipeline resources, configuring, and validating permissions, configuring a project and repository structure, extending a pipeline, configuring pipelines to use variables and parameters securely, and managing identity for projects, pipelines, and agents.

The opportunity is yours to lead the era of AI with Microsoft. Power your organization’s AI transformation with Microsoft Cloud. The AI you can trust.

Skills Covered

  • Configure secure access to pipeline resources
  • Configure and validate permissions
  • Configure a project and repository structure to support secure pipelines
  • Extend a pipeline to use multiple templates
  • Manage identity for projects, pipelines, and agents

Prerequisites

  • An Azure Subscription. You need to bring your own subscription.
  • Basic knowledge of Azure DevOps.
  • Basic knowledge of security concepts like identities and permissions.
  • Experience using the Azure portal to create resources like Azure Key Vault and set permissions.

Target Audience

  • Administrator

Course Curriculum

Module 1: Configure a project and repository structure to support secure pipelines

This module is designed to help learners understand the importance of configuring a secure project and repository structure to support pipelines in Azure DevOps. The module covers fundamental concepts and best practices for organizing the project and repository structure and moving the security repository away from the application project.

Learning objectives

In this module, you practice how to:

  • Separate a project into team projects and repositories.
  • Separate secure files between projects.
  • Move the security repository away from a project.
  • Assign project and repository permissions.
  • Organize a project and repository structure.

Prerequisites

  • Basic knowledge of Azure DevOps to manage projects and repositories.
  • Basic knowledge of security concepts for project repositories.

Module 2: Configure secure access to pipeline resources

This module is designed to help learners understand the importance of pipeline security and how to secure pipeline resources using Azure DevOps. The module covers fundamental concepts and best practices for secure agent pools, secret variables, files and storage, service connections, environments, and repositories.

Learning objectives

In this module, you practice how to:

  • Identify and mitigate common security threats.
  • Configure pipeline access to specific agent pools.
  • Manage secret variables and variable groups.
  • Secure files and storage.
  • Configure service connections.
  • Manage environments.
  • Secure repositories.

Prerequisites

  • Basic knowledge of Azure DevOps to manage agents and service connections.
  • Basic knowledge of security concepts like secret variables and secure files.

Module 3: Manage identity for projects, pipelines, and agents

This module is designed to help learners understand the importance of managing identity for projects, pipelines, and agents in Azure DevOps. The module covers fundamental concepts and best practices for configuring a Microsoft-hosted pool, configuring agents for projects, configuring agent identities, configuring the scope of a service connection, and converting to a managed identity.

Learning objectives

In this module, you practice how to:

  • Configure a Microsoft-hosted pool.
  • Configure agents for projects.
  • Configure agent identities.
  • Configure the scope of a service connection.
  • Convert to a managed identity in Azure DevOps.

Prerequisites

  • Basic knowledge of Azure DevOps to manage agents and service connections.
  • Basic knowledge of security concepts like agent identities and managed identity.
  • Experience using the Azure portal to create managed identities.

Module 4: Configure and validate permissions

This module covers fundamental concepts and best practices for configuring and validating user permissions, pipeline permissions, approval and branch checks, and auditing and managing permissions.

Learning objectives

In this module, you practice how to:

  • Configure and validate user permissions.
  • Configure and validate pipeline permissions.
  • Configure and validate approval and branch checks.
  • Manage and audit permissions in Azure DevOps.

Prerequisites

  • Basic knowledge of Azure DevOps to manage branches.
  • Basic knowledge of security concepts like user and pipeline permissions.

Module 5: Extend a pipeline to use multiple templates

This module is designed to help learners understand the importance of extending a pipeline to multiple templates and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for creating nested templates, rewriting the main deployment pipeline, configuring the pipeline and the application to use tokenization, removing plain text secrets, restricting agent logging, and identifying and conditionally removing script tasks.

Learning objectives

In this module, you practice how to:

  • Create nested templates.
  • Rewrite the main deployment pipeline.
  • Configure the pipeline and the application to use tokenization.
  • Remove plain text secrets.
  • Restrict agent logging.
  • Identify and conditionally remove script tasks in Azure DevOps.

Prerequisites

  • Basic knowledge of Azure Pipelines and YAML.
  • Basic knowledge of security concepts for pipelines.
  • Experience with application logs and troubleshooting.

Module 6: Configure secure access to Azure Repos from pipelines

This module is designed to help learners understand the importance of securing access to Azure Repos from pipelines and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for securing access to packages, credential secrets, secrets for services, and Azure Key Vault.

Learning objectives

In this module, you practice how to:

  • Configure pipeline access to packages.
  • Configure credential secrets, and secrets for services.
  • Ensure that the secrets are in the Azure Key Vault.
  • Ensure that secrets aren’t in the logs.

Prerequisites

  • Basic knowledge of Azure Pipelines and YAML.
  • Basic knowledge of security concepts like Azure Key Vault and permissions.

Module 7: Configure pipelines to securely use variables and parameters

This module is designed to help learners understand the importance of configuring pipelines to use variables and parameters securely in Azure DevOps. The module covers fundamental concepts and best practices for ensuring that parameters and variables retain their type, identifying and restricting insecure use of parameters and variables, moving parameters into a YAML file that protects their type, limiting variables that can be set at queue time, and validating that mandatory variables are present and set correctly.

Learning objectives

In this module, you practice how to:

  • Ensure that parameters and variables retain their type.
  • Identify and restrict insecure use of parameters and variables.
  • Move parameters into a YAML file that protects their type.
  • Limit variables that can be set at queue time.
  • Validate that mandatory variables are present and set correctly in Azure DevOps.

Prerequisites

  • Basic knowledge of Azure Pipelines and YAML.

Dates & Locations

Let’s make it work for you

Can’t find a date that fits? Need to train your whole team? Looking for a discount?
Speak to one of our learning experts today.

x Clear all selections

July 15, 2026 - July 15, 2026

Location: Kuala Lumpur
Modal: ILT
Availability: TBC
RM 1200

July 15, 2026 - July 15, 2026

Location: Online
Modal: VILT
Availability: TBC
RM 1200

October 14, 2026 - October 14, 2026

Location: Kuala Lumpur
Modal: ILT
Availability: TBC
RM 1200

October 14, 2026 - October 14, 2026

Location: Online
Modal: VILT
Availability: TBC
RM 1200
Trainocate exam and cert

Exam & Certification

To earn this Microsoft Applied Skills credential, learners demonstrate the ability to implement secure Azure Pipelines.

Candidates for this credential should be familiar with continuous integration and continuous deployment (CI/CD) tools, including Azure Pipelines.

Tasks performed

  • Configure secure access to pipeline resources
  • Configure and validate permissions
  • Configure a project and repository structure to support secure pipelines
  • Extend a pipeline to use multiple templates
  • Manage identity for projects, pipelines, and agents

Training & Certification Guide

In-demand Cloud Technology Skills – Insights from Malaysia’s Job Market

As Malaysia accelerates its digital transformation journey, cloud technology has emerged as a critical component of the nation’s economic growth. The adoption of cloud services is driving innovation across various sectors, from finance to manufacturing, and creating a robust demand for skilled cloud professionals.

This article dives into the most in-demand cloud technology skills in Malaysia, backed by market data and insights from industry reports, and highlights the key roles that are shaping the future of cloud technology.

Master Your Cloud Career: Essential Azure Certifications for 2024

Targeting the most valuable Azure certifications for 2024? In the evolving landscape of cloud computing, Azure certifications stand out by offering professionals the leverage to thrive. This article presents a focused rundown of crucial Azure certifications, shining a light on their career-boosting effects and elucidating steps to get certified. No fluff – just actionable insights to empower your journey in the cloud.

AI Mastery Program: Learn AI with Microsoft in 2024

Artificial Intelligence (AI) has been one of the hottest topics in the tech industry for the past decade. With its rapid advancements and potential to impact our daily lives, learning AI has become a highly sought-after skill.

We are thrilled to announce the launch of our Microsoft AI Mastery Program in 2024, made possible through our partnership with Microsoft, a renowned leader in AI technology. This program is tailored for individuals and tech professionals passionate about acquiring and mastering the fundamental and advanced principles of AI.

Azure Strategy & Implementation Guide

Get a step-by-step introduction to using Azure for your cloud infrastructure with this Pack e-book. Read the latest edition of the Azure Strategy and Implementation Guide for detailed guidance on how to create a successful cloud adoption strategy with new innovations, capabilities, and security features from Microsoft Azure.

Microsoft Azure SQL Jumpstart Guide

Find out how to get started launching your first Azure SQL database or find ways to make your existing SQL database work harder. Download the Azure SQL Jumpstart Guide for detailed instructions and in-depth insights to help you make your Azure SQL deployment, migration, or enhancement run smoothly.

Low-code Application Development – Microsoft PowerApps and Azure

Build production-ready apps faster with a low-code environment. Quickly stand up your applications with Power Apps and get more time to apply your technical expertise to extending and optimizing those apps in Azure.

Azure Cloud Native Architecture Mapbook

Grow your cloud architecture skills with guidance from Azure Experts. Go beyond developing cloud-native applications to planning and implementing cloud application infrastructure. In this free e-book from Packt Publishing, you’ll find best practices for infrastructure design and patterns for building a complete solution.

Windows Virtual Desktop Security

Find out how to secure your Windows Virtual Desktop environment when migrating your virtual desktop infrastructure (VDI) to Azure. Read this security handbook to get technical hands-on guidance on how to help protect your apps and data in your Windows Virtual Desktop deployment.

An Easier Path to the Cloud

Discover how to get more value from your on premises Windows Server and SQL Server investments and move some or all of your workloads to the cloud using your existing skills. See how to start using the cloud to support new ways of doing business and help ensure business continuity even if you need to keep some of your IT assets on-premises due to regulatory or data governance requirements.

Hands-on Kubernetes on Azure

Discover how to build highly scalable applications using containers and how to deploy and manage those containers at scale with Kubernetes on Azure. Read the completely reviewed and updated Packet e-book, Hands-On Kubernetes on Azure, Third Edition and discover what’s new, including security enhancements, continuous integration and continuous delivery (CI/CD) automation, and the latest supported technologies. Gain insight into building reliable applications in the new foreword by Kubernetes co-founder Brendan Burns.

Azure Synapse Analytics Proof of Concept Playbook

Learn how to perform a proof of concept efficiently and economically with Azure Synapse Analytics. Read the Azure Synapse Analytics Proof of Concept Playbook to understand the key concepts involved in deploying data warehousing, data lake, and big data workloads with Azure Synapse and get the evidence you need to make the case for implementation at your organization.

Azure Serverless Cookbook

Spend less time managing server infrastructure and more time building great apps. Get your solutions to market faster using Azure Functions, a fully managed compute platform for processing data, integrating systems, and building simple APIs and microservices. The Azure Serverless Computing Cookbook will, through the development of basic back-end wep API that performs simple operations, helps you understand how to persist data in Azure Storage services.

Frequently Asked Questions

Speak to a Training Consultant

All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631

Preferred mode of training
Checkboxes