Configure pipelines to securely use variables and parameters

Intermediate
Administrator
Developer
DevOps Engineer
Security Engineer
Security Operations Analyst
Solution Architect
Student
Support Engineer
Azure
Azure Artifacts
Azure Cloud Services
Azure DevOps
Azure Pipelines
Azure Repos

This module is designed to help learners understand the importance of configuring pipelines to use variables and parameters securely in Azure DevOps. The module covers fundamental concepts and best practices for ensuring that parameters and variables retain their type, identifying and restricting insecure use of parameters and variables, moving parameters into a YAML file that protects their type, limiting variables that can be set at queue time, and validating that mandatory variables are present and set correctly.

Learning objectives

In this module, you practice how to:

  • Ensure that parameters and variables retain their type.
  • Identify and restrict insecure use of parameters and variables.
  • Move parameters into a YAML file that protects their type.
  • Limit variables that can be set at queue time.
  • Validate that mandatory variables are present and set correctly in Azure DevOps.

Prerequisites

  • Basic knowledge of Azure Pipelines and YAML.