Setup Azure DevOps Workload Identity Federation using Azure Bicep

In this blog, you will learn how to set up and configure Azure DevOps service connections using workload identity federation through a user-assigned managed identity via an Azure Bicep deployment. This blog covers: A high-level design of how the Azure DevOps services connections are created using Azure Bicep The requirements needed to succesfully configure Azure … Continue reading Setup Azure DevOps Workload Identity Federation using Azure Bicep →

Use service connection approvals to elevate Azure DevOps deployment security

In DevOps, the focus is primarily on automation and having dependable deployments. However, sometimes human intervention is necessary, particularly for deployments to critical environments like production or other business-critical systems. Azure DevOps has some measures that you can configure to implement these controls through approvals and checks. Azure DevOps has some measures that you can … Continue reading Use service connection approvals to elevate Azure DevOps deployment security →

Lint Azure Bicep templates in Azure DevOps

Stable, scalable and secure infrastructure as code is important to have a performing Azure environment. As organisations adopt Infrastructure as Code (IaC) to automate and manage their cloud resources, the need for maintaining code quality and enforcing best practices becomes important. This is where Azure Bicep linting comes into play, especially when integrated with Azure … Continue reading Lint Azure Bicep templates in Azure DevOps →

The “Awesome Azure DevOps” community repository

Are you looking for a curated list of Azure DevOps blogs, videos, or podcast content? Then this post is for you. I have bundled helpful Microsoft official and community-created Azure DevOps content and listed them on GitHub. Repository The goal of this repository is to have a central place with awesome Azure DevOps content. So … Continue reading The “Awesome Azure DevOps” community repository →

Secret scanning in Azure DevOps with Defender for DevOps

In this blog, I am writing about Defender for DevOps and Microsoft DevOps Security. This blog explains the required steps on how to configure Defender for DevOps to make your code more secure with secret scanning. What is Defender for DevOps? Microsoft Defender for DevOps is a new addition to Defender for Cloud. At the … Continue reading Secret scanning in Azure DevOps with Defender for DevOps →