Module 1: Configure a project and repository structure to support secure pipelines.
This module is designed to help learners understand the importance of configuring a secure project and repository structure to support pipelines in Azure DevOps. The module covers fundamental concepts and best practices for organizing the project and repository structure and moving the security repository away from the application project.

Introduction
Organize project and repository structure.
Configure secure projects and repositories.
Lab - Configure a project and repository structure to support secure pipelines.
Knowledge check
Summary

Module 2: Configure secure access to pipeline resources
This module is designed to help learners understand the importance of pipeline security and how to secure pipeline resources using Azure DevOps. The module covers fundamental concepts and best practices for secure agent pools, secret variables, files and storage, service connections, environments, and repositories.

Introduction
Configure agent pools.
Use secret variables and variable groups.
Understand secure files.
Configure service connections.
Manage environments.
Secure repositories
Lab - Configure agents and agent pools for secure pipelines.
Knowledge check
Summary

Module 3: Manage identity for projects, pipelines, and agents.
This module is designed to help learners understand the importance of managing identity for projects, pipelines, and agents in Azure DevOps. The module covers fundamental concepts and best practices for configuring a Microsoft-hosted pool, configuring agents for projects, configuring agent identities, configuring the scope of a service connection, and converting to a managed identity.

Introduction
Configure a Microsoft-hosted pool.
Configure agents for projects.
Configure agent identities.
Configure the scope of a service connection.
Understand and convert to a Managed Identity
Lab - Manage identity for projects and pipelines.
Knowledge check
Summary

Module 4: Configure and validate permissions.
This module covers fundamental concepts and best practices for configuring and validating user permissions, pipeline permissions, approval and branch checks, and auditing and managing permissions.

Introduction
Configure and validate user permissions.
Configure and validate pipeline permissions.
Configure and validate approval and branch checks.
Manage and audit permissions.
Lab - Configure and validate permissions.
Knowledge check
Summary

Module 5: Extend a pipeline to use multiple templates.
This module is designed to help learners understand the importance of extending a pipeline to multiple templates and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for creating nested templates, rewriting the main deployment pipeline, configuring the pipeline and the application to use tokenization, removing plain text secrets, restricting agent logging, and identifying and conditionally removing script tasks.

Introduction
Create a nested template.
Rewrite the main deployment pipeline.
Configure the pipeline and the application to use tokenization.
Remove plain text secrets.
Restrict agent logging.
Identify and conditionally remove script tasks.
Lab - Extend a pipeline to use multiple templates.
Knowledge check
Summary

Module 6: Configure secure access to Azure Repos from pipelines.
This module is designed to help learners understand the importance of securing access to Azure Repos from pipelines and how to do it using Azure DevOps. The module covers fundamental concepts and best practices for securing access to packages, credential secrets, secrets for services, and Azure Key Vault.

Introduction
Configure pipeline access to packages.
Configure pipeline access to credential secrets.
Configure pipeline access to secrets for services.
Use Azure Key Vault to secure secrets.
Explore and secure log files.
Lab - Integrate Azure Key Vault with Azure Pipelines
Knowledge check
Summary

Module 7: Configure pipelines to securely use variables and parameters.
This module is designed to help learners understand the importance of configuring pipelines to use variables and parameters securely in Azure DevOps. The module covers fundamental concepts and best practices for ensuring that parameters and variables retain their type, identifying and restricting insecure use of parameters and variables, moving parameters into a YAML file that protects their type, limiting variables that can be set at queue time, and validating that mandatory variables are present and set correctly.

Introduction
Ensure parameter and variable types.
Identify and restrict insecure use of parameters and variables.
Move parameters into a YAML file.
Limit queue time variables.
Validate mandatory variables.
Lab - Configure pipelines to securely use variables andparameters.
Knowledge check
Summary

AZ-2001: Implement Security Through A Pipeline Using Azure DevOps