Don't Destroy Your Datacenter with Azure DevOps

on YouTube ↗39m

" summary

Azure DevOps often ships without Azure AD auditing enabled so connect the org to Azure Active Directory, turn on log audit events (default retention 90 days) and stream to a SIEM for long term alerting. Use branch lock main branch plus branch policies and require approvers. Create service connections constrained to resource group scope (avoid hidden subscription‑wide grants), prefer the automatic service principal, and audit role/owner assignments and managed identities.

AI-written summary · about

" chapters (16)

1. 0:00Introduction
2. 1:04Why this talk matters
3. 3:31Protect data code infrastructure
4. 5:17Know privileged accounts
5. 9:09Azure AD security basics
6. 13:02Auditing Azure DevOps limits
7. 15:07Azure DevOps to Azure AD
8. 19:46Branch policies security
9. 25:01Azure locks protection
10. 26:24Evaluate Azure connections
11. 28:14Connection scope dangers
12. 31:31Monitor connection changes
13. 33:56Organizational risks
14. 34:41Setup recommendations
15. 37:28Summary
16. 37:48Q&A

" related talks

• 46mLet Azure control your DevOps PipelinesPeter De Tender · PowerShell + DevOps Global Summit 2022
• 42mAzure DevOps security - Lessons learnedBjörn Sundling · Øredev 2025
• 52mImplement DevSecOps in AzureVictoria Almazova · NDC Porto 2019
• 34mDevOps from an Auditor’s Perspective: A Meaningful Partnership to Drive Business TransformationYosef Levine, John Waters · DevOps Enterprise Summit London 2019
• 56mSecuring organizations pipelines and integrations in Azure DevOps Q&AOlivia Shea, Tim Fish, Dave Burnison, Aaron Hallberg, Vijay Machiraju, Rajesh Ramamurthy · Microsoft Build 2023
• 01h 05mCreating Azure SQL Database Users Programmatically using Azure DevOpsRob Sewell · Global Azure 2021
• 01h 03mA lap around Azure DevopsJakob Ehn · NDC London 2019
• 25mSecuring Your DevOps TransformationApril Edwards · devopsdays Amsterdam 2020