You are connecting Azure Pipelines to your Azure subscription to deploy resources. To improve security and eliminate the need to manage and rotate client secrets for service principals, which authentication method should you use for your Azure Resource Manager service connection?

Question

Sunny · Accepted Answer

Workload Identity Federation. Workload Identity Federation allows Azure Pipelines to authenticate to Azure without storing or managing secrets/certificates. It establishes a trust relationship using OpenID Connect (OIDC). Azure DevOps issues a short-lived token which Azure AD validates, significantly improving security posture by eliminating long-lived credentials.

You are connecting Azure Pipelines to your Azure subscription to deploy resources. To improve security and eliminate the need to manage and rotate client secrets for service principals, which authentication method should you use for your Azure Resource Manager service connection?

You are connecting Azure Pipelines to your Azure subscription to deploy resources. To improve security and eliminate the need to manage and rotate client secrets for service principals, which authentication method should you use for your Azure Resource Manager service connection?

📚 What This Question Tests

More Security and Compliance Practice Questions